libXfont2: update to 2.0.9.
This release contains the fixes for the issues reported in today's security advisory:
https://lists.x.org/archives/xorg-announce/2026-August/003734.html
- CVE-2026-59679: Font Server Client encoding Out-Of-Bounds Read/Write
- CVE-2026-44950: Font Server Client Cumulative Glyph Data Heap Buffer Overflow
Additionally, it changes a build-time default. Previously fontserver support
was compiled in by default unless --disable-fc was provided at configure time.
The new default is *disabled by default* unless --enable-fc is provided at
configure time. Doing so protects us from future fontserver-connection related
issues. Fontservers have been deprecated for many years and the vast majority
of users will not notice this changed default (Debian has built with
--disable-fc for years).
py-fastjsonschema: updated to 2.22.1
2.22.1 (2026-07-27)
* Fixed min Python version
2.22.0 (2026-07-25)
* Fixed IPv4 validation (rejecting leading zeros)
* Fixed empty items and patternProperties
* Fixed protection from deeply nested schemas potentially causing denial of service
* Fixed comparing values for enum and const validations
* Fixed resolving plain-name ref fragments
* Fixed not throwing when unknown format is used
* Fixed compilation of not, if/then/else, items, additionalItems, propertyNames and schema dependencies when a subschema generates no validation code
* Added option to get all the errors (set `fast_fail` to `False`)
* Added basic type hints
* Added support of duration and uuid formats from draft-2019
py-flufl.lock: updated to 9.1.0
9.1.0 (2026-04-24)
* Small refactoring to provide a hook for custom synchronization of clocks in subclasses. (:GL:`40`)
* Switch to `pyrefly <https://pyrefly.org/>`_ for type checking.
py-flufl.bounce: updated to 5.0.1
5.0.1 (2026-05-21)
* Fix a false recognition of Microsoft bounces from the Groupwise detector. :GL:`16`
Found and fixed by Mark Sapiro.
5.0 (2026-05-20)
* Major project management modernization.
* Add Mark as a named co-owner.
* Drop Python 3.9, add Python 3.13, 3.14, and 3.15.
* Added recognition for a non-compliant Earthlink DSN.
* Fixed a long-standing bug in the Caiwireless detector that returned a set of individual address
characters instead of the bouncing address itself, and added a test exercising the previously
buggy return path.
* Replaced deprecated/removed pkg_resources.
* Replaced the ``zope.interface`` dependency with ``typing.Protocol``; the ``IBounceDetector``
marker interface has been renamed to ``BounceDetector``. **This is a backwards incompatible
[5 lines not shown]
*: add LDFLAGS overide that was previously in mk
This is a workaround and should be fixed properly per-package - they
should use the pkgsrc LDFLAGS, but this restores what happened
before the mk/ cleanup.
Fixes relro build for packages that do not honor LDFLAGS.
Package list provided by mef@, thanks!
Workaround commit requested by bsiegert on tech-pkg.
py-cffi: updated to 2.1.1
2.1.1
* Minimize internal Python API usage for interpreter and thread state sampling where possible.
Avoids breaking ABI change in Python >= 3.15.0b4.
tailscale: update to 1.102.1
- tailscaled_serve_outbound_bytes_total and
tailscaled_serve_inbound_bytes_total client metrics report bytes
sent to and received from peers on Tailscale Serve connections for
Tailscale Services.
- The tailscale get CLI command returns the current node's
preferences.
- The tailscale whoami CLI command displays information about the
current user and device.
- The tailscale service list CLI command displays Tailscale Services
visible to the current node.
- Node additions and removals are processed in constant time,
significantly reducing CPU usage on large tailnets.
- Tailscale Funnel domains use TLS-ALPN-01 for faster HTTPS
certificate renewals.
- Deprecated formats for 4via6 MagicDNS names are no longer available
to use.
- TLS certificates on idle servers proactively auto-renew in the
[48 lines not shown]
mlterm: pull upstream window handling fixes
Fix a 3.9.5 regression that sets window manager hints on child windows.
Also move input focus handling for multiple input windows from FocusIn
to WM_TAKE_FOCUS.
Bump PKGREVISION.
