afl++: update to 5.03c.
### Version ++5.03c (release)
! Value Profile implementation for AFL++ by Khaled Yakdan (@kyakdan) that
is much more efficient and intelligent than the libfuzzer implementation.
Enable in the fuzz target with `AFL_LLVM_VALUE_PROFILE=1` and enable for
afl-fuzz with `-r <seconds>` when to activate (default off)
! macOS now uses POSIX shared memory instead of SysV, which lifts the
`kern.sysv.shmseg` / `kern.sysv.shmmax` ceilings (CmpLog alone needs a
145 MB segment, far past the 4 MB macOS default). !!! You need to
recompile your targets on macOS - a target built by an older afl-cc still
expects a SysV id in `__AFL_SHM_ID` !!!
afl-fuzz
- big change: limits before switching modes is not time based but exec based now.
- fix: shmem leakage on target timeouts and crashes - this has been the case
since vanilla AFL. Now fixed for Linux, MacOS and mmap targets.
- for more variability, a "starved" mode is implemented now. If for a longer
time no finds are found, then more seed and mutation variability is
introduced incl. splicing phase enabled. This is visible in the UI.
[273 lines not shown]
textproc/scooter: update to 0.10.0
New features:
Support files that aren't UTF-8, such as Latin-1 by @thomasschafer in #447
Make ^ and $ match at line boundaries in multiline mode by @thomasschafer in #449
Bug fixes:
Fix stale previews after files change by @thomasschafer in #448
Fix open-in-editor panic with no results by @thomasschafer in #424
Other changes:
Harden CI workflow permissions by @thomasschafer in #420
Bump Rust toolchain to 1.97 by @thomasschafer in #437
Fix Linux musl release builds after rs-cargo v4 upgrade by @thomasschafer in #453
Bump various deps
devel/gitlogue: update to 0.12.0
✨ Features
feat: return to waiting screen after watch playback finishes (784f6e5)
feat: add watch mode to replay new commits as they are made (9cfdddf)
🐛 Bug Fixes
fix: respect pause and detached checkouts in watch mode (3b7f372)
fix: redraw when UI state changes without animation progress (8a7158b)
fix(ci): fail Homebrew SHA step on HTTP errors (9a27f93)
📝 Other Changes
chore: bump version to v0.12.0 (06a19b7)
refactor: show waiting screen instead of startup HEAD in watch mode (f89347f)
chore(deps): bump rand from 0.10.2 to 0.10.3 (c2d782c)
chore(deps): bump toml_edit (76d7e99)
[5 lines not shown]
shells/oh-my-posh: update to 31.8.0
Bug Fixes
agents: scaffold segments with the options API (a53437e)
Features
agents: block new else branches in the stop hook (fb4fc6e)
devel/g-wrap: Remove
Upstream stopped maintenance years ago and recommends that it no
longer be used. No depending packages, and no objections on
pkgsrc-users.
*cups*: update to 2.4.20
v2.4.20 - 2026-10-05
--------------------
- SECURITY-5.7: The scheduler did not open temporary PPD files in exclusive
mode (CVE-2026-55480)
- SECURITY-5.5: The scheduler did not remove all job status attributes from a
job creation request (GHSA-7j85-5r23-xhvh)
- SECURITY-5.3: The scheduler did not validate the request language value
(CVE-2026-61702)
- SECURITY-4.6: Attribute names were not validated as proper keyword values
(GHSA-w9hj-hq9p-m7f6)
- SECURITY-4.3: The `cupsUTF32toUTF8` function incorrectly treated UTF-32
values as 64-bit (CVE-2026-87875)
- SECURITY-4.1: Held jobs for temporary print queues could crash the scheduler
(GHSA-qqm8-4q5h-jg55)
- SECURITY-3.3: The backend did not sanitize IPP attribute strings
(CVE-2026-55453)
[58 lines not shown]
