BSD Commit Log Search

   doc: Updated www/chromium to 146.0.7680.153

   www/chromium: update to 146.0.7680.153

   * 146.0.7680.153
   This update includes 26 security fixes. Please see the
   Chrome Security Page for more information.
   [TBD][475877320] Critical CVE-2026-4439: Out of bounds memory access
   in WebGL. Reported by Goodluck on 2026-01-15
   [TBD][485935305] Critical CVE-2026-4440: Out of bounds read and write
   in WebGL. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-02-20
   [TBD][489381399] Critical CVE-2026-4441: Use after free in Base.
   Reported by Google on 2026-03-03
   [TBD][484751092] High CVE-2026-4442: Heap buffer overflow in CSS.
   Reported by Syn4pse on 2026-02-16
   [TBD][485292589] High CVE-2026-4443: Heap buffer overflow in WebAudio.
   Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-02-18
   [TBD][486349161] High CVE-2026-4444: Stack buffer overflow in WebRTC.
   Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-02-21
   [TBD][486421953] High CVE-2026-4445: Use after free in WebRTC.
   Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-02-22

    [40 lines not shown]

   doc: Updated www/nghttp2-tools to 1.68.1

   nghttp2-tools: update to 1.68.1.

   Same as nghttp2

   doc: Updated www/nghttp2 to 1.68.1

   nghttp2: update to 1.68.1.

   CVE-2026-27135: Denial of service: Assertion failure due to the missing state validation

   doc: Updated security/py-asn1 to 0.6.3

   py-asn1: update to 0.6.3.

   Security fix release.

   Revision 0.6.3, released 16-03-2026
   ---------------------------------------

   - CVE-2026-30922 (GHSA-jr27-m4p2-rc6r): Added nesting depth
     limit to ASN.1 decoder to prevent stack overflow from deeply
     nested structures (thanks for reporting, romanticpragmatism)
   - Fixed OverflowError from oversized BER length field
     [issue #54](https://github.com/pyasn1/pyasn1/issues/54)
     [pr #100](https://github.com/pyasn1/pyasn1/pull/100)
   - Fixed DeprecationWarning stacklevel for deprecated attributes
     [issue #86](https://github.com/pyasn1/pyasn1/issues/86)
     [pr #101](https://github.com/pyasn1/pyasn1/pull/101)
   - Fixed asDateTime incorrect fractional seconds parsing
     [issue #81](https://github.com/pyasn1/pyasn1/issues/81)
     [pr #102](https://github.com/pyasn1/pyasn1/pull/102)

   doc: Updated security/py-OpenSSL to 26.0.0

   py-OpenSSL: update to 26.0.0.

   Security fix release.

   26.0.0 (2026-03-15)
   -------------------

   Backward-incompatible changes:
   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

   - Dropped support for Python 3.7.
   - The minimum ``cryptography`` version is now 46.0.0.

   Deprecations:
   ^^^^^^^^^^^^^

   Changes:
   ^^^^^^^^


    [4 lines not shown]

   upclient: Fix accidental part of previous commit.

   upclient: Various fixes for recent gcc.

   wireguard-tools: Needs socket lib on SunOS

   tcpslice: Fix implicit decl of exit(3)

   tspc: Fix implicit function decls

   poptop: Fixes for recent GCC

   sipcalc: Fix implicit decl of bzero(3)

   p5-IO-Interface: Fix on SunOS w/ recent gcc

   ser: Recent GCC no longer likes implicit int.

   sdig: Fix build with recent GCC

   - Wrong number of arguments to function. This is problematic on all
     systems with GCC 14 or newer.
   - Incorrect header for bzero. This is problematic on non-BSD systems.

   doc: Updated pkgtools/lintpkgsrc to 2026.03.21

   lintpkgsrc: minor error handling and doc fixes

   If unable to unlink a file, report this. While here, also fix incorrect
   substitutions in the man page generation.

   doc: Updated x11/kitty to 0.46.1

   kitty: update to 0.46.1

   Package changes:
   - upstream updated to use go 1.26.0

   Upstream changes:
   - smooth scrolling and momentum based scrolling for a natural,
     smooth and kinetic scrolling experience
   - drag kitty tabs around with the mouse to re-order them, move them
     to another kitty OS Window or even detach them into their own OS
     Window
   - resize kitty windows (aka splits) with the mouse
   - many bug fixes

   kf6-prison update

   /kf6-prison: update to 6.24.0

   update ahead of the rest of KDE Frameworks so that works with zxing-cpp 3.x

   nbtscan: Fix implicit decl of bzero(3)

   netpipes: Fix implicit decl of string funcs

   miruo: Fix implicit decl of ctype funcs

   modpcap: Fix implicit decl of bzero(3)