NetBSD/pkgsrc 9eUpHs8doc pkg-vulnerabilities

   pkg-vulnerabilities: Remove libxml2 entry for CVE-2025-12863

   The CVE was rejected on 2025-11-20, see
   <https://gitlab.gnome.org/GNOME/libxml2/-/issues/1012#note_2608283>.

   Via PR pkg/60591 from Showta Ishizaki, thanks!
VersionDeltaFile
1.779+1-2doc/pkg-vulnerabilities
+1-21 files

NetBSD/pkgsrc YO0HWWedoc pkg-vulnerabilities

   pkg-vulnerabilities: Update libxml2 entries fixed in 2.15.2

   Via PR pkg/60591 from Showta Ishizaki, thanks!
VersionDeltaFile
1.778+6-6doc/pkg-vulnerabilities
+6-61 files

NetBSD/pkgsrc YPcHFjQdoc pkg-vulnerabilities

   pkg-vulnerabilities: CVE-2025-69720 was fixed in ncurses-6.6

   According upstream NEWS it was fixed in 20251213 and 6.6 was released
   on 20251230.

   Reported via PR pkg/60589 from Showta Ishizaki, thanks!
VersionDeltaFile
1.777+2-2doc/pkg-vulnerabilities
+2-21 files

NetBSD/pkgsrc 0Gve365doc CHANGES-2026

   doc: Updated security/ca-certificates to 20260601
VersionDeltaFile
1.5289+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc M31G9d2security/ca-certificates Makefile distinfo

   ca-certificates: Update to 20260601

   ca-certificates (20260601) unstable; urgency=medium

     * Remove ca-certificates-local example (closes: #988912, #1127101).
     * Update Mozilla certificate authority bundle to version 2.86
       The following certificate authority was added (+):
       + e-Szigno TLS Root CA 2023
       The following certificate authorities were removed (-):
       - QuoVadis Root CA 2
       - QuoVadis Root CA 3
       - DigiCert Assured ID Root CA
       - DigiCert Global Root CA
       - DigiCert High Assurance EV Root CA
       - SwissSign Gold CA - G2
       - SecureTrust CA
       - Secure Global CA
       - COMODO Certification Authority
       - Certigna

    [18 lines not shown]
VersionDeltaFile
1.10+3-26security/ca-certificates/PLIST
1.15+4-4security/ca-certificates/distinfo
1.18+2-2security/ca-certificates/Makefile
+9-323 files

NetBSD/pkgsrc Oj42lcydoc CHANGES-2026

   doc: Added net/rrsync version 3.5.0
VersionDeltaFile
1.5288+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc MfXcyZQnet Makefile, net/rrsync PLIST distinfo

   Add net/rrsync
VersionDeltaFile
1.1+40-0net/rrsync/Makefile
1.1+6-0net/rrsync/DESCR
1.1+5-0net/rrsync/distinfo
1.1640+2-1net/Makefile
1.1+3-0net/rrsync/PLIST
+56-15 files

NetBSD/pkgsrc 5jTrTbXdoc CHANGES-2026

   doc: Added textproc/py-braceexpand version 0.1.7
VersionDeltaFile
1.5287+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc Ly008VQtextproc Makefile, textproc/py-braceexpand distinfo DESCR

   Add textproc/py-braceexpand
VersionDeltaFile
1.1+18-0textproc/py-braceexpand/Makefile
1.1+11-0textproc/py-braceexpand/PLIST
1.1+7-0textproc/py-braceexpand/DESCR
1.1+5-0textproc/py-braceexpand/distinfo
1.1599+2-1textproc/Makefile
+43-15 files

NetBSD/pkgsrc DucpDp4doc TODO CHANGES-2026

   doc: Updated net/croc to 11.1.0
VersionDeltaFile
1.27748+1-2doc/TODO
1.5286+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc pEGS1q7net/croc PLIST Makefile

   croc: Update to 11.1.0

   What's Changed
   fix: --store rendering by @schollz in #1233
   fix unbounded stored-transfer lock state by @abhinavgulisetty in #1238
   feat: allow sending to multiple users Fixes #1130 by @schollz in #1239
VersionDeltaFile
1.3+193-187net/croc/distinfo
1.3+63-61net/croc/go-modules.mk
1.33+5-5net/croc/Makefile
1.2+2-1net/croc/PLIST
+263-2544 files

NetBSD/pkgsrc 2Zj4Hgsdoc TODO

   doc/TODO: + croc-11.0.3, samba4-4.24.6.
VersionDeltaFile
1.27747+3-1doc/TODO
+3-11 files

NetBSD/pkgsrc DPs068Adoc CHANGES-2026

   doc: Updated emulators/PC6001VX to 4.4.0
VersionDeltaFile
1.5285+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc 25pVjk7emulators/PC6001VX options.mk distinfo, emulators/PC6001VX/patches patch-src_console.cpp patch-CMakeLists.txt

   PC6001VX: update to 4.4.0

   pkgsrc changes:

   - update definitions for cmake per upstream changes
   - make NOJOYSTIC, NOAVI, NOMONITOR, and DELAY_TIMER_MS_DEFAULT values
     configurable in CMakefile.txt
   - switch to using ffmpeg8 to sync version with qt6-qtmultimedia
   - remove unnecessary qt6-qt5compat that should have be removed since 4.3.0
   - remove unnecessary obsolete definitions
   - remove a patch fixed in upstream

   Upstream changes:
    https://eighttails.seesaa.net/article/521347022.html
    https://github.com/eighttails/PC6001VX/blob/v4.4.0/README.adoc#%E6%9B%B4%E6%96%B0%E5%B1%A5%E6%AD%B4

   4.4.0 2026/08/15

   PC6001VX 4.4.0 release

    [7 lines not shown]
VersionDeltaFile
1.1+139-0emulators/PC6001VX/patches/patch-CMakeLists.txt
1.126+8-12emulators/PC6001VX/Makefile
1.7+5-5emulators/PC6001VX/options.mk
1.55+5-5emulators/PC6001VX/distinfo
1.2+1-1emulators/PC6001VX/patches/patch-src_console.cpp
+158-235 files

NetBSD/pkgsrc w5bAFDMdoc CHANGES-2026

   doc: Updated www/chromium to 151.0.7922.137
VersionDeltaFile
1.5284+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc mXGWk6Swww/chromium Makefile distinfo

   chromium: update to 151.0.7922.137

   * 151.0.7922.137
   This update includes 5 security fixes. Please see the Chrome Security Page for more information.

   [$500][535000102] High CVE-2026-19556: Use after free in V8. Reported by Jihyeon Jeong (Compsec Lab, Seoul National University / Research Intern) on 2026-07-15
   [N/A][534867485] High CVE-2026-19557: Use after free in TabStrip. Reported by Google on 2026-07-14
   [N/A][536676756] High CVE-2026-19558: Use after free in Extensions. Reported by @bean5oup on 2026-07-20
   [N/A][540100588] High CVE-2026-19559: Use after free in HTML. Reported by Google on 2026-07-28
   [N/A][540482895] High CVE-2026-19560: Use after free in Blink. Reported by WinD39 - Huynh Dinh Vu on 2026-07-30
VersionDeltaFile
1.55+9-9www/chromium/distinfo
1.73+2-2www/chromium/Makefile
+11-112 files

NetBSD/pkgsrc NlF4TGzdevel/guile-slib PLIST Makefile, devel/guile22-slib Makefile

   guile-slib: Convert to Makefile.common

   Override PKGNAME to be guile-slib, instead of the guile20-slib that it
   ought to be, to avoid dealing with changing it for now.

   Works as well as the old package does, which is:
VersionDeltaFile
1.60+7-43devel/guile-slib/Makefile
1.18+3-3devel/guile-slib/PLIST
1.4+3-2devel/guile30-slib/Makefile.common
1.13+1-3devel/guile22-slib/Makefile
+14-514 files

NetBSD/pkgsrc ipaLXKLdevel/guile-slib Makefile, devel/guile22-slib PLIST Makefile

   devel/guile22-slib: Convert to Makefile.common

   Replace the guile22-slib Makefile with an include of Makefile.common.

   guile30-slib: Restore load path env variable, but point it to destdir,
   so that the catalog can find slib when the symlink exists in the
   being-built destdir but does not exist in the system, because the
   package is not yet installed.
VersionDeltaFile
1.12+5-35devel/guile22-slib/Makefile
1.59+1-7devel/guile-slib/Makefile
1.3+6-2devel/guile30-slib/Makefile.common
1.4+3-3devel/guile22-slib/PLIST
+15-474 files

NetBSD/pkgsrc 0GpUAvsdevel/guile30-slib PLIST Makefile.common

   devel/guile30-slib: Rototill installation comments

   Read and explain the contradictory instructions from slib and guile,
   and follow guile's instructions.  Explain to future self everything
   I'm likely to forget, as guided by what I forgot since I last read
   guile-slib several years ago.

   Slightly clean up by dropping an environment variable during catalgo
   build that is not actually used.

   Hoist guile's site dir to variable.
VersionDeltaFile
1.2+68-21devel/guile30-slib/Makefile.common
1.2+3-3devel/guile30-slib/PLIST
+71-242 files

NetBSD/pkgsrc QmD86Iadoc pkg-vulnerabilities

   pkg-vulnerabilities: Update pattern for CVE-2022-0711

   Fixed in 2.6.0, via <https://bugzilla.redhat.com/show_bug.cgi?id=2053666>.
VersionDeltaFile
1.776+2-2doc/pkg-vulnerabilities
+2-21 files

NetBSD/pkgsrc 9pBO2i7doc CHANGES-2026

   doc: Updated databases/lmdb to 1.0.1nb1
VersionDeltaFile
1.5283+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc i9jeiyvdatabases/lmdb Makefile distinfo, databases/lmdb/patches patch-libraries_liblmdb_Makefile

   lmdb: restore usage of LDFLAGS from pkgsrc

   Bump PKGREVISION.
VersionDeltaFile
1.11+12-12databases/lmdb/patches/patch-libraries_liblmdb_Makefile
1.43+2-2databases/lmdb/distinfo
1.30+2-1databases/lmdb/Makefile
+16-153 files

NetBSD/pkgsrc HPpUv5Udevel/meson Makefile

   meson: bump PKGREVISION for rpath/Darwin change
VersionDeltaFile
1.96+2-1devel/meson/Makefile
+2-11 files

NetBSD/pkgsrc TUr6Yerfonts/fontconfig Makefile distinfo, fonts/fontconfig/patches patch-af patch-ac

   fontconfig: since it uses meson, autoconf stuff is unnecessary, so remove it
VersionDeltaFile
1.1+13-0fonts/fontconfig/patches/patch-conf.d_README.in
1.82+2-5fonts/fontconfig/distinfo
1.142+2-3fonts/fontconfig/Makefile
1.4+1-1fonts/fontconfig/patches/patch-af
1.18+1-1fonts/fontconfig/patches/patch-ac
1.20+1-1fonts/fontconfig/patches/patch-aa
+20-111 files not shown
+21-127 files

NetBSD/pkgsrc 6OmlXzUdevel/meson distinfo, devel/meson/patches patch-mesonbuild_scripts_depfixer.py

   meson: remove rpaths on Darwin - fixes shared libraries in pkgsrc
VersionDeltaFile
1.6+6-6devel/meson/patches/patch-mesonbuild_scripts_depfixer.py
1.83+2-2devel/meson/distinfo
+8-82 files

NetBSD/pkgsrc H96dgkAdoc CHANGES-2026

   doc: Updated lang/openjdk21 to 1.21.0.12.8
VersionDeltaFile
1.5282+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc 3eje2Kldoc TODO

   doc/TODO: + pandoc-3.10.2.
VersionDeltaFile
1.27746+2-2doc/TODO
+2-21 files

NetBSD/pkgsrc 8W9HoQYlang/openjdk21 PLIST Makefile, lang/openjdk21/patches patch-make_autoconf_lib-bundled.m4 patch-src_java.desktop_unix_native_libpipewire_include_spa_utils_string.h

   lang/openjdk21: Update to 1.21.0.12.8

   Changelog:
   Updated BSD port of JDK 21

   Additional features include:

       Update to 21.0.12 GA
VersionDeltaFile
1.2+7-8lang/openjdk21/patches/patch-src_java.desktop_unix_native_libpipewire_include_spa_utils_string.h
1.16+6-6lang/openjdk21/distinfo
1.2+4-4lang/openjdk21/patches/patch-make_autoconf_lib-bundled.m4
1.31+2-3lang/openjdk21/Makefile
1.6+2-1lang/openjdk21/PLIST
+21-225 files

NetBSD/pkgsrc qcXQAd6doc CHANGES-2026

   doc: Updated lang/openjdk17 to 1.17.0.20.8
VersionDeltaFile
1.5281+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc 1vLtYvflang/openjdk17 PLIST Makefile, lang/openjdk17/patches patch-make_autoconf_lib-bundled.m4

   lang/openjdk17: Update to 1.17.0.20.8

   Changelog:
   Updated BSD port of JDK 17

   Additional features include:

       Update to 17.0.20 GA
VersionDeltaFile
1.28+4-5lang/openjdk17/distinfo
1.47+2-4lang/openjdk17/Makefile
1.6+2-1lang/openjdk17/PLIST
1.3+1-1lang/openjdk17/patches/patch-make_autoconf_lib-bundled.m4
+9-114 files