dnsdist: Update to 5.0.4
Changelog
Provider-specific changes:
ee0730f: AKAMAIEDGEDNS: Update edgegrid version to 13.4.0 and update docs to address issue#4202 (#4853) (@meghanakudua02)
e374ee2: HOSTINGDE: Fix SOA mailbox set to 1 at domain (#4858) (@jonathan8devs)
c7067ae: HOSTINGDE: Fix TXT quoting on read and write (#4856) (@jonathan8devs)
Dependencies:
9aeac5f: CHORE: Update dependencies (#4861) (@TomOnTime)
Other changes and improvements:
d258d60: BUG: Fix DMARC_BUILDER TypeScript types for psd= and t= (#4855) (@kytta)
5e4e61e: Release v5.0.4 (#4862) (@TomOnTime)
Deprecation warnings
Warning
REV() will switch from RFC2317 to RFC4183 sometime after v5.0 is released. This is a breaking change.
Warnings are output if your configuration is affected.
See https://docs.dnscontrol.org/language-reference/top-level-functions/revcompat
[2 lines not shown]
textproc/ruby-multi_json: update to 1.21.2
1.21.2 (2026-09-07)
What's Changed
* Bump rubygems/configure-rubygems-credentials from 1.0.0 to 2.1.0 by
@dependabot[bot] in #68
* Bump actions/checkout from 6 to 7 by @dependabot[bot] in #69
* Make multi_json compatible with json 3.x by @byroot in #67
New Contributors
* @dependabot[bot] made their first contribution in #68
resterm: Update to 1.7.0
Editor diagnostics
Diagnostic settings
Variable and expression errors
Unicode text
Response split shortcuts
Other improvements
mail/postfix: update to 3.11.7
3.11.7 (2026-09-08)
This release addresses medium-impact problems that need to be fixed
as some enable remote DOS or SMTP smugggling.
SMTP smuggling:
* Bug (introduced: Postfix 3.9, date: 20240106) SMTP smuggling
was still possible with smtpd_proxy_filter (disabled by default)
when the after-filter SMTP server used the default policy
settings "smtpd_forbid_bare_newline_exclusions = $mynetworks"
and "smtpd_forbid_bare_newline = normalize". Reported by OpenAI
Security. Fix by Wietse.
As suggested by OpenAI Security, eliminate stray CR characters
from the smtpd_proxy_filter input stream. The before-proxy-filter
SMTP server already eliminated stray LF.
[106 lines not shown]
www/typo3-14: update to 13.4.35
13.4.35 (2026-09-08)
This version is a security release and contains important security fixes -
read the corresponding security advisories here:
* TYPO3-CORE-SA-2026-022 / CVE-2026-77132: Information Disclosure via
Backend Localization Wizard
* TYPO3-CORE-SA-2026-023 / CVE-2026-85400: Missing Authorization in lowlevel
commands
www/typo3-13: update to 13.4.35
13.4.35 (2026-08-09)
This version is a security release and contains an important security fix -
read the corresponding security advisory here:
* TYPO3-CORE-SA-2026-022 / CVE-2026-77132: Information Disclosure via
Backend Localization Wizard
py-pdf: updated to 6.18.0
6.18.0, 2026-09-07
Security (SEC)
- Limit allowed length of indirect object tokens
Deprecations (DEP)
- Rework configuration value handling
New Features (ENH)
- Draw borders and backgrounds for appearance streams and annotations
py-pygraphviz: updated to 2.0.1
pygraphviz 2.0.1
Bug Fixes
- Fix graph-level attribute masking node/edge default (gh-563)
- BUG: Use "nop2" instead of "neato -n2" for rendering with pre-computed positions
pygraphviz 2.0
Enhancements
- Add aarch64 wheels for linux to cibuildwheel
- ENH: Export version info from wrapped graphviz
Bug Fixes
- More precise allocation for string copy in SWIG glue
Documentation
[6 lines not shown]
chromium: update to 152.0.7977.82
* 152.0.7977.82
This update includes 12 security fixes. Please see the Chrome Security Page for more information.
[$1,000][542403045] High CVE-2026-85046: Type confusion in V8. Reported by Salvatore Gulizia (nickname: Serotav) on 2026-08-04
[N/A][502304489] High CVE-2026-85052: Out of bounds read in CrashReporting. Reported by Google on 2026-04-13
[N/A][533502257] High CVE-2026-85043: Incomplete cleanup in Network. Reported by Google on 2026-07-10
[TBD][540357382] High CVE-2026-85048: Use after free in Compositing. Reported by Ngoc Hieu on 2026-07-29
[TBD][547819997] High CVE-2026-85045: Race condition in V8. Reported by Brendan Dolan-Gavitt, XBOW on 2026-08-17
[N/A][549350408] High CVE-2026-85050: Out of bounds write in WebGL. Reported by Google on 2026-08-20
[TBD][552689418] High CVE-2026-85053: Improper resource exposure in CacheStorage. Reported by Salvatore Gulizia (Serotav) on 2026-08-26
[N/A][553119925] High CVE-2026-85042: Use after free in DevTools. Reported by Google on 2026-08-26
[N/A][553345874] High CVE-2026-85049: Use after free in Skia. Reported by Google on 2026-08-27
[N/A][553449113] High CVE-2026-85051: Type confusion in Compositing. Reported by Google on 2026-08-27
[N/A][513790581] Medium CVE-2026-85047: Improper input validation in Transactions Platform. Reported by Google on 2026-05-16
[N/A][517482830] Medium CVE-2026-85044: Use of released resource in Mobile. Reported by Google on 2026-05-28
Google is aware that an exploit for CVE-2026-85046 exists in the wild.
