chromium: update to 155.0.8059.79
* 155.0.8059.84
This update includes 10 security fixes. Please see the Chrome Security Page for more information.
[N/A][568719351] Critical CVE-2026-110922: Use after free in Prerender. Reported by Xinyang Ge on 2026-10-02
[N/A][567638392] High CVE-2026-110913: Memory corruption in DOM. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-09-29
[N/A][568831769] High CVE-2026-110919: Use after free in V8. Reported by Xinyang Ge on 2026-10-02
[N/A][568937999] High CVE-2026-110918: Memory corruption in Core. Reported by Google on 2026-10-03
[TBD][569038297] High CVE-2026-110917: Memory corruption in SVG. Reported by C0rk1 on 2026-10-03
[N/A][569286602] High CVE-2026-110921: Use after free in V8. Reported by Xinyang Ge on 2026-10-05
[N/A][569659194] High CVE-2026-110920: Memory corruption in V8. Reported by Xinyang Ge on 2026-10-05
[N/A][501886301] Medium CVE-2026-110916: Improper input validation in Desktop. Reported by Google on 2026-04-12
[N/A][556272421] Medium CVE-2026-110915: Use after free in Compositing. Reported by Google on 2026-09-02
[N/A][563194341] Medium CVE-2026-110914: Memory corruption in Workers. Reported by Google on 2026-09-18
* 155.0.8059.79
This update includes 37 security fixes. Please see the Chrome Security Page for more information.
[38 lines not shown]
www/freenginx: update njs 1.0.1 -> 1.0.2
Bump PKGREVISION.
Sponsored by: tipi.work
<ChangeLog>
nginx modules:
*) Bugfix: fixed response body framing and keepalive connection reuse
in ngx.fetch(). Responses with conflicting Content-Length fields,
with both Transfer-Encoding and Content-Length, or with 1xx status
codes are now rejected.
*) Bugfix: fixed enforcement of max_response_body_size for chunked
responses in ngx.fetch().
*) Bugfix: fixed parsing of js_periodic options following
[108 lines not shown]
www/freenginx-devel: update njs 1.0.1 -> 1.0.2
Bump PKGREVISION.
Sponsored by: tipi.work
<ChangeLog>
nginx modules:
*) Bugfix: fixed response body framing and keepalive connection reuse
in ngx.fetch(). Responses with conflicting Content-Length fields,
with both Transfer-Encoding and Content-Length, or with 1xx status
codes are now rejected.
*) Bugfix: fixed enforcement of max_response_body_size for chunked
responses in ngx.fetch().
*) Bugfix: fixed parsing of js_periodic options following
[108 lines not shown]
munin: update to 2.0.78
Fix Changelog
Bernhard M. Wiedemann (1):
Fix graphing with rrdtool >= 1.10
Bryce Chidester (2):
Correct Postgres version logic for postgres_bgwriter
Correct Postgres version logic for postgres_checkpoints
Eero Häkkinen (2):
Support TLS certificate chain files.
node: Do not write plain text version response to TLS socket
Jozef Mlich (2):
Fixes #1643, updated query was taken from https://github.com/munin-monitoring/contrib/issues/1483
Update postgres_checkpoints plugin for PostgreSQL 17
[79 lines not shown]
asdf: update to 0.20.2. Changes:
### Bug Fixes
* always update local Git repsitory in git.Update even if repositories
have diverged
* never generate a shim named "asdf" during reshim
* override urfave/cli built-in help printer for top level asdf -h/--help
* prevent incomplete installations from being shown as installed
* Print stderr for list-all / latest-stable callbacks
* remove urlfave/cli built-in `-h` flag that is causing confusing behavior
* shallow clone plugin repositories for faster installs
* update nushell completion code so it works on latest version of nushell
* convert hyphens to underscores when converting plugin names to
generate valid environment variables
* make plugin test command resolve latest version properly
* nushell completions --ignore-errors deprecation
* return error from repo.RemoteUrl function
* set ASDF_INSTALL_* environment variables for reshim command
[10 lines not shown]
snac: update to 2.96. Changes:
Accounts can be marked as cool; anytime a cool account posts
something, a notification will be sent.
Fixed an issue in Direct Messages sent from the people page; these
posts didn't explicitly mention the recipient, and that confused
some implementations.
Fixed crash when sending an empty EmojiReact.
HTTP requests can now be forced to use IPv6 by setting the
`force_ipv6_requests` configuration directive to `true` in
`server.json`.
Fixed a socket buffering issue under OpenIndiana (contributed by
aleteoryx).
Mastodon API: Added missing `requested_by` field in the relationships
[17 lines not shown]
phpmyadmin5: update to 5.2.3
5.2.3 (2025-10-07)
- issue #19548 Fix missing tooltip in status monitor log table
- issue #19619 Fix horizontal scrollbar in server status pages
- issue #17141 Fix table comment readability on original theme
- issue #19138 Adjusted the chart size in System Monitor
- issue #19351 Fixed paging with approximate number of rows
- issue #18170 Fixed `window.makeGrid is not a function` partially
- issue #17535 Fixed "Delete" button not asking for confirmation when deleting a row
- issue Fixed not needed table names conversion to htmlentities when renaming a table
- issue #18922 Remove the `maxlength` for routines names
- issue #19641 Allow optional precision parameter for `NOW()`
- issue Added size support for the CSV table type
- issue #18903 Fix error 500 when simulating a `SET` statement
- issue #19404 Fixed PHP 8.4 deprecations in `thecodingmachine/safe`
- issue #19133 Updated documentation about Y2K38 as is fixed in MariaDB 11.5
- issue #19685 Prevent "ol.css" being added multiple times
- issue Fixed some bugs in relations tab with foreign keys having special names
[300 lines not shown]
py-jellyfish: update to 1.3.0.
## 1.3.0 - 15 Oct 2026
- fix metaphone emitting spurious "KH" for word-final GH (@binggau1230) (#247
- add support for Python 3.15 (bump PyO3 to 0.30) (@datalegion-jack)
- drop support for Python 3.9 and 3.10
- add support for Windows ARM
photoc helps you review, organize, and prepare photos from the
terminal: summarize a shoot, read metadata, find blurry shots and
exact duplicates, rename and sort into folders, make contact sheets
and smaller copies, or remove GPS before sharing. Most commands
work in shell scripts; `review` needs a terminal. Inspection commands
can print JSON. Large JPEGs may use temporary in-memory previews,
which do not change the originals. photoc reads JPEG files and
metadata from Sony ARW RAW files as of now.
gcli: update to 2.13.0
- Parsing of integer arguments on the CLI have been fixed
- A crash that occured when trying to print a non-existant Bugzilla attachment has been fixed
- The manual page `gcli-status(1)` has been fixed and was updated to reflect
the current behaviour
- A crash when creating a repo on GitHub without specifying a
description has been fixed.
- Modifying labels attached to issues and pull requests on Gitea
has been fixed
- The `attachments` subcommand gained support for creating Bugzilla
attachments as well as marking them as obsolete
- A new manual page `gcli-attachments(1)` has been added documenting
the options of this subcommand. The `gcli(1)` manual page has
been updated and references the new manual page as well.
- It is now possible to search for repositories via the `gcli repos`
subcommand. Search keywords are taken as is after the subcommand:
[7 lines not shown]
