pkcs11-provider: force this to pkgsrc openssl for now
as of 2026-10-31, does not work with base openssl
a) the pkgsrc framework does not provide all required pkg-config values
in the faked libcrypto.pc file
b) the base system does not provide the directories to install into
devel/asl{,-doc} -- update to v1.42 build 315
2026-10-16 [1.42 Bld 315]
- Bugfix : SC/MP: E register is allowed as displacement
for PC-based addressing only for data accesses
- Addition : Add predefined variable ASL_VERSION that contains
major version, minor version, and build number
in format 0xMMnnbbbb.
2026-10-11 [1.42 Bld 314]
- Bugfix : SC/MP: E register is also allowed as displacement
for PC-based addressing
2026-09-27 [1.42 Bld 313]
- Bugfix : SC/MP: correct check for instructions crossing
page boundaries
[158 lines not shown]
devel/libbstring -- update to v1.1.1
bstring v1.1.1 Release Notes
Notable changes:
blk2bstr() accepts NULL pointer with size 0, thanks to
@DamjanJovanovic for the report #219
update the verbiage of the GNU GPL v2 license, thanks to
@knight-of-ni for the report #232
What's Changed
move to Ubuntu 24.04 based ClusterFuzzLite builder by @rdmark in #171
harden OmniOS build job and use preconfigured image by @rdmark in #211
harden dependency installation with pip by @rdmark in #221
allow NULL empty blocks in blk2bstr by @rdmark in #220
pull/234
update to the latest verbiage of GNU GPL v2 by @rdmark in #233
[16 lines not shown]
sysutils/radmind -- update to v1.15.0
1.15.0 - 2026-10-22
Added
fsdiff -E generates shell-safe transcript paths and link targets: spaces
are encoded as \ rather than \b. Readers now also accept \ , so
transcripts can be copied into shell commands without changing their paths.
fsdiff -t omits differences for files whose only changed attribute is the
modification timestamp, allowing smaller transcripts when timestamps are
not significant.
rash -C generate prints a SHA-1 checksum for the difference transcript of
applied changes. rash -C <checksum> verifies that checksum in auto mode
and warns about a mismatch in update and force modes.
contrib/specialist helps generate special-file transcript entries from a
path list or an existing transcript.
Docker image, multi-architecture (including ARM64), Docker Compose, macOS
package, Ubuntu binary, Homebrew, and GitHub release build workflows.
[54 lines not shown]
blosc: updated to 1.21.7
Changes from 1.21.6 to 1.21.7
Internal LZ4 codec updated to 1.10.0. Thanks to Dimitri Papadopoulos.
Security and buffer-validation hardening:
Fix out-of-bounds write in blosc_getitem for negative nitems
Reject split blocks not covering blocksize in blosc_d
Reject destsize too small for block pointers in blosc_compress_context
Thanks to Suraiya Sulthana.
Clamp destsize to avoid int32 overflow and move getenv("BLOSC_WARN")
out of the multi-threaded decompression path
Validate that typesize is greater than zero
Fix compilation with GCC 15 (C23) in internal Zlib
[6 lines not shown]
labwc: update to 0.20.3
* Added
- Add overrideInhibition option to <mousebind> @elviosak` [#3738]
- Add libinput options <clickfingerButtonMap> and <rotationAngle>@RyoheiHashimoto [#3719] [#3720]
- Add opt-in native libinput custom acceleration through <accelProfile>,
with separate <motionCurve>, <scrollCurve> and <fallbackCurve>
profiles. This allows precise low-speed scrolling while keeping faster
scrolling responsive. @kgagne [#3715]
- Add config option <snapping><overlay><placement> to optionally place the
snap-overlay above the dragged window @Blackseafisher1 [#3683]
* Fixed
- Fix coordinate overflow due to unsigned offsets with touch devices @johanmalm
[#3764] [#3765]
- Close menu on Super_L press @johanmalm [#3762]
- Fix issue where the lock-screen does not get input focus if a popup with grab
is active when the screen is locked. @elviosak [#3758]
[20 lines not shown]
fast_float: updated to 8.3.3
8.3.3
extend fuzzer to wide char types, integer parsing and all formats
Leave std::float32_t/std::float64_t unmodified on invalid input
Avoid right-shifting a negative value in detail::power()
Reject integer_times_pow10 arguments wider than 64 bits
Silence -Wc++20-extensions at the remaining [[unlikely]] sites
py-setuptools-gettext: updated to 0.1.20
0.1.20
Drop support for Python 3.9; add Python 3.15.
Modernize type annotations (builtin generics, PEP 604 unions).
Dependency updates for development tooling.
hashcat: updated to 8.0.0
8.0.0
Here's a quick summary:
11 major features and four new attack-modes
146 new hash-modes and 306 bug fixes
4,091 files changed, with 439,469 lines added and 229,313 deleted
Contributions from 63 people, 43 of them first-time contributors
mtools: update to 4.0.50.
Security fix release; this adds a new TODO:
- ${WRKSRC} is in all binaries - investigate and fix
v4_0_50
- Fix CVE-2026-118384
v4_0_49
- Correctly detect overlong file names, especially when
multibyte (UTF-8) strings are concerned
- Fix off-by-one error in 2 calls to native_to_wchar
- When changing disk label, ignore any plain file which would
match label
- Added missing newlines in error messages about disk geometry
- Do not print error message if getting geometry is simply not
supported by device type (such as for loop devices)
- If full geometry of a device is not available (such as for
loop devices), at least make use of the size
[39 lines not shown]
p5-HTTP-Parser-XS: update to 0.18.
0.18
- preserve the full URL-decoded PATH_INFO when it contains NUL bytes (Robert Rothenberg)
- fix documentation typos (Sergey Romanov)
