lft: update to 4.01.
Changes since 3.8, briefly: protocol, firewall-traversal and reliability
fixes; IPv6 end to end; ECMP path enumeration (--ecmp); a path-MTU
discovery mode; JSON/XML/GeoJSON/KML/SVG/GraphViz/Mermaid output; an
ncurses --watch mode with a path-change detector; whob --annotate; and a
hardened privilege model with bounds-checked parsers.
Also install 'whob'.
From Victor O. in PR 60767.
thttpd: fix a couple CVEs
Rename patches, add some patches from Debian/FreeBSD,
move MESSAGE to README.pkgsrc.
Bump PKGREVISION.
From Showta Ishizaki in PR 60761.
StayRTR is an open-source implementation of RPKI-to-Router
protocol (RFC 6810, RFC 8210) in Go.
What's Changed
Move server metrics to its own package by @randomthingsandstuff in #159
Port PR#133 to new metrics structure by @randomthingsandstuff in #160
go fmt ci/cd check because this is annoying by @randomthingsandstuff in #161
GoBGP is an open source Border Gateway Protocol (BGP)
implementation designed from scratch for modern environment
and implemented in a modern programming language,
the Go Programming Language.
Changelog
01c5c4c GoBGP 4.9.0
9d50d8e server: drop stale notifications queued while a peer session was down
efa0900 packet/bgp: check the per-type message length in parseBody
d7c721d packet/bgp: reject a body that does not match the declared length
5e34ff5 test: move the KEEPALIVE length test next to the other header tests
e37c5a2 packet/bgp: reject KEEPALIVE messages that are not 19 octets
b2c73cf test: drop run_all_tests.sh and document how to run scenario tests
8056d41 docs: document the listen address of the gRPC API
4bbeb79 security: define what we treat as a vulnerability
e6c6f10 table: find the policy assignments in DeletePolicy itself
4171aa9 server: drop the policy assignment of a deleted peer
a111094 server: store the per peer policy only for a route server client
c0214f7 table: report a statement that the policy does not have
[60 lines not shown]
net/tacacs: update to version 4.0.4.32.
Pkgsrc changes:
* whack configure.ac so that it manages to produce a working
configure script. There are more errors / warnings here...
* Change test for libwrap to declare required global variables
... as globals, and not as locals in main() in the configure test.
Upstream changes (newest first):
F4.0.4.32
- Remote pre-authentication format string vulnerability (CWE-134)
F4.0.4.31
- update autoconf to search for libnsl instead of assume. Debian
no longer has one, at least not by default.
F4.0.4.30
- pull do_auth 2.0 and the example config file from github, with
[20 lines not shown]
emacs: improve module framework
With a lot of help from Showta Ishizaki.
It now supports the features we expect from a module framework:
- allow specifying supported versions
- allow specifying unsupported versions
- reduce conflicts between versions (this is not as important as
e.g. for Python, because the base emacs* and xemacs* packages still
conflict with each other)
- tag the PKGNAME with the version it was built for; so e.g. "magit"
is now called "emacs30-magit" etc. depending on the version it was
built for
- build all supported versions of a module in bulk builds
[11 lines not shown]
textproc/rumdl: update to 0.2.77
0.2.77 - 2026-09-23
Fixed
release: never replace published GitHub Release assets (471d97e)
Performance
release: cut published wheel size 6% with fat LTO (7605780)
0.2.76 - 2026-09-23
Added
MD094: report each invalid UTF-8 sequence, with its position (6c25d76)
encoding: lint files containing invalid UTF-8 instead of skipping them (f531bf4)
Fixed
[62 lines not shown]
