NetBSD/pkgsrc Xk2fQN3doc CHANGES-2026

   doc: Updated lang/php84 to 8.4.26
VersionDeltaFile
1.6341+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc qlrMExElang/php phpversion.mk, lang/php84 Makefile distinfo

   lang/php84: udpate to 8.4.26

   PHP 8.4.26 (2026-09-24)

   - BCMath:
     . Fixed out-of-bounds read in bc_is_zero_for_scale() when scale exceeds
       n_scale. (Ilia Alshanetsky)

   - Core:
     . Fixed out-of-bounds reads during automatic UTF-16/32 encoding detection.
       (Yudai Takada)
     . Fixed bug GH-15375 (Nested "yield from" skips items after a valid() or
       next() call on the inner generator). (iliaal)
     . Fixed bug GH-23232 (lone namespace separator asks the autoloader for an
       empty class name). (spawnia)
     . Fixed bug GH-23301 (Nested "yield from" yields a value twice when the
       middle generator delegates again). (Lazizbek Ergashev)

   - CLI:

    [161 lines not shown]
VersionDeltaFile
1.26+4-4lang/php84/distinfo
1.517+2-2lang/php/phpversion.mk
1.13+1-2lang/php84/Makefile
+7-83 files

NetBSD/pkgsrc SBavHytdoc CHANGES-2026

   doc: Updated lang/php82 to 8.2.34
VersionDeltaFile
1.6340+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc OICKaBZlang/php phpversion.mk, lang/php82 Makefile distinfo

   lang/php82: update to 8.2.34

   PHP 8.2.34 (2026-09-24)

   - Filter:
     . Fixed GHSA-ch8v-r6jh-4vvr (FILTER_SANITIZE_ENCODED does not encode 0xFF).
       (Ilia Alshanetsky)

   - FPM:
     . Fixed GHSA-62xp-839h-2637 (IPv6 ACL bypass in FastCGI listen.allowed_clients
       due to partial address comparison). (CVE-2026-91768) (Alexandre Daubois)

   - MySQLnd:
     . Fixed GHSA-r6x9-5r99-36j7 (Various packet overreads in mysqlnd wire
       protocol). (CVE-2025-1218) (Jakub Zelenka, Nora Dossche)

   - OpenSSL:
     . Fixed GHSA-vvx9-73fr-5jjx (TLS hostname verification falls back to CN after
       SAN mismatch). (CVE-2026-91769) (Jakub Zelenka)

    [26 lines not shown]
VersionDeltaFile
1.39+4-4lang/php82/distinfo
1.516+2-2lang/php/phpversion.mk
1.27+1-2lang/php82/Makefile
+7-83 files

NetBSD/pkgsrc zpnLqxHdoc CHANGES-2026

   doc: Updated lang/php85 to 8.5.11
VersionDeltaFile
1.6339+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc q5MXbbjlang/php phpversion.mk, lang/php85 Makefile distinfo

   lang/php85: update to 8.5.11

   PHP 8.5.11 (2026-09-24)

   - BCMath:
     . Fixed out-of-bounds read in bc_is_zero_for_scale() when scale exceeds
       n_scale. (Ilia Alshanetsky)

   - Core:
     . Fixed out-of-bounds reads during automatic UTF-16/32 encoding detection.
       (Yudai Takada)
     . Fixed bug GH-15375 (Nested "yield from" skips items after a valid() or
       next() call on the inner generator). (iliaal)
     . Fixed bug GH-23232 (lone namespace separator asks the autoloader for an
       empty class name). (spawnia)
     . Fixed bug GH-23301 (Nested "yield from" yields a value twice when the
       middle generator delegates again). (Lazizbek Ergashev)

   - DOM:

    [141 lines not shown]
VersionDeltaFile
1.11+4-4lang/php85/distinfo
1.515+2-2lang/php/phpversion.mk
1.4+1-2lang/php85/Makefile
+7-83 files

NetBSD/pkgsrc 0LvM9Rkdoc CHANGES-2026

   doc: Correct php83 version
VersionDeltaFile
1.6338+2-2doc/CHANGES-2026
+2-21 files

NetBSD/pkgsrc Bo7JeUAlang/php83 Makefile

   lang/php83: reset PKGREVISION
VersionDeltaFile
1.23+1-2lang/php83/Makefile
+1-21 files

NetBSD/pkgsrc sJW50lWdoc CHANGES-2026

   doc: Updated lang/php83 to 8.3.35nb1
VersionDeltaFile
1.6337+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc X2evVbPlang/php phpversion.mk, lang/php83 distinfo

   lang/php83: update to 8.3.35

   PHP 8.3.34 (seems to be skipped)

   PHP 8.3.35 (2026-09-24)

   - Filter:
     . Fixed GHSA-ch8v-r6jh-4vvr (FILTER_SANITIZE_ENCODED does not encode 0xFF).
       (Ilia Alshanetsky)

   - FPM:
     . Fixed GHSA-62xp-839h-2637 (IPv6 ACL bypass in FastCGI listen.allowed_clients
       due to partial address comparison). (CVE-2026-91768) (Alexandre Daubois)

   - MySQLnd:
     . Fixed GHSA-r6x9-5r99-36j7 (Various packet overreads in mysqlnd wire
       protocol). (CVE-2025-1218) (Jakub Zelenka, Nora Dossche)

   - OpenSSL:

    [28 lines not shown]
VersionDeltaFile
1.37+4-4lang/php83/distinfo
1.514+2-2lang/php/phpversion.mk
+6-62 files

NetBSD/pkgsrc pDTnJ8ldoc CHANGES-2026

   doc: Updated lang/ruby34 to 3.4.11
VersionDeltaFile
1.6336+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc 1A5HhFMlang/ruby rubyversion.mk, lang/ruby34 Makefile distinfo

   lang/ruby34: update to 3.4.11

   3.4.11 (2026-09-23)

   * Bug #22196: Heap-use-after-free in fiber_switch with transfer-terminated
     async tasks on 3.4.10
   * Guard fiber target across fiber_store. by samuel-williams-shopify · Pull
     Request #17951
   * Bug #21842: Encoding of rb_interned_str
   * Bug #22126: Stack underflow for partial DCE and loops
   * Bug #22124: void value missed in parse.y
   * Bug #22183: parse.y interpolation inside lambda literal
   * Bug #22099: Keyword-only method silently accepts a positional argument
   * Bug #22133: Ruby's default SIGINT handling ignores Thread.handle_interrupt
     masking.
   * Bug #22189: Enumerator::Lazy#to_enum does not accept method names as strings
   * Bug #22191: Signal.trap(:EXIT) exception only shown if at_exit also raises
   * Bug #22198: win32: heap overflow in Kernel#system
   * Bug #20958: fix ENV.keys encoding on windows

    [36 lines not shown]
VersionDeltaFile
1.20+4-5lang/ruby34/distinfo
1.332+2-2lang/ruby/rubyversion.mk
1.13+1-2lang/ruby34/Makefile
1.4+1-1lang/ruby34/patches/patch-lib_resolv.rb
+8-104 files

NetBSD/pkgsrc qu7djoDlang/ats2 distinfo Makefile, lang/ats2/patches patch-Makefile

   ats2: fix build on -current
VersionDeltaFile
1.2+11-3lang/ats2/patches/patch-Makefile
1.2+2-2lang/ats2/distinfo
1.6+3-1lang/ats2/Makefile
+16-63 files

NetBSD/pkgsrc gxXMfUNtextproc/eblook Makefile

   eblook: fix build on -current
VersionDeltaFile
1.27+6-2textproc/eblook/Makefile
+6-21 files

NetBSD/pkgsrc a7xvfz7editors/leim20 Makefile

   leim20: fix build on -current
VersionDeltaFile
1.21+3-1editors/leim20/Makefile
+3-11 files

NetBSD/pkgsrc wZ4xImKdoc CHANGES-2026

   doc: Updated www/ruby-aws-sdk-s3 to 1.232.1
VersionDeltaFile
1.6335+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc ewnB5P5www/ruby-aws-sdk-s3 Makefile distinfo

   www/ruby-aws-sdk-s3: update to 1.232.1

   1.232.1 (2026-09-16)

   * Issue - Return the copy response from multipart copy_to/copy_from instead
     of nil on success.
VersionDeltaFile
1.68+4-4www/ruby-aws-sdk-s3/distinfo
1.68+2-2www/ruby-aws-sdk-s3/Makefile
+6-62 files

NetBSD/pkgsrc XJLM5rpdoc CHANGES-2026

   doc: Updated www/ruby-aws-sdk-core to 3.257.0
VersionDeltaFile
1.6334+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc S30EMvYwww/ruby-aws-sdk-core Makefile distinfo

   www/ruby-aws-sdk-core: update to 3.257.0

   3.257.0 (2026-09-14)

   * Feature - Updated Aws::STS::Client with the latest API changes.

   * Feature - Increases the maximum session token size to 4,096 bytes and
     removes the packed policy size limit.  Adds SessionTokenSize and
     SessionTokenUtilization fields and a new MinimumSessionTokenSize
     parameter.  PackedPolicySize is deprecated.
VersionDeltaFile
1.84+4-4www/ruby-aws-sdk-core/distinfo
1.83+2-2www/ruby-aws-sdk-core/Makefile
+6-62 files

NetBSD/pkgsrc dizou2pdoc CHANGES-2026

   doc: Updated www/ruby-aws-partitions to 1.1289.0
VersionDeltaFile
1.6333+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc 3Wz7fpEwww/ruby-aws-partitions Makefile distinfo

   www/ruby-aws-partitions: update to 1.1289.0

   1.1289.0 (2026-09-23)

   * Feature - Added support for enumerating regions for
     Aws::NetworkSecurityManager.

   1.1288.0 (2026-09-22)

   * Feature - Added support for enumerating regions for Aws::CloudWatchOmni.
VersionDeltaFile
1.126+4-4www/ruby-aws-partitions/distinfo
1.124+2-2www/ruby-aws-partitions/Makefile
+6-62 files

NetBSD/pkgsrc bGQBunqdoc CHANGES-2026

   doc: Updated misc/gnuls to 9.12
VersionDeltaFile
1.6332+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc fehuJBzmisc/gnuls Makefile

   gnuls: update to 9.12.

   match coreutils.
VersionDeltaFile
1.33+1-2misc/gnuls/Makefile
+1-21 files

NetBSD/pkgsrc 3K7YtgSdoc TODO CHANGES-2026

   doc: Updated sysutils/coreutils to 9.12
VersionDeltaFile
1.27986+1-2doc/TODO
1.6331+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc E8t8gkhsysutils/coreutils Makefile.common distinfo

   coreutils: update to 9.12.

   * Noteworthy changes in release 9.12 (2026-09-14) [stable]

   ** Bug fixes

     'chcon', 'chgrp', 'chmod', 'chown', 'du', 'ls' which traverse hierarchies with
     -R,  no longer fail merely because files may be being removed in parallel.
     [This bug was present in "the beginning".]

     'comm - -' no longer closes standard input twice.  Previously it would
     mistakenly exit with a nonzero status.
     [This bug was present in "the beginning".]

     'cp', 'install', and 'mv' now fall back to a standard copy
     if a --reflink=auto clone fails due to EDQUOT, ENOMEM, or ENOSPC.
     E.g., with XFS, a clone can exhaust metadata space in an allocation
     group, while a standard copy works.
     [bug introduced in coreutils-9.2]

    [165 lines not shown]
VersionDeltaFile
1.94+6-6sysutils/coreutils/Makefile
1.53+4-4sysutils/coreutils/distinfo
1.40+2-2sysutils/coreutils/Makefile.common
+12-123 files

NetBSD/pkgsrc yRZroBudoc CHANGES-2026

   doc: Updated sysutils/gatus to 5.37.0
VersionDeltaFile
1.6330+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc Fhxop11sysutils/gatus Makefile go-modules.mk, sysutils/gatus/patches patch-go.sum patch-go.mod

   gatus: Update to version 5.37.0

   What's Changed
   feat(alerting): allow configuring the topic for Zulip alerts by @ChrisJr404 in #1764
   feat(client): Allow configuration of client cookie storage by @AaronLionsheep in #1716
   feat(dns): Support TXT query type by @hernil in #1679
   ci: Remove codecov from repository by @TwiN with @Copilot in #1684
   fix(jsonpath): prevent panic on negative array index by @nikolauspschuetz in #1703
   docs(alerting): Revise HomeAssistant alerts and add Home Assistant integration info by @TN-1 in #1723
   docs: update the postgres bind mount in the compose example by @vshulcz in #1761
   test(config): make HasLoadedConfigurationBeenModified deterministic by @nikolauspschuetz in #1786
VersionDeltaFile
1.2+69-77sysutils/gatus/distinfo
1.2+22-24sysutils/gatus/go-modules.mk
1.8+2-3sysutils/gatus/Makefile
1.2+1-1sysutils/gatus/patches/patch-go.sum
1.2+1-1sysutils/gatus/patches/patch-go.mod
+95-1065 files

NetBSD/pkgsrc tYIHxHfdoc TODO CHANGES-2026

   Updated editors/qtcreator, net/wireshark
VersionDeltaFile
1.27985+1-3doc/TODO
1.6329+3-1doc/CHANGES-2026
+4-42 files

NetBSD/pkgsrc w1MUMhqnet/wireshark PLIST Makefile

   wireshark: updated to 4.6.9

   4.6.9

   The following vulnerabilities have been fixed:

   wnpa-sec-2026-92 ZigBee ZCL protocol dissector crash. CVE-2026-95391.

   wnpa-sec-2026-93 SCTP protocol dissector crash. Issue 21481. CVE-2026-95389.

   wnpa-sec-2026-94 TTL file parser infinite loop. Issue 21501. CVE-2026-95386.

   wnpa-sec-2026-95 PEAK CAN TRC file parser crash. Issue 21503. CVE-2026-95390.

   wnpa-sec-2026-96 IEEE C37.118 Synchrophasor protocol dissector memory leak. Issue 21492. CVE-2026-95395.

   wnpa-sec-2026-97 SPDY protocol dissector crash. Issue 21487. CVE-2026-95387.

   wnpa-sec-2026-98 Microsoft Network Monitor file parser large loop. Issue 21523. CVE-2026-95394.

    [58 lines not shown]
VersionDeltaFile
1.195+4-4net/wireshark/distinfo
1.355+3-4net/wireshark/Makefile
1.114+3-3net/wireshark/PLIST
+10-113 files

NetBSD/pkgsrc hUpUc6jeditors/qtcreator PLIST Makefile

   qtcreator: updated to 20.0.2

   20.0.2

   General

   Fixed
   * The default search parameters for `Advanced Find`
   * A crash with the navigation views during shutdown

   Editing

   Fixed
   * A crash when files are modified externally

   QML

   Fixed
   * That the wrong QML Language Server binary could be downloaded on Linux

    [11 lines not shown]
VersionDeltaFile
1.19+4-4editors/qtcreator/distinfo
1.54+2-3editors/qtcreator/Makefile
1.13+2-1editors/qtcreator/PLIST
+8-83 files