BSD Commit Log Search

libreswan: upgrade 5.3.2 -> 5.4.1

v5.4.1 (Oct 5, 2026)
* Security
  - fix CVE-2026-77206 - NPE - unexpected-eap-packet
    http://libreswan.org/security/CVE-2026-77206
    [Claude and Ada Logics, David Korczynski, Andrew]
  - fix CVE-2026-77207 - NPE - empty-pkcs7-payload
    http://libreswan.org/security/CVE-2026-77207
    [Claude and Ada Logics, David Korczynski, Andrew]
  - fix CVE-2026-94453 - UAF - EOF in IKETCP
    http://libreswan.org/security/CVE-2026-94453
    [Vlad Miu, Andrew]
  - disable dns-match-id,=, - UAF [#3071 Vlad Miu, Andrew]
* Linux:
  - allow connect(ADDR/UDP/0) [#3042 Tuomo, Antony, Andrew]
* Testing:
  - add test for CVE-2026-77205 - DOS - fips-cert-leak
    http://libreswan.org/security/CVE-2026-77205

    [90 lines not shown]

freetalk: Update to 4.2

Welcome to 2022!  Upstream publishes no NEWS, but there's a few very
deteiled ChangeLog entries.   More or less:

  - allow guile 2.2 and 3.0

  - start using argp (which is linuxy), without checking for it or
    adding the lib on !Linux.

  - rename autogen.sh to bootstrap for no apparent reason

packging changes:

  - change to guile 3.0
  - depend on argp, try to link it, give up and leave a note
  - follow churn

(ok leot@ to remove/rototill)

py-mfusepy: Add a test dep

electron43: fix to create source tree

yamusic-tui-git: update to 0.8.0

Upstream changes:
 * Theming support (configurable colors and "icons");
 * MacOS media control integration;
 * UI components toggle;
 * Volume indicator;
 * Switched to a new rotor API for my wave;
 * Various tracklist fixes and pages keybinding;
 * Support for HTTP proxy and self-signed SSL certs;
 * Parallel initial load and fetching playing track info;
 * Liked albums and UI changes for displaying albums;
 * Improved search results (now displays all of the artist's albums instead of popular tracks);
 * Show artist's albums action;
 * Fixed errors in offline mode;
 * Fixed mpris:artUrl field for linux media controls;
 * Fixed terminal title;
 * Fixed playlist controls;
 * Fixed rewind.

Start electron43 package

py-geopy: Add reference to CVE-2026-77387

shaarli: Add reference to CVE-2026-105263

postgresql-pgvector: Add reference to CVE-2026-103484

nicotine+: Add reference to CVE-2026-68911

libconfini: Add reference to CVE-2026-88370

deno: Add reference to CVE-2026-103473

py-mfusepy: Update along upstream master (now tracking git)

Upstream just merged NetBSD support.  Track git master instead of the
6-months-ago release.

TODO: + py-polars-2.0.

lua-language-server: add update candidate from PR 60857

mesa: updated to 26.2.4

rcvd: imported to pkgsrc

rcvd: last optimalization before commit to current

Make sysutils/tuios report proper version and build origin

Add sysutils/tuios, YATM (Yet Another Terminal Multiplexor...)

llama.cpp: update to 0.6.0.

TODO: + llama.cpp-0.6.0.

ncdu2: add upgrade candidate from a fork

Doesn't build, reported upstream

rcvd: Optimalization

rcvd: Update to 0.3.1

py-homeassistant: Depend on postgresql18-server

A home assistant installation needs the server, too.  Pick 18 as what
ought to be used, this week.

rust-beta: update to 1.100.0beta.4

Bump test platform from NetBSD-10 to NetBSD-11

Add support for mongodb5

Mark as requiring jdk25