bind920: update to version 9.20.29.
Pkgsrc changes:
* Update version number & checksums.
Upstream changes:
Notes for BIND 9.20.29
----------------------
Security Fixes
~~~~~~~~~~~~~~
- Prevent excessive CPU use validating crafted DNSSEC responses.
:cve:`2026-19668`
A malicious authoritative server could serve a securely delegated zone
whose DS and DNSKEY records carried many distinct key tags but no valid
match, forcing a validating resolver into excessive key-tag matching
[352 lines not shown]
tinygo: update to 0.42.0
- Support for Go 1.27 and LLVM 22
- Runtime panics (divide-by-zero, nil dereference, map and channel
failures) are now recoverable, so recover() works as expected
- Compiler generates type-specific hash and equal functions
- Many GC, scheduler, and timer fixes for more solid concurrent code
- Dynamic USB endpoint registration on RP2, SAMD21/51, and nRF52840
- Big ESP32 step forward: interrupts, ADC, flash XIP, and the new
ESP32-C6
- New targets: STM32H7, the Puya PY32F family, and UEFI
- New boards: ESP32-S3-BOX-3, M5Stack Stamp-S3A, and Pimoroni
Badger 2350
New package, openbao-2.6.2.
This is a straightforward build with the vendored Go modules. I have not
applied any of the NetBSD patches from security/vault. Tested only on Linux so
far.
OpenBao is an open source, community-driven secrets manager and fork of
Vault managed by the Linux Foundation's OpenSSF.
Arbitrary key/value secrets can be stored in OpenBao. OpenBao encrypts
these secrets prior to writing them to persistent storage, so gaining
access to the raw storage is not enough to access your secrets.
OpenBao can generate secrets on-demand for some systems, such as
Kubernetes or SQL databases. After creating these dynamic secrets,
OpenBao will also automatically revoke them after the lease is up.
OpenBao provides encryption as a service with centralized key management
to simplify encrypting data in transit and stored across clouds and
datacenters.
zino: update to version 2.5.2.
Pkgsrc changes:
* version-bump + checksums + minor adjust of dependencies.
Upstream changes:
- Added explanation section to documentation covering Zino's history,
core concepts, and technical architecture
([#435](https://github.com/Uninett/zino/issues/435)) - Added
documentation for cuRitz, with screenshots.
([#568](https://github.com/Uninett/zino/issues/568))
- `--user` and the `process.user` setting now accept a numeric
`UID` or `UID:GID` or, as previously, a user name, so Zino can drop
privileges to a UID that has no entry in `/etc/passwd` (e.g. inside
a container)
- BGP sessions that go down are reported again. On routers that
send Zino an SNMP trap when a session drops, the drop was only
[16 lines not shown]
