BSD Commit Log Search

   wants hatch-vcs, not just hatchling

   switch caddy to a normal modules-based go build
   also results in fixing "caddy -v"

   update to caddy-2.11.1, from Keith Henderson Jr

   Update GStreamer to version 1.28.1.

   Update to gst-plugins-rs-0.15.0.

   update to isc-bind-9.20.20

   update to isc-bind-9.20.20

   Drop portroach limitation, missed during the update to the 2.5 branch

   Update for Nextcloud to 32.0.6:

   https://nextcloud.com/changelog/#32-0-6

   OK landry@

   Update for Nextcloud to 31.0.14:

   https://nextcloud.com/changelog-unsupported/#latest31

   ok landry@

   Update for gnupg to 2.5.18

   a crafted CMS (S/MIME) EnvelopedData message
   carrying an oversized wrapped session key can
   cause a stack-based buffer overflow in gpg-agent
   during PKDECRYPT--kem=CMS handling

   https://dev.gnupg.org/T8044
   https://dev.gnupg.org/T8049

   OK jca@ (maintainer)

   update to dnsq-0.19.12, from Renaud Allard (maintainer)
   + small tweak to simplify things

   Add opentype-sanitizer.

   Initial revision

   Unbreak build by updating plist

   Spotted by naddy

   sndiod: Use chars (instead of uint8_t's) for the MIDI slot name

   No behavior change

   Add missing dependency on ksvg

   spotted by naddy

   sndiod: Fix ctl_match() when arg0 == NULL

   No behavior change as sndiod doesn't call ctl_match() with
   arg0 == NULL (yet).

   sndiod: Log unknown network messages to ease debugging the protocol

   Minor spacing tweak

   Validate -O flags, from Dane Jensen in GitHub issue 4889.

   Fix memory leak, from Chris Lewis, reported by Huihui Huang.

   Update to terraform-1.14.6.

   Update to adwaita-fonts-50.0.

   Update to amazon-ssm-agent-3.3.3883.0.

   Update to libphonenumber-9.0.25.

   Update to PostgreSQL 18.3

   Fixes:

   CVE-2026-2003: PostgreSQL oidvector discloses a few bytes of memory

   CVE-2026-2004: PostgreSQL intarray missing validation of type of input
   to selectivity estimator executes arbitrary code

   CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes
   arbitrary code

   CVE-2026-2006: PostgreSQL missing validation of multibyte character
   length executes arbitrary code

   CVE-2026-2007: PostgreSQL pg_trgm heap buffer overflow writes pattern
   onto server memory

   OK landry@

   ix(4) and ixv(4) can handle 64 bit DMA transfers.

   prodded by Brad Smith; tested by Hrvoje Popovski; OK kettenis@

   update to py3-icalendar-searcher-1.0.5

   Reserve the first MB of the DVA address space because qwx(4) doesn't
   succeed in doing DMA when the DVA is 0x1000 and PCI-PCI bridges may not
   forward address in part of that first MB as well.

   ok chris@