BSD Commit Log Search

   Update to PostgreSQL 18.4

   Fixes:

   * CVE-2026-6472: PostgreSQL CREATE TYPE does not check multirange schema
     CREATE privilege
   * CVE-2026-6473: PostgreSQL server undersizes allocations, via integer
     wraparound
   * CVE-2026-6474: PostgreSQL timeofday() can disclose portions of server
     memory
   * CVE-2026-6475: PostgreSQL pg_basebackup and pg_rewind can overwrite
     unrelated files of origin superuser choice
   * CVE-2026-6476: PostgreSQL pg_createsubscriber allows SQL injection via
     subscription name
   * CVE-2026-6477: PostgreSQL libpq lo_* functions let server superuser
     overwrite client stack
   * CVE-2026-6478: PostgreSQL discloses MD5-hashed passwords via covert
     timing channel
   * CVE-2026-6479: PostgreSQL SSL/GSS init causes denial of service, via

    [9 lines not shown]

   Update to at-spi2-core-2.60.4.

   Update to gupnp-av-0.14.5.

   Update to gupnp-1.6.10.

   Update to gnome-user-docs-50.2.

   Update to gssdp-1.6.5.

   Update to quadrapassel-50.2.

   MFC: net/haproxy: update to 3.2.19

   Changes:
   https://www.haproxy.org/download/3.2/src/CHANGELOG

   from Mark Patruck

   Add a bunch of new py-* build depends

   As Pyside is a dependency, additional Python components such as build, wheel
   and setuptools are required to compile it

   Spotted by aja, naddy, thanks! (It took me a while to figure it out)

   MFC: net/prosody: update to 13.0.5

   Changes:
   https://blog.prosody.im/prosody-13.0.5-released/

   Proded by lissine ellini.org, thanks!

   net/prosody: update to 13.0.5

   Changes:
   https://blog.prosody.im/prosody-13.0.5-released/

   Proded by lissine ellini.org, thanks!

   update to telemt 3.4.12

   net/filezilla - unbreak building with nettle >=4

   It would not build, so no need for a REVISION bump.

   Remove x11/XawMu, an Athena Widgets clone which is not maintained
   anymore, breaks with llvm22  and is not used in the ports tree.
   ok jca@

   Add build/run dependency devel/kf6/qqc2-desktop-style


   Spotted by aja

   Add missing build dependency on devel/xsimd

   By aja

   Remove kf6-libkcompactdisc

   Add kf6-libkcompactdisc removal

   update to magic-wormhole 0.24.0

   update to microsoft-gsl 4.2.2

   update to py-zipstream-ng 1.9.2

   update to py-iterable-io 1.0.4

   drop myself as maintainer

   Set MODCLANG_VERSION = 22.

   Suggested by tb@, but the build still runs clang-scan-deps-19,
   and we aren't completely shure what happens after the switch
   to llvm-22.

   Update clang-tools-extra to 22.1.6

   Update inkscape to 1.4.4

   Update to 0.2.11b and add a patch for llvm22. ok tb@

   x11/mplayer: fix for llvm22

   emulators/uae: don't try to print stderr as a string

   error: incompatible pointer types passing 'struct __sFILE *' to parameter of type 'const char *' [-Wincompatible-pointer-types]

   Update to rclone-1.74.2

   Changes: https://rclone.org/changelog/#v1-74-2-2026-05-22