Update to i2pd 2.54.0
From openbsd systemfailure.net with tweaks from me: instead of patching
tests/Makefile, pass things in INCFLAGS/LDFLAGS. Doing this also gets rid
of some noisy warnings when compiling tests. Add a patch disabling unneeded
workaround for formerly broken in-place decryption of ChaCha20-Poly1305.
archivers/libarchive: update to 3.7.7
Security fixes:
* gzip: prevent a hang when processing a malformed gzip inside a gzip
* tar: don't crash on truncated tar archives
* tar: fix two leaks in tar header parsing
Important bugfixes:
* 7-zip: read/write symlink paths as UTF-8
* cpio: exit with an error code if an entry could not be extracted
* rar5: report encrypted entries
* tar: fix truncation of entry pathnames in specific archives
drop pre-6.9 quirks entries (we want to keep some old versions but
don't need all the way back to 6.3 - older versions here are mainly
for people skipping updates but that's too far to work anyway really.
from the remaining newer ones, remove some more-specific "obsolete
reasons" which don't really provide actionable information and use
simpler ones instead.
ok kn espie
archivers/libarchive: update to 3.7.7
Security fixes:
* gzip: prevent a hang when processing a malformed gzip inside a gzip
* tar: don't crash on truncated tar archives
* tar: fix two leaks in tar header parsing
Important bugfixes:
* 7-zip: read/write symlink paths as UTF-8
* cpio: exit with an error code if an entry could not be extracted
* rar5: report encrypted entries
* tar: fix truncation of entry pathnames in specific archives
update to fltk-1.3.9
Everything depending on fltk still builds. I've run bacon, dillo,
paulstretch, tigervnc and they seem to do something sensible.
fldigi crashes at startup (after running through the initial
config questions, at the point where I'd expect it to start the
main UI) but it does the same with existing fltk 1.3.3.
Remove security/xml-security-c as no longer needed, retired upstream
I imported it as requirement for security/libdigidocpp which has now
switched to textproc/libxml + security/xmlsec instead.
https://santuario.apache.org/ shows the last release from 2021 and a
post from July 2024 saying
[...] the C++ library has been officially retired.
OK rsadowski
