BSD Commit Log Search

   update to py3-discid-1.4.0

   update to py3-acoustid-1.3.1
   fix loading libchromaprint

   Update to openssl-ruby-tests 20260418

   Fix paths to documentation to unbreak x11/gnome/manuals runtime.

   Hide Gtk.Button because the GNOME Software Developmen Kit on Flathub is only
   available for Linux.

   from FreeBSD

   update to py3-mediafile-0.16.2

   Update to gemini-cli-0.38.2.

   Update to cloud-sql-proxy-2.21.3.

   Update to netatalk-4.4.2.

   Update to awscli-1.44.81.

   Update to py3-boto3-1.42.91.

   Update to py3-botocore-1.42.91.

   Update to OpenEXR-3.4.10.

   SECURITY update to cups-2.4.17.

   - CVE-2026-27447: The scheduler treated local user and group names as case-insensitive.
   - CVE-2026-34978: The RSS notifier could write outside the scheduler's RSS directory.
   - CVE-2026-34980: The scheduler did not filter control characters from option values.
   - CVE-2026-34979: The scheduler did not always allocate enough memory for a job's options string.
   - CVE-2026-34990: The scheduler incorrectly allowed local certificates over the loopback interface.
   - CVE-2026-39314: Fixed the range check for job password strings.
   - CVE-2026-39316: Fixed a printer subscription bug in the scheduler.
   - CVE-2026-NNNNN: Fixed a SNMP string conversion bug in the backends.

   SECURITY update to cups-2.4.17.

   - CVE-2026-27447: The scheduler treated local user and group names as case-insensitive.
   - CVE-2026-34978: The RSS notifier could write outside the scheduler's RSS directory.
   - CVE-2026-34980: The scheduler did not filter control characters from option values.
   - CVE-2026-34979: The scheduler did not always allocate enough memory for a job's options string.
   - CVE-2026-34990: The scheduler incorrectly allowed local certificates over the loopback interface.
   - CVE-2026-39314: Fixed the range check for job password strings.
   - CVE-2026-39316: Fixed a printer subscription bug in the scheduler.
   - CVE-2026-NNNNN: Fixed a SNMP string conversion bug in the backends.

   sysutils/moor: Update to 2.12.1

   From Maintainer Lydia Sobot, thanks

   Update nudoku to 8.0.0.

   Update kakoune to latest release 2026.04.12. Based on diff from Lydia
   Sobot ( chilledfrogs () disroot ! org ) who also takes maintainer -
   thanks!

   I added missing make update-patches and make update-plist.

   pick up upstream commit fixing with newer python

   graphics/djuvlibre: include patch to fix CVE-2025-53367

   From Nick Permyakov, thanks

   ok tb@

   add missing pledge, 'unix' needed for "gopass age agent"
   https://github.com/gopasspw/gopass/commit/d9b731ce1e1590539516828a44cf02daba759801

   xscreensaver: disable "worldpieces", xft_word_wrap segfaults (fails when
   trying to wrap an empty string)

   wayland/waybar: Unbreak USR1/USR2 signal handling

   https://github.com/Alexays/Waybar/pull/4278 inadvertently broke handling
   SIGUSR1/SIGUSR2 on OpenBSD. This reverts the offending bit.

   + replace sndio module in the default configuration with a custom module
   using sndioctl(1)

   update to vim-9.2.357

   xscreensaver: fix #! line for xshadertoy-based scripts, RDEP on bash (they
   use exec -a, unsupported by base sh). noticed by lists at y42 dotorg

   lowdown: use ports-gcc on base-gcc

   base-gcc doesn't support deprecated attributes with deprecation message.
   ports-gcc is lower friction than patching the header:

   lowdown.h:460: error: wrong number of arguments specified for 'deprecated' attribute

   security/mitmproxy: update to 12.2.2

   security/py-mitmproxy_rs: update to 0.12.9

   Update prometheus to 3.5.2 (latest LTS release):
   * [SECURITY] UI: Fix stored XSS via unescaped metric names and labels.
         CVE-2026-40179. #18507
   * [PERF] Regex: Stop calling Simplify. #17908

   OK sthen@

   devel/sbt: update to 1.12.9