replace c-client's hand-rolled certificate checker with code to use
SSL_set1_host based on debian's 1006_openssl1.1_autoverify.patch
found with asterisk's imap voicemail code, which was whining about
a letsencrypt certificate generated with 'profile tlsserver' (these
don't include CN).
help/ok tb@
Update Qt to 5.15.18 (+kde patchset collection)
The kde patchset collection has been rebased on top of qt 5.15.18.
I decided to switch all ports to use the KDE "kde/5.15" branch
(with a few exceptions where it does not exist because there are
no patches)
The good news is that QTWebEngine is now also at 5.15.18.
(based on chromium version: 87.0.4280.144, patched with security
patches up to: 130.0.6723.59)
archivers/libarchive: update to 3.8.3
Security fixes:
* 7zip: Fix out-of-boundary access
* tar reader: fix checking the result of strftime (CVE-2025-25724)
* lib: Create temporary files in the target directory
* lha: Fix for an out-of-bounds buffer overrun when using p[H_LEVEL_OFFSET]
* 7-zip: Fix a buffer overrun when reading truncated 7zip headers