net/miniupnpd: Update to 2.3.11
Changelog (highlights):
- fix heap overflow in PinholeVerification()
- fix PCP option size parsing
- re-enable port forwarding properly (broken in 2.3.10)
- fix buffer read overflow in minixml.c
http://miniupnp.free.fr/files/changelog.php?file=miniupnpd-2.3.11.tar.gz
Port changes:
- drop the upstream testportinuse build fix, now included in the release;
- set the address family on the pool address passed to DIOCADDADDR in
add_nat_rule() and add_redirect_rule2();
- take maintainership.
Thanks to squat at squat.no for maintaining this port.
PR: 298991
Reviewed by: vvd
[5 lines not shown]
net/miniupnpd: Update to 2.3.11
Changelog (highlights):
- fix heap overflow in PinholeVerification()
- fix PCP option size parsing
- re-enable port forwarding properly (broken in 2.3.10)
- fix buffer read overflow in minixml.c
http://miniupnp.free.fr/files/changelog.php?file=miniupnpd-2.3.11.tar.gz
Port changes:
- drop the upstream testportinuse build fix, now included in the release;
- set the address family on the pool address passed to DIOCADDADDR in
add_nat_rule() and add_redirect_rule2();
- take maintainership.
Thanks to squat at squat.no for maintaining this port.
PR: 298991
Reviewed by: vvd
[2 lines not shown]
www/gohugo: Update to 0.168.0
ChangeLog: https://github.com/gohugoio/hugo/releases/tag/v0.168.0
* Fix PAGE.IsNode warning in jsonify
* hugolib: Fix rebuild when content is also mounted as assets
* Fix deprecation issues in tests
* circleci: Update config.yml to version 2.1
* warpc: Upgrade libavif, AOM, dav1d versions
* warpc: Upgrade to javy 9.1.0
* warpc: Upgrade to wasi-sdk-34
* ci: Drop extended build tag on Windows tests
* Add imaging.firstFrameOnly and some animation performance improvements
* js, css: Add charset option to js.Build and css.Build
* Add ImageResource.FrameCount
* Add Translate and Format* methods to Language
* Add basic support for OSC 7501 program status
* modules: Ignore module.replacements defined in themes
* Upgrade to Go 1.27.2
[6 lines not shown]
sysutils/conky{,-awesome}: Update to 1.25.4
ChangeLog: https://github.com/brndnmtthws/conky/releases/tag/v1.25.4
* chore: bump version to v1.25.4
* fix: isolate no_update specials and add regression coverage
* build(deps): bump jdx/mise-action from 4 to 5 in the actions group
* feat(x11): finish alpha-based input shaping and regression coverage
* fix(x11): restore Xft text colors with pseudo-transparency
* fix: recover CPU frequency output after transient read failures
* docs: clean up README and AGENTS prose
x11/bhotkeys: Update to 1.4
Fix inability to close session panel with touchscreen tap outside
panel region (a tap on the panel list ate subsequent outisde taps
until a click [with mouse or trackpad] reset tap)
Fix bhotkeys-kde-apply disabling/remapping built-in KDE functionality
Changelog: https://github.com/FrauBSD/bhotkeys/blob/1.5/CHANGELOG.md
Reviewed by: fuz, jrm
Differential Revision: https://reviews.freebsd.org/D60755
comms/uhd: Patches to fix B200 usability
PATCH: clear endpoint halt after FPGA load
PATCH: utils: match serials that are not hex numbers
This Patch allows UHD to handle the non-hex serials of clone devices
such as the LibreSDR B210.
Full hex serials still get compared by value,
while non-hex ones are being treated as strings.
PR: 290791
Reported by: Alexandra Burmistrova
net-p2p/go-ethereum: Security update 1.17.7 => 1.17.8
While here, add TESTING_UNSAFE.
Changelog:
* Fix DDoS issues found in the upcoming Glamsterdam fork
* Adaptation of RPC calls to support changes in Glamsterdam
* abigen uses sequential nonces when deploying dependencies of a contract
* Fix an unclean shutdown issue
https://github.com/ethereum/go-ethereum/releases/tag/v1.17.8
PR: 299443
Approved by: Enrique Fynn <me at enriquefynn.com> (maintainer)
Approved by: osa, vvd (Mentors, implicit)
MFH: 2026Q4
(cherry picked from commit 20d553344b4c8ae684452a787a2aa9b304668634)
net-p2p/go-ethereum: Security update 1.17.7 => 1.17.8
While here, add TESTING_UNSAFE.
Changelog:
* Fix DDoS issues found in the upcoming Glamsterdam fork
* Adaptation of RPC calls to support changes in Glamsterdam
* abigen uses sequential nonces when deploying dependencies of a contract
* Fix an unclean shutdown issue
https://github.com/ethereum/go-ethereum/releases/tag/v1.17.8
PR: 299443
Approved by: Enrique Fynn <me at enriquefynn.com> (maintainer)
Approved by: osa, vvd (Mentors, implicit)
MFH: 2026Q4
lang/rust: fix runtime on powerpc64le
Backport an LLVM fix for the loop vectorizer emitting invalid IR
for extractvalue of a widened sadd.with.overflow. On powerpc64le this
broke everything using libbz2-rs-sys (py-maturin, proton-pass-cli) with
"Cannot select: i64 = sign_extend v4i32".
