BSD Commit Log Search

graphics/openexr*: security update to 3.4.13

Changelog:      https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.4.13
MFH:            2026Q2
PR:             296159

Security:       CVE-2026-55373
OpenEXRUtil SampleCountChannel endEdit() can loop forever on UINT_MAX sample counts

Security:       CVE-2026-55371
OpenEXRCore exr_attr_set_bytes() accepts NULL type_hint with positive hint_length

Security:       CVE-2026-55059
OpenEXRUtil SampleCountChannel row setter heap out-of-bounds

Security:       CVE-2026-54920
Integer Overflow and Use of Uninitialized Pointer leading to Invalid Delete in OpenEXRUtil Image Resize

Security:       CVE-2026-53532

    [5 lines not shown]

graphics/openexr*: security update to 3.4.13

Changelog:      https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.4.13
MFH:            2026Q2
PR:             296159

Security:       CVE-2026-55373
OpenEXRUtil SampleCountChannel endEdit() can loop forever on UINT_MAX sample counts

Security:       CVE-2026-55371
OpenEXRCore exr_attr_set_bytes() accepts NULL type_hint with positive hint_length

Security:       CVE-2026-55059
OpenEXRUtil SampleCountChannel row setter heap out-of-bounds

Security:       CVE-2026-54920
Integer Overflow and Use of Uninitialized Pointer leading to Invalid Delete in OpenEXRUtil Image Resize

Security:       CVE-2026-53532

    [3 lines not shown]

security/lego: Update to 5.2.2

Changelog: https://github.com/go-acme/lego/releases/tag/v5.2.2

PR:             295898

multimedia/vapoursynth: Clarify build requirements on amd64

Vapoursynth is computational heavy so clarify why build might fail on
amd64.

Reported by:    vvd

textproc/stardict-dict-fa_IR: Unbreak after removal of russian/stardict-mueller7

Add bits port used from russian/stardict-mueller7

Reported by:    anotine

devel/py-ty: Update to 0.0.51

Changelog: https://github.com/astral-sh/ty/blob/0.0.51/CHANGELOG.md

Reported by:    Repology

databases/iceberg-rust: New port: Apache Iceberg

misc/dartsim: update 6.17.0 → 6.19.2

math/R-cran-GPArotation: Update to 2026.6-1

Changelog: https://cran.r-project.org/web/packages/GPArotation/NEWS

devel/taskflow: update 4.0.0 → 4.1.0

devel/py-pydantic-settings: update 2.14.1 → 2.14.2

databases/rqlite: update 10.2.1 → 10.2.2

devel/xbyak: update 7.37.3 → 7.37.4

mail/py-resend: Update to 2.32.2

Changelog:
- https://github.com/resend/resend-python/releases/tag/v2.31.0
- https://github.com/resend/resend-python/releases/tag/v2.32.0
- https://github.com/resend/resend-python/releases/tag/v2.32.1
- https://github.com/resend/resend-python/releases/tag/v2.32.2

Reported by:    Repology

misc/gemini-cli: update 0.42.0 → 0.47.0

textproc/p5-Markdown-Render: Update to 2.0.4

Changelog: https://metacpan.org/dist/Markdown-Render/changes

PR:             295932
Reported by:    Einar Bjarni Halldórsson <einar at isnic.is> (maintainer)

misc/py-datasets: update 4.8.5 → 5.0.0

editors/zed: Update to 1.7.2

Changelog: https://github.com/zed-industries/zed/releases/tag/v1.7.2

Reported by:    GitHub (watch releases)

www/phalcon: update to 5.15.0.

ChangeLog: https://github.com/phalcon/cphalcon/releases/tag/v5.15.0

sysutils/py-dbuild: Update to 1.9.2

devel/py-etcd3gw: Update to 2.7.0

ChangeLog:
https://docs.openstack.org/releasenotes/etcd3gw/unreleased.html#relnotes-2-7-0

x11/swayimg: rename option JPEG2000 to OPENJPEG

Options are named after dependencies to allow disabling globally.
However, JPEG 2000 support can depend on either JasPer or OpenJPEG.

net/rabbitmq: Update 4.3.1 => 4.3.2

Changelog:
https://github.com/rabbitmq/rabbitmq-server/releases/tag/v4.3.2

Sponsored by:   UNIS Labs

x11/xdg-desktop-portal-wlr: update to 0.8.3

Changes:        https://github.com/emersion/xdg-desktop-portal-wlr/releases/tag/v0.8.3
Reported by:    GitHub (watch releases)

(cherry picked from commit 17c420910b611a6909f3ded15a0a394e60e456bf)

multimedia/aom: update to 3.14.1

Changes:        https://aomedia.googlesource.com/aom/+log/v3.14.0..v3.14.1
PR:             296155
(cherry picked from commit e60dcdfb99a7958c64c428f6f437ec80c47bb15d)

multimedia/aom: update to 3.14.0

Changes:        https://aomedia.googlesource.com/aom/+log/v3.13.3..v3.14.0
PR:             296155
Reported by:    Repology (update), Evgenii Khramtsov (secfixes)
Security:       CVE-2026-56208 CVE-2026-56209 CVE-2026-56210 CVE-2026-56211

(cherry picked from commit a6187013727e8bc0a069eca486f40be982192c82)

graphics/mesa-devel: update to 26.1.b.3433

Changes:        https://gitlab.freedesktop.org/mesa/mesa/-/compare/dde1709274f...9dbe8846f5f

games/veloren-weekly: update to s20260618

Changes:        https://gitlab.com/veloren/veloren/-/compare/2dd9ea8c42...ef31455955

x11/xdg-desktop-portal-wlr: update to 0.8.3

Changes:        https://github.com/emersion/xdg-desktop-portal-wlr/releases/tag/v0.8.3
Reported by:    GitHub (watch releases)

multimedia/aom: update to 3.14.1

Changes:        https://aomedia.googlesource.com/aom/+log/v3.14.0..v3.14.1
PR:             296155