Skip to content

security/fail2ban: update to 1.1.0#175

Open
Shruthii7 wants to merge 1 commit intoNetBSD:trunkfrom
Shruthii7:fail2ban-1.1.0-update
Open

security/fail2ban: update to 1.1.0#175
Shruthii7 wants to merge 1 commit intoNetBSD:trunkfrom
Shruthii7:fail2ban-1.1.0-update

Conversation

@Shruthii7
Copy link
Copy Markdown

@Shruthii7 Shruthii7 commented Mar 16, 2026

The upstream 1.1.0 release adds compatibility with Python 3.12 and 3.13, which resolves the missing asynchat module reported in issue #174.

@Shruthii7
security/fail2ban: update to 1.1.0
28efda1 
Upstream 1.1.0 adds compatibility with Python 3.12/3.13,
which resolves the missing asynchat module issue.

Discussed in pkgsrc issue NetBSD#174.
@iamleot
Copy link
Copy Markdown
Member

iamleot commented Mar 16, 2026

@Shruthii7 can you please commit it via pkgsrc-wip?

Please see: https://pkgsrc.org/wip/users .

Thanks!

@Shruthii7 Shruthii7 mentioned this pull request Mar 16, 2026
Open
@Shruthii7
Copy link
Copy Markdown
Author

Shruthii7 commented Mar 19, 2026

@iamleot Hi.
The update has been pushed to pkgsrc-wip.
I would appreciate any feedback or review.

Thanks.

@iamleot
Copy link
Copy Markdown
Member

iamleot commented Mar 19, 2026

@Shruthii7 Thank you!

netbsd-srcmastr pushed a commit that referenced this pull request Mar 26, 2026
@0-wiz-0
p5-XML-Parser: update to 2.51.
ffe2571 
2.51 2026-03-20 (by Todd Rinaldo)

  Fixes:
    - PR #184 GH #182 Fix compile warnings from Fedora gcc: unhandled enum
      value in switch and uninitialized variables in parse_stream
    - PR #186 GH #183 Add explicit case labels for XML_CTYPE_EMPTY and
      XML_CTYPE_ANY in generate_model switch to fix -Wswitch on BSD/clang
    - PR #175 GH #174 Add XML_DTD/XML_GE compile-time guards to AllocTracker
      and BillionLaughs XS bindings to fix warnings when expat lacks these flags
    - PR #187 GH #185 Require proper declaration in AllocTracker feature
      detection to prevent implicit function declaration on BSD

  Improvements:
    - PR #189 GH #188 Add tests for XS functions modified in PR #184 covering
      XML_ErrorString, XML_GetBase/XML_SetBase, and generate_model

  Maintenance:
    - PR #181 GH #180 Add Fedora 43 container job to CI test matrix
    - PR #178 Add BSD testing (FreeBSD, OpenBSD, NetBSD) to CI
    - PR #179 Add no-lwp CI job to validate test suite without LWP::UserAgent
    - Update MANIFEST

2.49 2026-03-19 (by Todd Rinaldo)

  Improvements:
    - PR #171 Expose expat library version at runtime via expat_version()
      and expat_version_info() class methods on XML::Parser::Expat
    - PR #169 GH #168 Expose Expat 2.7.2 AllocTracker security APIs
      (AllocTrackerMaximumAmplification, AllocTrackerActivationThreshold)

  Maintenance:
    - PR #170 Clean up build configuration: remove dead CAPI code from
      Makefile.PL and Expat/Makefile.PL, add test dependencies to cpanfile
khorben pushed a commit to NetBSDfr/NetBSD-pkgsrc that referenced this pull request Apr 14, 2026
security/ruby-airbrussh: update to 1.6.1
8ae20d5 
1.6.1 (2026-03-05)

This is a gem housekeeping release. No user-facing changes.

Housekeeping

* Add Ruby 4 to CI (NetBSD#174) @mattbrictson
* Update minitest requirement from ~> 5.10 to ~> 6.0 (NetBSD#173) @dependabot[bot]
* Update mocha requirement from ~> 2.1 to ~> 3.0 (NetBSD#172) @dependabot[bot]
* Update rubocop gems (NetBSD#171, NetBSD#175, NetBSD#176) @dependabot
khorben pushed a commit to NetBSDfr/NetBSD-pkgsrc that referenced this pull request Apr 14, 2026
@0-wiz-0
giflib*: update to 6.1.2
4807dbc 
Version 6.1.2
=============

Code Fixes
----------

* Fix for low-severity CVE-2026-23868 affecting gifponge, giftool, and gifbuild,
  but not the core library - library clients need not be alarned.

Version 6.1.1
=============

This release bumps the major version, but only one entry point -
EGifSpew() - has changed signature and behavior (in order to be able
to pass out a detailed error code). The internal error
codes in the E_GIF_ERR series have changed value so none of them
collides with GIF_ERROR.

This code has been systematically audited and hardened wuth
ChatGPT-5.2. The only library fixes reported by users or found by
robot were for some memory leaks that could only triggered by severely
malformed GIFs. Other bugs are edge-case failures in the CLI tools.

The gif2rbg CLI tool has been moved to the "obsolete" bin, because its
only deployment case in 2026 is as a piñata at fuzzer parties.

Warning: the CLI tools in the obsolete category will soon be removed
from the distribution entirely. The maintainer is tired of fielding
junk bugs filed against them by would-be coup-counters who found yet
another edge case, and the rest of the world doesn't need noisy CVEs
that aren't actually DoS or security issues for giflib clients.

Code Fixes
----------

* Fix for CVE-2021-40633.

* Fix SF bug NetBSD#165 EGifSpew leaks GifFileOut->SColorMap

* Fix SF bug NetBSD#171 ImageMagick required to build giflib on non-Darwin Platforms

* Fix SF bug NetBSD#172 Incorrect object files in shared libutil on darwin

* Fix SF bug NetBSD#173 installation of manual pages and html documentation

* Fix SF bug NetBSD#175 Memory leaks in gifecho.c's main() and in gifalloc.c's GifMakeMapObject

* Fix SF bug NetBSD#177 wrong pointer used in giftool getbool

* Fix SF bug #179 Path Traversal vulnerability

* Fix SF bug #180: -Wformat-truncation likely pointing out an actual bug

* Fix SF bug #182 out‐of‐bounds writes in Icon2Gif

* Fix SF bug #184 uninitialized buffer in DumpScreen2RGB

* Fix SF bug #185 integer overflow in gifbg.c

* Fix SF bug #186 integer overflow in Icon2Gif

* Fix SF bug #187: CVE-2025-31344

* Fix SF bug NetBSD#170 Tests failing on Ubuntu Noble, giftext buffer overflow

* Fix SF bug NetBSD#165 EGifSpew leaks GifFileOut->SColorMap

* Fix SF bug NetBSD#162 detected memory leaks in GifMakeSavedImage giflib/gifalloc.c

* Fix SF bug NetBSD#161 detected memory leaks in EGifOpenFileHandle giflib/egif_lib.c

* Fix SF bug NetBSD#142 ABI break public symbol GifQuantizeBuffer

Other bugs that duplicate these have breen addressesed by these fixes

* SF bug NetBSD#156 EGifSpew leaks SavedImages (and more); won't fix, caller
  might want to write a GIF, modify the in-memory data, then write
  again.

Tests
-----

Test suite now emits TAP (Test Anything Protocol).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@Shruthii7 @iamleot