CVS: cvs.openbsd.org: ports

Bjorn Ketelaars <[email protected]> Sat, 25 Jul 2026 21:26:17 -0600 (MDT)

Newsgroups	gmane.os.openbsd.ports.cvs
Message-ID	<[email protected]>

CVSROOT:	/cvs
Module name:	ports
Changes by:	[email protected]	2026/07/25 21:26:17

Modified files:
	security/vaultwarden: Tag: OPENBSD_7_9 Makefile crates.inc 
	                      distinfo 
Added files:
	security/vaultwarden/patches: Tag: OPENBSD_7_9 patch-Cargo_toml 

Log message:
Update to vaultwarden-1.37.0

This release contains security fixes for the following advisories:
- SSRF via the icon endpoint [GHSA-hw4g-2v3f-74x5] [GHSA-vh5m-fc9v-m84g]
- Cross-Organization Cipher Access [GHSA-xwf8-pjh7-h589]
- Organization Policy Bypass on Directory Import [GHSA-88qc-6ch9-mc3j]
- Send Access-Count Bypass [GHSA-rxhg-2pw9-vf25]
- Unauthenticated WebSocket Flooding DDOS [GHSA-96f7-78q5-j345]
- Cross-Organization Secret Sharing [GHSA-455c-vgg9-jxw8]
- Organization Import Authorization [GHSA-f3qw-qg77-hmm4]
[GHSA-jq2g-h4xr-4mcr]
- Organization Data Enumeration via the Manager role
[GHSA-rqf8-2568-r7mc]

Changes: https://github.com/dani-garcia/vaultwarden/releases/tag/1.37.0

OK kirill@