FreeBSD/ports 3a64de6security/vuxml/vuln 2025.xml

security/vuxml: document www/nginx* vulnerability
DeltaFile
+29-0security/vuxml/vuln/2025.xml
+29-01 files

FreeBSD/ports 5f85ff7www/nginx-devel distinfo Makefile

www/nginx-devel: security update from 1.27.3 to 1.27.4

<ChangeLog>

*) Security: insufficient check in virtual servers handling with TLSv1.3
   SNI allowed to reuse SSL sessions in a different virtual server, to
   bypass client SSL certificates verification (CVE-2025-23419).

*) Feature: the "ssl_object_cache_inheritable", "ssl_certificate_cache",
   "proxy_ssl_certificate_cache", "grpc_ssl_certificate_cache", and
   "uwsgi_ssl_certificate_cache" directives.

*) Feature: the "keepalive_min_timeout" directive.

*) Workaround: "gzip filter failed to use preallocated memory" alerts
   appeared in logs when using zlib-ng.

*) Bugfix: nginx could not build libatomic library using the library
   sources if the --with-libatomic=DIR option was used.

    [13 lines not shown]
DeltaFile
+3-3www/nginx-devel/distinfo
+1-2www/nginx-devel/Makefile
+4-52 files

FreeBSD/ports 421fd5cwww/linux-vieb distinfo Makefile

www/linux-vieb: Update to 12.2.0

Release changes:        https://github.com/Jelmerro/Vieb/releases/tag/12.2.0
DeltaFile
+5-5www/linux-vieb/distinfo
+1-1www/linux-vieb/Makefile
+6-62 files

FreeBSD/ports 9f5a7d3biology/seaview Makefile

biology/seaview: unbreak the port's build against FLTK 1.3.10

Currently used formula tries to fold FLTK version triple into
an integer (100 * FL_MAJOR_VERSION + 10 * FL_MINOR_VERSION +
FL_PATCH_VERSION < 140) but this fails once the patch version
had reached 10.  Drop it from the calculation entirely because
FLTK hasn't been breaking API and ABI for last several 1.3.x
releases, and accounting for it now makes little to no sense.

Reported by:    pkg-fallout
DeltaFile
+3-0biology/seaview/Makefile
+3-01 files

FreeBSD/ports 1acfa6egames/atanks Makefile

games/atanks: attempt to unbreak the port's build

Forward declaration of class BUTTON is not enough to access
its members, we must include the corresponding header file.

Reported by:    pkg-fallout
DeltaFile
+4-0games/atanks/Makefile
+4-01 files

FreeBSD/ports f4b016eaudio/picard-plugins distinfo Makefile

audio/picard-plugins: Update to snapshot from 2024-11-13

Updated plugins:
- non_ascii_equivalents
- replaygain2
DeltaFile
+3-3audio/picard-plugins/distinfo
+2-2audio/picard-plugins/Makefile
+5-52 files

FreeBSD/ports 8b6eee8audio/picard distinfo Makefile

audio/picard: Update to 2.13.1

https://github.com/metabrainz/picard/releases/tag/release-2.13.1
DeltaFile
+3-3audio/picard/distinfo
+1-2audio/picard/Makefile
+4-52 files

FreeBSD/ports a177c72audio/liblastfm pkg-plist Makefile, audio/liblastfm-qt5 Makefile pkg-plist

audio/liblastfm-qt5: Rename and only support Qt6

Move port origin to audio/liblastfm and only support Qt6. Qt5 support
is not required by anything currently in the ports tree.

Switch to active fork and update to latest commit.

Convert TEST option to the cmake testing framework.
DeltaFile
+0-123audio/liblastfm-qt5/files/patch-src_UrlBuilder.cpp
+0-45audio/liblastfm-qt5/Makefile
+40-0audio/liblastfm/pkg-plist
+0-36audio/liblastfm-qt5/pkg-plist
+35-0audio/liblastfm/Makefile
+0-33audio/liblastfm-qt5/files/patch-src_UrlBuilder.h
+75-23714 files not shown
+163-29920 files

FreeBSD/ports b90a026graphics/libxisf distinfo Makefile

graphics/libxisf: Update to 0.2.13
DeltaFile
+3-3graphics/libxisf/distinfo
+1-1graphics/libxisf/Makefile
+4-42 files

FreeBSD/ports d9884c4net/openmpi4 pkg-plist Makefile

net/openmpi4: Update to 4.1.8

- Drop workaround for [1], the problem was fixed upstream. Tested on
  FreeBSD 13.4, 14.2 and 15.

Changelog: https://raw.githubusercontent.com/open-mpi/ompi/v4.1.x/NEWS

[1] - https://github.com/open-mpi/ompi/issues/7516
DeltaFile
+9-5net/openmpi4/pkg-plist
+1-5net/openmpi4/Makefile
+3-3net/openmpi4/distinfo
+13-133 files

FreeBSD/ports af174fcdevel/osc distinfo Makefile

devel/osc: update 1.11.1 → 1.12.0
DeltaFile
+3-3devel/osc/distinfo
+1-1devel/osc/Makefile
+4-42 files

FreeBSD/ports 07a5510sysutils/pv distinfo Makefile

sysutils/pv: Update to 1.9.31

Changelog: https://codeberg.org/a-j-wood/pv/src/tag/v1.9.31/docs/NEWS.md

PR:     284550
Reported by:    John W. O'Brien <john at saltant.com>
Sponsored by:   Saltant Solutions LLC
DeltaFile
+3-3sysutils/pv/distinfo
+1-1sysutils/pv/Makefile
+4-42 files

FreeBSD/ports 5816993www/grafana distinfo Makefile

www/grafana: Update 11.4.0 -> 11.5.1

What's new:
* https://grafana.com/docs/grafana/next/whatsnew/whats-new-in-v11-5/

Changelog:
* https://github.com/grafana/grafana/releases/tag/v11.5.1
* https://github.com/grafana/grafana/releases/tag/v11.5.0

PR:     284579
DeltaFile
+41-31www/grafana/distinfo
+7-3www/grafana/Makefile
+48-342 files

FreeBSD/ports f0d9ef6multimedia/subtitlecomposer Makefile

multimedia/subtitlecomposer: switch to KF6/Qt6
DeltaFile
+7-8multimedia/subtitlecomposer/Makefile
+7-81 files

FreeBSD/ports 09a72b6graphics/kgraphviewer pkg-plist Makefile, graphics/kgraphviewer/files patch-cmake_FindGraphviz.cmake patch-src_part_CMakeLists.txt

graphics/kgraphviewer: update to 2.5.0 and switch to KF6/Qt6

- Update WWW
- Remove stale patches
DeltaFile
+23-36graphics/kgraphviewer/pkg-plist
+0-58graphics/kgraphviewer/files/patch-cmake_FindGraphviz.cmake
+9-10graphics/kgraphviewer/Makefile
+0-12graphics/kgraphviewer/files/patch-src_part_CMakeLists.txt
+3-3graphics/kgraphviewer/distinfo
+35-1195 files

FreeBSD/ports 79c5f80sysutils/eza distinfo Makefile.crates

sysutils/eza: Update to 0.20.19

Changelogs:
https://github.com/eza-community/eza/releases/tag/v0.20.18
https://github.com/eza-community/eza/releases/tag/v0.20.19

PR:             284284
Approved by:    submitter is maintainer
DeltaFile
+49-57sysutils/eza/distinfo
+22-26sysutils/eza/Makefile.crates
+1-2sysutils/eza/Makefile
+72-853 files

FreeBSD/ports f6a3606x11/kitty pkg-plist distinfo

x11/kitty: Update to 0.38.1

- Use go version 1.23 to build

PR:             284192
DeltaFile
+10-1x11/kitty/pkg-plist
+5-5x11/kitty/distinfo
+2-3x11/kitty/Makefile
+17-93 files

FreeBSD/ports 6ff7d69net-im/linux-discord distinfo Makefile

net-im/linux-discord: Update to 0.0.84
DeltaFile
+3-3net-im/linux-discord/distinfo
+1-1net-im/linux-discord/Makefile
+4-42 files

FreeBSD/ports 7040041. UPDATING, www/gitlab Makefile.common

www/gitlab: fix error uninitialized constant ActiveSupport::LoggerThreadSafeLevel::Logger

The upgrade of gem concurrent-ruby to 1.3.5 made a bug in activesupport visible.
The bug seems to be fixed for rails 7.1 and 7.2 but not 7.0 which gitlab uses.
https://github.com/rails/rails/pull/49372
https://github.com/rails/rails/issues/54260

So we import the Logger to fix the error message:
bundler: failed to load command: puma (/usr/local/bin/puma)
/usr/local/lib/ruby/gems/3.2/gems/activesupport-7.0.8.7/lib/active_support/logger_thread_safe_level.rb:12:in `<module:LoggerThreadSafeLevel>': uninitialized constant ActiveSupport::LoggerThreadSafeLevel::Logger (NameError)

    Logger::Severity.constants.each do |severity|
          ^^^^^^^^^^
        from /usr/local/lib/ruby/gems/3.2/gems/activesupport-7.0.8.7/lib/active_support/logger_thread_safe_level.rb:9:in `<module:ActiveSupport>'
        from /usr/local/lib/ruby/gems/3.2/gems/activesupport-7.0.8.7/lib/active_support/logger_thread_safe_level.rb:8:in `<top (required)>'
        from <internal:/usr/local/lib/ruby/site_ruby/3.2/rubygems/core_ext/kernel_require.rb>:37:in `require'
        from <internal:/usr/local/lib/ruby/site_ruby/3.2/rubygems/core_ext/kernel_require.rb>:37:in `require'
        from /usr/local/lib/ruby/gems/3.2/gems/activesupport-7.0.8.7/lib/active_support/logger_silence.rb:5:in `<top (required)>'
        from <internal:/usr/local/lib/ruby/site_ruby/3.2/rubygems/core_ext/kernel_require.rb>:37:in `require'

    [45 lines not shown]
DeltaFile
+13-4www/gitlab/files/patch-config_puma.rb.example
+13-0UPDATING
+1-1www/gitlab/Makefile.common
+27-53 files

FreeBSD/ports fddfbb6security/trivy distinfo Makefile

security/trivy: update to 0.59.1

Changes:        https://github.com/aquasecurity/trivy/releases/tag/v0.59.1
DeltaFile
+5-5security/trivy/distinfo
+2-2security/trivy/Makefile
+7-72 files

FreeBSD/ports b85d4d8. MOVED, audio/kid3 Makefile

audio/kid3: Remove kf5 flavor

Since Plasma5 is gone and most KDE Applications have been switched to
kf6, there is no more reason to keep the kf5 flavor.

Refactor common variables.

While here, fix warnings about locale settings in tests (again).
DeltaFile
+15-34audio/kid3/Makefile
+1-0MOVED
+16-342 files

FreeBSD/ports b357fc2www/squid Makefile

www/squid: fix build with TDB enabled

PR:             284532
DeltaFile
+2-0www/squid/Makefile
+2-01 files

FreeBSD/ports 654d811security/p5-Crypt-Random distinfo Makefile

security/p5-Crypt-Random: update to 1.56
DeltaFile
+3-3security/p5-Crypt-Random/distinfo
+1-1security/p5-Crypt-Random/Makefile
+1-0security/p5-Crypt-Random/pkg-plist
+5-43 files

FreeBSD/ports 8968bf9devel/rubygem-opentelemetry-instrumentation-grape distinfo Makefile

devel/rubygem-opentelemetry-instrumentation-grape: update to 0.3.0

Changes:        https://github.com/open-telemetry/opentelemetry-ruby-contrib/blob/main/instrumentation/grape/CHANGELOG.md
DeltaFile
+3-3devel/rubygem-opentelemetry-instrumentation-grape/distinfo
+2-2devel/rubygem-opentelemetry-instrumentation-grape/Makefile
+5-52 files

FreeBSD/ports 21bcec4devel/rubygem-opentelemetry-instrumentation-rails Makefile distinfo

devel/rubygem-opentelemetry-instrumentation-rails: update to 0.35.0

Changes:        https://github.com/open-telemetry/opentelemetry-ruby-contrib/blob/main/instrumentation/rails/CHANGELOG.md
DeltaFile
+9-9devel/rubygem-opentelemetry-instrumentation-rails/Makefile
+3-3devel/rubygem-opentelemetry-instrumentation-rails/distinfo
+12-122 files

FreeBSD/ports eefa776devel/rubygem-opentelemetry-instrumentation-net_http distinfo Makefile

devel/rubygem-opentelemetry-instrumentation-net_http: update to 0.23.0

Changes:        https://github.com/open-telemetry/opentelemetry-ruby-contrib/blob/main/instrumentation/net_http/CHANGELOG.md
DeltaFile
+3-3devel/rubygem-opentelemetry-instrumentation-net_http/distinfo
+2-2devel/rubygem-opentelemetry-instrumentation-net_http/Makefile
+5-52 files

FreeBSD/ports bc6b699devel/rubygem-opentelemetry-instrumentation-active_job distinfo Makefile

devel/rubygem-opentelemetry-instrumentation-active_job: update to 0.8.0

Changes:        https://github.com/open-telemetry/opentelemetry-ruby-contrib/blob/main/instrumentation/active_job/CHANGELOG.md
DeltaFile
+3-3devel/rubygem-opentelemetry-instrumentation-active_job/distinfo
+2-2devel/rubygem-opentelemetry-instrumentation-active_job/Makefile
+5-52 files

FreeBSD/ports cfe823edevel/rubygem-opentelemetry-instrumentation-action_pack distinfo Makefile

devel/rubygem-opentelemetry-instrumentation-action_pack: update to 0.11.0

Changes:        https://github.com/open-telemetry/opentelemetry-ruby-contrib/blob/main/instrumentation/action_pack/CHANGELOG.md
DeltaFile
+3-3devel/rubygem-opentelemetry-instrumentation-action_pack/distinfo
+2-2devel/rubygem-opentelemetry-instrumentation-action_pack/Makefile
+5-52 files

FreeBSD/ports b297e8cdevel/rubygem-opentelemetry-instrumentation-pg distinfo Makefile

devel/rubygem-opentelemetry-instrumentation-pg: update to 0.30.0

Changes:        https://github.com/open-telemetry/opentelemetry-ruby-contrib/blob/main/instrumentation/pg/CHANGELOG.md
DeltaFile
+3-3devel/rubygem-opentelemetry-instrumentation-pg/distinfo
+2-2devel/rubygem-opentelemetry-instrumentation-pg/Makefile
+5-52 files

FreeBSD/ports 5117e5edevel/rubygem-opentelemetry-instrumentation-ethon distinfo Makefile

devel/rubygem-opentelemetry-instrumentation-ethon: update to 0.22.0

Changes:        https://github.com/open-telemetry/opentelemetry-ruby-contrib/blob/main/instrumentation/ethon/CHANGELOG.md
DeltaFile
+3-3devel/rubygem-opentelemetry-instrumentation-ethon/distinfo
+2-2devel/rubygem-opentelemetry-instrumentation-ethon/Makefile
+5-52 files