FreeBSD/ports 717db23security/vuxml/vuln 2026.xml

security/vuxml: Add Mozilla vulnerabilities

 * CVE-2026-0892
 * CVE-2026-0889
 * CVE-2026-0888
 * CVE-2026-0881
 * CVE-2026-0891
 * CVE-2026-0890
 * CVE-2026-0887
 * CVE-2026-0885
 * CVE-2026-0884
 * CVE-2026-0883
 * CVE-2026-0878
 * CVE-2026-0886
 * CVE-2026-0882
 * CVE-2026-0880
 * CVE-2026-0879
 * CVE-2026-0877
DeltaFile
+124-0security/vuxml/vuln/2026.xml
+124-01 files

FreeBSD/ports 013f2d3accessibility/darkman Makefile, archivers/unpackerr Makefile

various: Bump Go ports for 1.24.12
DeltaFile
+1-1accessibility/darkman/Makefile
+1-1archivers/unpackerr/Makefile
+1-1audio/go-librespot/Makefile
+1-1audio/murmur-cli/Makefile
+1-1audio/pms-devel/Makefile
+1-1audio/unflac/Makefile
+6-6673 files not shown
+679-554679 files

FreeBSD/ports 6e66a11lang/go124 distinfo Makefile

lang/go124: Update to 1.24.12

Changes:
  go1.24.12 (released 2026-01-15) includes security fixes to the go
  command, and the archive/zip, crypto/tls, and net/url packages, as well
  as bug fixes to the compiler, the runtime, and the crypto/tls and os
  packages.
DeltaFile
+3-3lang/go124/distinfo
+1-1lang/go124/Makefile
+4-42 files

FreeBSD/ports 9f4bc8daudio/gonic Makefile, dns/q-dns Makefile

various: Bump Go ports for 1.25.6
DeltaFile
+1-1audio/gonic/Makefile
+1-1dns/q-dns/Makefile
+1-1net-mgmt/check_wg/Makefile
+1-1net/krakend-ce/Makefile
+1-1sysutils/terragrunt/Makefile
+1-1sysutils/kops/Makefile
+6-664 files not shown
+70-2570 files

FreeBSD/ports d9cf2d7lang/go125 distinfo Makefile

lang/go125: Update to 1.25.6

Changes:
  go1.25.6 (released 2026-01-15) includes security fixes to the go
  command, and the archive/zip, crypto/tls, and net/url packages, as well
  as bug fixes to the compiler, the runtime, and the crypto/tls, errors,
  and os packages.
DeltaFile
+3-3lang/go125/distinfo
+1-1lang/go125/Makefile
+4-42 files

FreeBSD/doc 4fe4ba6documentation/content/en/articles/pgpkeys _index.adoc, documentation/static/pgpkeys siva.key

new committer (src): Siva Mahadevan (siva)

Complete steps 1-4 for new committers from the guide.

Reviewed by:            lwhsu
Approved by:            lwhsu (mentor)
Differential Revision:  https://reviews.freebsd.org/D54735
DeltaFile
+44-0documentation/static/pgpkeys/siva.key
+4-0website/data/en/news/news.toml
+4-0shared/authors.adoc
+3-0documentation/content/en/articles/pgpkeys/_index.adoc
+1-0shared/contrib-committers.adoc
+56-05 files

FreeBSD/ports f52c148audio/py-pyradio distinfo Makefile, audio/py-pyradio/files patch-pyproject.toml

audio/py-pyradio: Update to 0.9.3.11.23

ChangeLog:      https://github.com/coderholic/pyradio/releases/tag/0.9.3.11.23
Reported by:    Spiros Georgaras <notifications at github.com
DeltaFile
+5-15audio/py-pyradio/files/patch-pyproject.toml
+3-3audio/py-pyradio/distinfo
+1-1audio/py-pyradio/Makefile
+9-193 files

FreeBSD/src c527f58lib/libc/gen exterr_cat_filenames.h

exterr: Regenerate exterr_cat_filenames.h
DeltaFile
+1-1lib/libc/gen/exterr_cat_filenames.h
+1-11 files

FreeBSD/src bda6ed2tools/build make_libc_exterr_cat_filenames.sh

exterr: Sort output from make_libc_exterr_cat_filenames.sh

Otherwise the script may permute the order of entries in the file since
find(1) output is not stable.

Reviewed by:    kib
MFC after:      1 week
Differential Revision:  https://reviews.freebsd.org/D54669
DeltaFile
+1-1tools/build/make_libc_exterr_cat_filenames.sh
+1-11 files

FreeBSD/ports 6156948devel/godot35 Makefile

devel/godot35: Deprecate

Legacy version should have been removed with devel/godot35-tools,
consider migrating to devel/godot.

PR:     292141
(cherry picked from commit 4073e1292654ee946e82f5f25147e49c7a35559b)
DeltaFile
+3-0devel/godot35/Makefile
+3-01 files

FreeBSD/ports 4073e12devel/godot35 Makefile

devel/godot35: Deprecate

Legacy version should have been removed with devel/godot35-tools,
consider migrating to devel/godot.

PR:     292141
DeltaFile
+3-0devel/godot35/Makefile
+3-01 files

FreeBSD/src e2d7becusr.sbin/bhyve config.c config.h

bhyve: Want walk_config_nodes

Add a function to all nodes under a config option node. This allows
parsing an arbitrary number of similarly structured configuration
options in a config option group.

Reviewed by:    corvink, markj
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D51551
DeltaFile
+33-16usr.sbin/bhyve/config.c
+9-0usr.sbin/bhyve/config.h
+42-162 files

FreeBSD/ports d68e67emath/openblas64 distinfo Makefile, math/openblas64/files patch-CMakeLists.txt patch-cmake_system.cmake

math/openblas64: upgrade to 0.3.31

Release notes at https://github.com/OpenMathLib/OpenBLAS/releases/tag/v0.3.31
DeltaFile
+4-11math/openblas64/files/patch-CMakeLists.txt
+0-13math/openblas64/files/patch-cmake_system.cmake
+3-3math/openblas64/distinfo
+2-2math/openblas64/files/patch-exports_Makefile
+1-1math/openblas64/Makefile
+10-305 files

FreeBSD/ports adb8675lang/lfortran Makefile distinfo

lang/lfortran: upgrade to v0.59.0

Release note at https://github.com/lfortran/lfortran/releases/tag/v0.59.0

Remark: BFD is disbled for the moment.
DeltaFile
+4-4lang/lfortran/Makefile
+3-3lang/lfortran/distinfo
+7-72 files

FreeBSD/src 87c4d65sys/x86/cpufreq hwpstate_amd.c

hwpstate_amd: Use ipi instead of sched_bind + thread_lock

Reviewed by:    olce
Approved by:    markj (mentor)
MFC after:      2 weeks
Differential Revision: https://reviews.freebsd.org/D54505
DeltaFile
+79-67sys/x86/cpufreq/hwpstate_amd.c
+79-671 files

FreeBSD/src 5b61ef9sys/kern subr_smp.c, sys/sys smp.h

smp: add smp_rendezvous_cpu helper function

Reviewed by:    olce
Approved by:    markj (mentor)
MFC after:      2 weeks
Differential Revision:  https://reviews.freebsd.org/D54551
DeltaFile
+13-0sys/kern/subr_smp.c
+7-1sys/sys/smp.h
+20-12 files

FreeBSD/src cc05704sys/kern subr_bus.c

device_delete_child should be destroying the child, not the dev

MFC After: 1 week
Reviewed by: imp, kib
Pull Request: https://github.com/freebsd/freebsd-src/pull/1934

(cherry picked from commit 930a1341d62ccc4be969c2261e3abaf0c0573a9f)
DeltaFile
+1-1sys/kern/subr_bus.c
+1-11 files

FreeBSD/src b39662fsys/arm/broadcom/bcm2835 files.bcm283x, sys/conf kern.mk files.arm64

vchiq: fix build with clang 21

When compiling vchiq with clang 21, the following -Werror warning is
produced:

    sys/contrib/vchiq/interface/vchiq_arm/vchiq_arm.c:728:27: error: default initialization of an object of type 'VCHIQ_QUEUE_MESSAGE32_T' with const member leaves the object uninitialized [-Werror,-Wdefault-const-init-field-unsafe]
      728 |                 VCHIQ_QUEUE_MESSAGE32_T args32;
          |                                         ^
    sys/contrib/vchiq/interface/vchiq_arm/vchiq_ioctl.h:151:40: note: member 'elements' declared 'const' here
      151 |         const /*VCHIQ_ELEMENT_T * */ uint32_t elements;
          |                                               ^

While the warning is formally correct, the 'args32' object is
immediately initialized after its declaration. Therefore, suppress the
warning.

MFC after:      3 days
DeltaFile
+3-0sys/conf/kern.mk
+1-1sys/conf/files.arm64
+1-1sys/arm/broadcom/bcm2835/files.bcm283x
+5-23 files

FreeBSD/ports 182d797textproc/py-dict2xml distinfo Makefile

textproc/py-dict2xml: Update to 1.7.8

Reported by:    portscout!
DeltaFile
+3-3textproc/py-dict2xml/distinfo
+1-1textproc/py-dict2xml/Makefile
+4-42 files

FreeBSD/ports f0b9a73shells/sash Makefile

shells/sash: broke on FreeBSD 15

This port requires struct msdosfs_args, which is now kernel-only.

See also:       https://reviews.freebsd.org/D50718

(cherry picked from commit d7fdb3471c32765c89146c4333c5b984361ad4ab)
DeltaFile
+3-0shells/sash/Makefile
+3-01 files

FreeBSD/ports 523cabdgraphics/sdl2_gpu Makefile pkg-descr

graphics/sdl2_gpu: disable DOCS option due to OOM condition in graphviz

For some reason graphviz now needs more than 20 GB to process one of
the figures in the documentation of this project.

Disable docs to avoid OOM conditions.

MFH:            2026Q1
(cherry picked from commit 1f4db82dbd52c18499fb8f7d222415324877dff3)
DeltaFile
+3-0graphics/sdl2_gpu/Makefile
+1-1graphics/sdl2_gpu/pkg-descr
+4-12 files

FreeBSD/ports d684014cad/spice/files patch-src_include_misc_h

cad/spice: fix build on FreeBSD 15.0

The timezone symbol now follows POSIX on FreeBSD 15.0.
Remove spice's own declaration, which seems to have gone unused in any
case.

See also:       https://reviews.freebsd.org/D44281
Approved by:    portmgr (build fix blanket)
MFH:            2026Q1

(cherry picked from commit 46b4e04137ac569c1bbcd3965c087e785c70bc55)
DeltaFile
+14-5cad/spice/files/patch-src_include_misc_h
+14-51 files

FreeBSD/ports 54a77bbemulators/tic-80 distinfo Makefile, emulators/tic-80/files patch-vendor_msf__gif_msf__gif.h

emulators/tic-80: bump msf-gif bundled dependency to v2.4

Upstream has nuked the repository, removing the v2.2 version of the
package.  Switch to v2.4 in the new repository to fix fetching.

See also:       https://github.com/notnullnotvoid/msf_gif/issues/14
MFH:            2026Q1

(cherry picked from commit 1f3a06bf4e1b4148db1e7df11ad1ab90e4ee6286)
DeltaFile
+11-0emulators/tic-80/files/patch-vendor_msf__gif_msf__gif.h
+3-3emulators/tic-80/distinfo
+2-2emulators/tic-80/Makefile
+16-53 files

FreeBSD/ports 54f8a1amisc/raspberrypi-gpioshutdown/files patch-Makefile

misc/raspberrypi-gpioshutdown: fix poudriere build

Replace ../.. with ${SYSDIR} for finding kernel files.

Approved by:    portmgr (build fix blanket)
MFH:            2026Q1

(cherry picked from commit d529e8ab0cd9602e1a211d409b3713cb94d8d487)
DeltaFile
+19-0misc/raspberrypi-gpioshutdown/files/patch-Makefile
+19-01 files

FreeBSD/ports 9156ab1devel/loki Makefile

devel/loki: broken, deprecate

This is a support library for games/asc, which was removed from ports
in 2019.  Last upstream change was 2009, he's dead jim.  Also doesn't
build anywhere:

../include/loki/SmartPtr.h:1323:33: error: a template argument list is expected after a name prefixed by the template keyword [-Wmissing-template-arg-list-after-template-kw]
 1323 |             return OP::template Merge( rhs );
      |                                 ^

MFH:            2026Q1
(cherry picked from commit 490adcf00af5e517be9a6457d26a68a6bd259d94)
DeltaFile
+5-0devel/loki/Makefile
+5-01 files

FreeBSD/ports 9f30ea8ftp/ftpsesame Makefile

ftp/ftpsesame: broken on FreeBSD 15, deprecate

This port requires the obsolete ioctl(DIOCGETSTATUS), which is no
longer supported on FreeBSD 15.  Upstream is dead, so deprecate.
It also has some questionable warnings.

See also:       D41651
MFH:            2026Q1

(cherry picked from commit beee8f4390bca69869de817aa801e67b7c4c4fdd)
DeltaFile
+7-1ftp/ftpsesame/Makefile
+7-11 files

FreeBSD/ports 7dbe810science/healpix Makefile

science/healpix: fix build on armv7

No OpenMP on armv7.

Approved by:    portmgr (build fix blanket)
MFH:            2026Q1

(cherry picked from commit 2ef89014fc0236c6b44a3d4c02b3806039596b94)
DeltaFile
+2-0science/healpix/Makefile
+2-01 files

FreeBSD/ports ffec995devel/goreleaser distinfo Makefile

devel/goreleaser: update to 2.13.3

Changelog: https://github.com/goreleaser/goreleaser/releases/tag/v2.13.3

MFH:            2026Q1
(cherry picked from commit 5b44584f7cb4dabae4fcdcd8a525408985ca75fd)
DeltaFile
+5-5devel/goreleaser/distinfo
+1-1devel/goreleaser/Makefile
+6-62 files

FreeBSD/ports 490adcfdevel/loki Makefile

devel/loki: broken, deprecate

This is a support library for games/asc, which was removed from ports
in 2019.  Last upstream change was 2009, he's dead jim.  Also doesn't
build anywhere:

../include/loki/SmartPtr.h:1323:33: error: a template argument list is expected after a name prefixed by the template keyword [-Wmissing-template-arg-list-after-template-kw]
 1323 |             return OP::template Merge( rhs );
      |                                 ^

MFH:            2026Q1
DeltaFile
+5-0devel/loki/Makefile
+5-01 files

FreeBSD/ports d529e8amisc/raspberrypi-gpioshutdown/files patch-Makefile

misc/raspberrypi-gpioshutdown: fix poudriere build

Replace ../.. with ${SYSDIR} for finding kernel files.

Approved by:    portmgr (build fix blanket)
MFH:            2026Q1
DeltaFile
+19-0misc/raspberrypi-gpioshutdown/files/patch-Makefile
+19-01 files