BSD Commit Log Search

security/vuxml: add xwayland vulnerabilities

Sponsored by:   tipi.work

irc/halloy: update to 2026.7

Release notes: https://github.com/squidowl/halloy/releases/tag/2026.7

Remove no longer used USES=ssl

PR: 295749
Approved by: Andie Bradley (maintainer)

security/vuxml: add xorg-server vulnerabilities

security/vuxml: fix x11-servers/xorg-server's PORTEPOCH

% make -V PORTEPOCH -f /usr/ports/x11-servers/xorg-server/Makefile
1

Sponsored by:   tipi.work

devel/py-ty: Update to 0.0.42

Changelog: https://github.com/astral-sh/ty/blob/0.0.42/CHANGELOG.md

Reported by:    Repology

sysutils/desktop-installer: Update to 1.2.0.1

Fix termination trying to remove missing freebsd-update-notify

www/py-nicegui-highcharts: Update to 3.2.1

ChangeLog: https://github.com/zauberzeug/nicegui-highcharts/releases/tag/v3.2.1

www/py-nicegui: Update to 3.12.1

ChangeLog: https://github.com/zauberzeug/nicegui/compare/v3.8.0...v3.12.1

www/py-pywebview-{gtk,qt}: Update to 6.2.1

ChangeLog: https://github.com/r0x0r/pywebview/compare/5.3.2...6.2.1

PR:             295753
Reported by:    makc@

devel/py-PyGObject-stubs: New port: Typing stubs for PyGObject

PyGObject-stubs implements PEP 561 typing stubs for PyGObject.

WWW: https://github.com/pygobject/pygobject-stubs

Avoid incorrect UFS1 timestamp corrections when system clock fails at boot.

Git 1111a44301da - main - Defer the January 19, 2038 date limit in
UFS1 file systems to February 7, 2106 - did so by changing the UFS1
32-bit signed timestamps to unsigned. With this change, time stamps
from before January 1, 1970 went from being negative numbers to
large positive numbers implying times in the future. When such a
time stamp is encountered when an inode is read into memory or when
it is encountered by fsck, its timestamp is replaced with the
kernel's current time.

Andre Albsmeier reported that he had a machine reboot after a power
failure and the battery that maintained its real-time clock had
died. The result was that the system booted with the time set to
five years earlier (absent a real-time clock value, the boot ROM
used the time that the boot ROM had last been updated). The net
result was that fsck reset the time stamps of all files newer than
five years old to the five year old time.


    [29 lines not shown]

security/lego: Update 4.35.2 => 5.2.1

Changelog:
https://github.com/go-acme/lego/releases/tag/v5.0.0
https://github.com/go-acme/lego/releases/tag/v5.0.1
https://github.com/go-acme/lego/releases/tag/v5.0.2
https://github.com/go-acme/lego/releases/tag/v5.0.3
https://github.com/go-acme/lego/releases/tag/v5.0.4
https://github.com/go-acme/lego/releases/tag/v5.1.0
https://github.com/go-acme/lego/releases/tag/v5.2.0
https://github.com/go-acme/lego/releases/tag/v5.2.1

While here sort plist.

PR:             295779
Sponsored by:   UNIS Labs

devel/binaryen: Update to 130

ChangeLog: https://github.com/WebAssembly/binaryen/blob/main/CHANGELOG.md#v130

man/math.3: mention fmaximum_mag_num, fminimum_mag_num

PR:             294719
MFC after:      1 month

(cherry picked from commit 9f98195ff615417f7af875b65cdaf220239206db)

lib/msun: Replaced pattern to force exception in _num families

Replaced the old pattern of using a ternary to force addition
(raising exceptions for sNaN's) with a new one using a volatile
variable. The _mag_num family was already implemented with this pattern

PR:             294719
Reviewed by:    fuz, kargl
MFC after:      1 month

(cherry picked from commit 7c20e15592a07ea457cacb0d6706948815c8420e)

lib/msun: fmaximum_mag_num family. Tests and man page

Added the fmaximum_mag_num{,f,l} and fminimum_mag_num{,f,l} functions.

PR:             294719
Reviewed by:    fuz, kargl
MFC after:      1 month

(cherry picked from commit f62d826a6f5b9022b0cedfe22a698998ad9cb7f4)

net-im/py-apprise: Update 1.8.1 => 1.11.0

Changelogs:
https://github.com/caronc/apprise/releases/tag/v1.9.0
https://github.com/caronc/apprise/releases/tag/v1.9.1
https://github.com/caronc/apprise/releases/tag/v1.9.2
https://github.com/caronc/apprise/releases/tag/v1.9.3
https://github.com/caronc/apprise/releases/tag/v1.9.4
https://github.com/caronc/apprise/releases/tag/v1.9.5
https://github.com/caronc/apprise/releases/tag/v1.9.6
https://github.com/caronc/apprise/releases/tag/v1.9.7
https://github.com/caronc/apprise/releases/tag/v1.9.8
https://github.com/caronc/apprise/releases/tag/v1.9.9
https://github.com/caronc/apprise/releases/tag/v1.10.0
https://github.com/caronc/apprise/releases/tag/v1.11.0

PR:             295402
Approved by:    Nicholas Kirby <nick at kirby.cx> (maintainer, timeout 2 weeks)
Sponsored by:   UNIS Labs

    [4 lines not shown]

net-im/py-apprise: Update 1.8.1 => 1.11.0

Changelogs:
https://github.com/caronc/apprise/releases/tag/v1.9.0
https://github.com/caronc/apprise/releases/tag/v1.9.1
https://github.com/caronc/apprise/releases/tag/v1.9.2
https://github.com/caronc/apprise/releases/tag/v1.9.3
https://github.com/caronc/apprise/releases/tag/v1.9.4
https://github.com/caronc/apprise/releases/tag/v1.9.5
https://github.com/caronc/apprise/releases/tag/v1.9.6
https://github.com/caronc/apprise/releases/tag/v1.9.7
https://github.com/caronc/apprise/releases/tag/v1.9.8
https://github.com/caronc/apprise/releases/tag/v1.9.9
https://github.com/caronc/apprise/releases/tag/v1.10.0
https://github.com/caronc/apprise/releases/tag/v1.11.0

PR:             295402
Approved by:    Nicholas Kirby <nick at kirby.cx> (maintainer, timeout 2 weeks)
Sponsored by:   UNIS Labs

    [2 lines not shown]

security/tpm2-tss: Update 4.0.1 => 4.1.3 (CVE-2024-29040)

Changelog:
https://github.com/tpm2-software/tpm2-tss/blob/4.1.3/CHANGELOG.md

- Fix warnings from portclippy.
- Merge MKDIRs and RMDIRs.
- Refresh patches.

PR:             295403
Approved by:    Tadeusz Struk <tstruk at gmail.com> (maintainer, timeout 2 weeks)
Security:       CVE-2024-29040
Sponsored by:   UNIS Labs
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>
MFH:            2026Q2

(cherry picked from commit e715576c4d46e007740709475b8d491186b135ac)

security/tpm2-tss: Update 4.0.1 => 4.1.3 (CVE-2024-29040)

Changelog:
https://github.com/tpm2-software/tpm2-tss/blob/4.1.3/CHANGELOG.md

- Fix warnings from portclippy.
- Merge MKDIRs and RMDIRs.
- Refresh patches.

PR:             295403
Approved by:    Tadeusz Struk <tstruk at gmail.com> (maintainer, timeout 2 weeks)
Security:       CVE-2024-29040
Sponsored by:   UNIS Labs
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>
MFH:            2026Q2

books/fdp-primer: "patch" word is NOT needed

Update instructions for submitting Problem Reports.
Improve description of the steps to submit a diff.

The [patch] convention for the summary field is not needed anymore.
Update the quick start FreeBSD section in the overview chapter of
the fdp-primer to reflect that.

PR:             295715

net/rclone: Update 1.73.5 => 1.74.2

Changelog:
https://rclone.org/changelog/#v1-74-2-2026-05-22

PR:             295542
Approved by:    Ralf van der Enden <tremere at cainites.net> (maintainer)
Sponsored by:   UNIS Labs
MFH:            2026Q2

(cherry picked from commit b6063433a3a4ae661ca4d3b50a272de1f6490aa7)

net/rclone: update to v1.73.5

Changelog: https://rclone.org/changelog/#v1-73-5-2026-04-19

PR:             294682
(cherry picked from commit b841b16b4ec384a8f6da432b5fa42bdd8aa183d2)

net/rclone: Update 1.73.5 => 1.74.2

Changelog:
https://rclone.org/changelog/#v1-74-2-2026-05-22

PR:             295542
Approved by:    Ralf van der Enden <tremere at cainites.net> (maintainer)
Sponsored by:   UNIS Labs
MFH:            2026Q2

science/afni: Update to 26.1.03

www/firefox: update to 151.0.3

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/151.0.3/releasenotes/

(cherry picked from commit c1b9d449614433d81a0930951e38fb2b21b8fa4e)

www/firefox: update to 151.0.3

Release Notes (soon):
  https://www.firefox.com/en-US/firefox/151.0.3/releasenotes/

graphics/shotwell: update to 0.32.16

Release Notes:
  https://download.gnome.org/sources/shotwell/0.32/shotwell-0.32.16.news

x11/pixman: Constrain to LLVM <= 19 on i386

PR:             295268
Tested by:      Dan Kotowski <dan.kotowski at a9development.com>

security/arti: Update to 2.4.0