BSD Commit Log Search

Mk/bsd.default-versions.mk: Update possible values of ruby version

lang/ruby40: Update to 4.0.0-preview2

ReleaseNotes:   https://www.ruby-lang.org/en/news/2025/11/17/ruby-4-0-0-preview2-released/

lang/ruby40: Rename from lang/ruby35

Upstrem changed version of master branch in their repository from 3.5
to 4.0.

Update my GPG key

security/pkcs11-helper: restore a patch to fix build on older/alternative ssl versions.

(cherry picked from commit 4765ff401ff6c87f8a6fb812a8c1614e879f3991)

security/pkcs11-helper: update to 1.31.0 release.

(cherry picked from commit 1f67990baf40e4eddf2f6126e22670b955e9859d)

security/vuxml: add pkcs11-helper < 1.31.0 parser buffer overflow

mail/fetchmail: Revert "update to 6.6.1"

This reverts commit 685e0668a312ae1fbc44aa1635b182c0659718c6,
which does not yet have maintainer approval and escaped - sorry.

security/openvpn-devel: upgrade port to git commit d6ee27b4ff (2.7_rc2, 2025-11-17)

This commit brings the port to "openvpn 2.7_rc2"

Changes of interest for FreeBSD:

    - IPv6 address parsing: fix buffer overread on invalid input
      (CVE-2025-12106)
    - HMAC verification check: fix incorrect memcmp() call
      (CVE-2025-13086)
    - even more type conversion related warnings have been fixed
    - DCO FreeBSD improvements:
        improving debug messages (verb 6)
        implement client-side counter handling
        repair --inactive (and document shortcomings)
        repair handling of DCO disconnection notifications in --client mode
    - improve cmocka unit test assert() handling
    - PUSH_UPDATE server: fix reporting of client IPs in ``status`` output
      after pushing a new IPv4/IPv6 address to client

    [13 lines not shown]

security/openvpn: security update to 2.6.16

Changelog:      https://github.com/OpenVPN/openvpn/blob/v2.6.16/Changes.rst#overview-of-changes-in-2616
MFH:            2025Q4
Security:       17a40d76-c3fd-11f0-b513-0da7be77c170
Security:       CVE-2025-13086
(cherry picked from commit f0181a6845139e268922d522241c161a43e229d0)

mail/fetchmail: update to 6.6.1

Translation updates by:
* sr:    Мирослав Николић [Miroslav Nikolić, Serbian]
* es:    Cristian Othón Martínez Vera [Spanish]

PR:             290987
Approved by:    (pending)

archivers/zstd: remove lz4, fix manpages

This shortens the requisite path for lang/python314,
and we have a separate archivers/lz4 port.

This also updates the manual pages to v1.5.7, the
release tarball missed updating them, see
<https://github.com/facebook/zstd/releases/tag/v1.5.7>

PR:             290739
Approved by:    maintainer timeout (sunpoet@, 15 days)

security/openvpn-devel: upgrade port to git commit d6ee27b4ff (2.7_rc2, 2025-11-17)

This commit brings the port to "openvpn 2.7_rc2"

Changes of interest for FreeBSD:

    - IPv6 address parsing: fix buffer overread on invalid input
      (CVE-2025-12106)
    - HMAC verification check: fix incorrect memcmp() call
      (CVE-2025-13086)
    - even more type conversion related warnings have been fixed
    - DCO FreeBSD improvements:
        improving debug messages (verb 6)
        implement client-side counter handling
        repair --inactive (and document shortcomings)
        repair handling of DCO disconnection notifications in --client mode
    - improve cmocka unit test assert() handling
    - PUSH_UPDATE server: fix reporting of client IPs in ``status`` output
      after pushing a new IPv4/IPv6 address to client

    [11 lines not shown]

security/openvpn: security update to 2.6.16

Changelog:      https://github.com/OpenVPN/openvpn/blob/v2.6.16/Changes.rst#overview-of-changes-in-2616
MFH:            2025Q4
Security:       17a40d76-c3fd-11f0-b513-0da7be77c170
Security:       CVE-2025-13086

security/vuxml: add two OpenVPN CVEs

Security: 50a0c266-c3ff-11f0-b513-0da7be77c170
Security: CVE-2025-12106
Security: 17a40d76-c3fd-11f0-b513-0da7be77c170
Security: CVE-2025-13086

if_ovpn: use IFT_TUNNEL

IFT_ENC has special behaviour in pf we don't desire, and this also ensures that
for all interface types there is N:1:1 correspondence between if_type:dlt:header len.

Requested by:   glebius
MFC after:      1 week

bhyve: Report SVM as disabled on AMD

bhyve with a Windows 2025 guest will hang/freeze with the message
    rdmsr to register 0xc0010114
on a system with an AMD Ryzen 5. Evidently, recent versions of Windows
ignore the CPUID bits and still read this MSR.

Fix is to report Secure Virtual Machine (SVM) mode as disabled in the VM CR.

PR:             288308

(cherry picked from commit 92dfc3fbcd79422a4586590edabe483f361b7e0e)

zfs: unbreak gcc builds after openzfs/zfs at e63d026b9

15.0: Announce RC1

Approved by:    re (implicit)
Sponsored by:   https://www.patreon.com/cperciva

www/rubygem-propshaft: Update RUN_DEPENDS: use Rails 8.1

- Bump PORTREVISION for dependency change

www/rubygem-turbo-rails: Update RUN_DEPENDS: use Rails 8.1

- Bump PORTREVISION for dependency change

www/rubygem-stimulus-rails: Update RUN_DEPENDS: use Rails 8.1

- Bump PORTREVISION for dependency change

www/rubygem-tailwindcss-rails: Update RUN_DEPENDS: use Rails 8.1

- Bump PORTREVISION for dependency change

www/rubygem-importmap-rails: Update RUN_DEPENDS: use Rails 8.1

- Bump PORTREVISION for dependency change

www/rubygem-kamal: Update RUN_DEPENDS: use Rails 8.1

- Bump PORTREVISION for dependency change

www/rubygem-jsbundling-rails: Update RUN_DEPENDS: use Rails 8.1

- Bump PORTREVISION for dependency change

www/rubygem-cssbundling-rails: Update RUN_DEPENDS: use Rails 8.1

- Bump PORTREVISION for dependency change

databases/rubygem-solid_cable: Update RUN_DEPENDS: use Rails 8.1

- Bump PORTREVISION for dependency change

databases/rubygem-solid_cache: Update RUN_DEPENDS: use Rails 8.1

- Bump PORTREVISION for dependency change

databases/rubygem-solid_queue: Update RUN_DEPENDS: use Rails 8.1

- Bump PORTREVISION for dependency change