BSD Commit Log Search

devel/jenkins-lts: Update to 2.555.2

Sponsored by:   The FreeBSD Foundation

devel/jenkins: Update to 2.564

Sponsored by:   The FreeBSD Foundation

mail/mailpit: Update to 1.30.0

Security:       6e701ad2-4f61-11f1-af6d-10ffe07f9334

security/vuxml: Add postgreql??-* vulnerabilities

* CVE-2026-6472
* CVE-2026-6473
* CVE-2026-6474
* CVE-2026-6475
* CVE-2026-6476
* CVE-2026-6477
* CVE-2026-6478
* CVE-2026-6479
* CVE-2026-6575
* CVE-2026-6637
* CVE-2026-6638

databases/postgresql??-*: Upgrade to latest version

The PostgreSQL Global Development Group has released an update to all
supported versions of PostgreSQL, including 18.4, 17.10, 16.14, 15.18,
and 14.23. This release fixes 11 security vulnerabilities and over 60
bugs reported over the last several months.

Release notes:  https://www.postgresql.org/docs/release/

PostgreSQL 14 EOL Notice

PostgreSQL 14 will stop receiving fixes on November 12, 2026. If you are
running PostgreSQL 14 in a production environment, we suggest that you
make plans to upgrade to a newer, supported version of PostgreSQL.
Please see our versioning policy for more information.

Security:       7185ecc9-4fb7-11f1-bc50-6cc21735f730
                CVE-2026-6472, CVE-2026-6473, CVE-2026-6474,
                CVE-2026-6475, CVE-2026-6476, CVE-2026-6477,

    [2 lines not shown]

multimedia/zoneminder: Fix build on aarch64 and armv*

PR:             295090
Reviewed by:    fuz
Sponsored by:   UNIS Labs

sysutils/RyzenAdj: Update 0.17.0 => 0.19.0

Changelog:
https://github.com/FlyGoat/RyzenAdj/releases/tag/v0.19.0

PR:             295285
Sponsored by:   UNIS Labs
MFH:            2026Q2

(cherry picked from commit 1d5630179a051c8ed4f70d15b4ead2c00b0f0b78)

sysutils/RyzenAdj: Update 0.17.0 => 0.19.0

Changelog:
https://github.com/FlyGoat/RyzenAdj/releases/tag/v0.19.0

PR:             295285
Sponsored by:   UNIS Labs
MFH:            2026Q2

net/spoofdpi: Update 1.5.1 => 1.5.2

Changelog:
https://github.com/xvzc/spoofdpi/releases/tag/v1.5.2

Approved by:    osa, vvd (Mentors, implicit)

textproc/moor: Update 2.13.1 => 2.13.2

Changelog:
https://github.com/walles/moor/releases/tag/v2.13.2

Approved by:    osa, vvd (Mentors, implicit)

sysutils/storcli2: New port: SAS4 MegaRAID FreeBSD StorCLI2

Command Line Interface for the MegaRAID SAS4 family of RAID controllers,
used to configure and manage connected storage devices.

The StorCLI2 tool supports the following controllers:
 * MegaRAID 9600 Family eHBA Adapters
 * MegaRAID 9620 Family eHBA Adapters
 * MegaRAID 9660 Family RAID Adapters
 * MegaRAID 9670 Family RAID Adapters

https://techdocs.broadcom.com/us/en/storage-and-ethernet-connectivity/enterprise-storage-solutions/megaraid8-tri-mode-software/1-0/StorCLI_MR8_Intro.html

PR:             293540
Sponsored by:   UNIS Labs
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>

sysutils/storcli2: New port: SAS4 MegaRAID FreeBSD StorCLI2

Command Line Interface for the MegaRAID SAS4 family of RAID controllers,
used to configure and manage connected storage devices.

The StorCLI2 tool supports the following controllers:
 * MegaRAID 9600 Family eHBA Adapters
 * MegaRAID 9620 Family eHBA Adapters
 * MegaRAID 9660 Family RAID Adapters
 * MegaRAID 9670 Family RAID Adapters

https://techdocs.broadcom.com/us/en/storage-and-ethernet-connectivity/enterprise-storage-solutions/megaraid8-tri-mode-software/1-0/StorCLI_MR8_Intro.html

PR:             293540
Sponsored by:   UNIS Labs
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>

sysutils/storcli2: Repocopy from sysutils/storcli

PR:             293540
Sponsored by:   UNIS Labs

emulators/pcsx2: Fix build on -CURRENT

www/nginx: Update to 1.30.1

PR:             295270
Approved by:    security/blanket
Security:       3414ac89-4f9f-11f1-a1c0-0050569f0b83

security/vuxml: Document www/nginx DoS/RCE

PR:             295270
Security:       3414ac89-4f9f-11f1-a1c0-0050569f0b83

devel/nextpnr-devel: Update to 2026-05-12

lang/racket-minimal: Preserve .rackboot section when stripping gracket

PR:             291732
Submitted by:   Wes Frazier

devel/py-maturin: Update to 1.13.3

* Rebase patch and add a boilerplate as well for future reference while
  I'm here.

Changelogs since 1.13.1:

https://github.com/PyO3/maturin/releases/tag/v1.13.3
https://github.com/PyO3/maturin/releases/tag/v1.13.2

textproc/py-zensical: Update to 0.0.41

* While I'm here, adjust the version requirements now that py-click has
  recently been updated.

Changelog:

https://github.com/zensical/zensical/releases/tag/v0.0.41

lang/racket: Preserve .rackboot section when stripping gracket

PR:             291732
Submitted by:   Wes Frazier

security/vuxml: Document new mail/mailpit vulnerabilities

devel/gumbo: Update 0.13.0 => 0.13.2

Changelog:
https://codeberg.org/gumbo-parser/gumbo-parser/src/tag/0.13.2/CHANGES.md

Improve port:
- Switch from fork to upstream.
- Replace PORTVERSION with DISTVERSION.
- Sort USES.
- MV in post-extract with custom WRKSRC.
- Remove unnecessary STRIP_CMD - INSTALL_TARGET=install-strip is enough.

PR:             294862
Approved by:    bdrewery (maintainer, timeout 2 weeks)
Sponsored by:   UNIS Labs
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>

devel/onetbb: Update to 2023.0.0

and fix building of two dependent ports [1].

Release notes:  https://github.com/uxlfoundation/oneTBB/blob/v2023.0.0/RELEASE_NOTES.md
Approved by:    blanket [1]

security/vuxml: Update entry for (py-)setuptools CVE-2025-47273

Expand this to our ancient ports to according to upstream report.
Affects devel/py-setuptools44 and devel/py-setuptools58

www/reproxy: the port had been updated to version 1.6.0

Unfortunately it now requires non-default Go[lang] 1.26.

Reported by:    portscout

print/pdfcpu: Update to 0.12.1

Slight adjustment of version reporting in the compiled bianry

Changelog: https://github.com/pdfcpu/pdfcpu/releases/tag/v0.12.1

audio/fooyin: Update to 0.10.6

Changelog: https://github.com/fooyin/fooyin/releases/tag/v0.10.6

security/vuxml: Add entry for (py-)setuptools CVE-2025-47273

This is almost a one year old CVE

games/colobot: Backport upstream patch to fix build with modern compilers

(cherry picked from commit 736716fcf0f886becc8892adfd6596bc7d405ce9)