www/redmine70: update to 7.0.3
Security and bug fix release: fixes a ReDoS in wiki macro argument
parsing, a reflected XSS and open redirect via back_url, and OAuth
token scope bypasses.
www/redmine61: update to 6.1.6
Security and bug fix release: fixes a ReDoS in wiki macro argument
parsing, a reflected XSS and open redirect via back_url, and OAuth
token scope bypasses.
www/redmine60: update to 6.0.12
Security release: fixes a ReDoS in wiki macro argument parsing, a
reflected XSS and open redirect via back_url, and two private data
leaks via the REST API.
devel/subversion: fix svnserve rc.d status/stop when SVNSERVE_WRAPPER is on
When SVNSERVE_WRAPPER is enabled (now the default), bin/svnserve is
the umask-setting wrapper, which execs straight into bin/svnserve.bin
-- same PID, but the running process image is svnserve.bin, not
svnserve. rc.subr's run_rc_command built-ins (status, stop, restart,
poll) match running processes against procname, defaulting to
command's basename when procname is unset; since command is still the
wrapper path, every one of those built-ins fails to find the actually
running daemon ("svnserve is not running" even while it is).
Set procname explicitly to the real binary path, swapping in .bin via
a new SUB_LIST token when the wrapper is active, same pattern already
used for BINS_TO_STRIP.
Co-Authored-By: Claude Sonnet 5 <noreply at anthropic.com>
Reported by: vvd
Tcl/Tk: prepare for supporting one version only
Rename lang/tcl90 -> lang/tcl, and x11-toolkits/tk90 -> x11-toolkits/tk.
This is in preparation for sunsetting Tcl/Tk 8.6 and providing one
single version of Tcl/Tk in the ports tree.
PR: 300092 (exp-run)
mail/stalwart-proxy: [NEW PORT] e-mail migration proxy for Stalwart
Stalwart Proxy is a multi-protocol e-mail migration proxy from the
Stalwart Labs team (the authors of mail/stalwart). It routes IMAP,
POP3, ManageSieve, SMTP submission, SMTP/LMTP and HTTP (JMAP) sessions
per account to the right backend, based on the credentials the client
already presents. It is meant for migrating from Dovecot, Cyrus or
older Stalwart versions to Stalwart one mailbox at a time.
PR: 300326
x11-fonts/nordwand-mono-ttf: New port, Compact monospace neo-grotesque font
Nordwand Mono is a compact monospace neo-grotesque font designed for
developers (and adventurers)
PR: 299967
mail/stalwart-migrate: Add new port
stalwart-migrate moves a Stalwart Mail Server v0.16.27 data store to
Stalwart v1 and can roll the migration back if needed.
WWW: https://github.com/stalwartlabs/stalwart-migrate
PR: 300418
Qt6: Update to 6.11.3
Oct 26, 2026 by Jani Heikkinen
The last release from Qt 6.11 series, Qt 6.11.3, is now available for
download. As a patch release, Qt 6.11.3 doesn’t introduce new features,
but it delivers around 200 bug fixes, security improvements, and quality
enhancements on top of Qt 6.11.2. For a full overview of the most
notable changes, take a look at the Qt 6.11.3 release notes.
Announcement:
https://www.qt.io/blog/qt-6.11.3-released
Release notes:
https://code.qt.io/cgit/qt/qtreleasenotes.git/about/qt/6.11.3/release-note.md
PySide6: Update to 6.11.3
FreeBSD ports changes:
[6 lines not shown]
*/*: Bump PORTREVISION for known Qt private API abusers
Qt 6.11.3 edition.
These ports are known to directly use or link to a library that uses the
Qt private API and must be rebuilt with every Qt update.
Qt *public* API/ABI compatability is excellent, so most consumers don't
need to necessarily be rebuilt between patch or even minor releases, but
use of the private API breaks this compatibility between even patch
releases and its use is highly discouraged.
This list [1] is based on histortical data. We don't have time to
revisit every port on the list with each Qt update, so if your port has
dropped Qt private headers and was bumped in error, please remove it
yourself if you have write access to the Wiki or alert someone on kde@.
[1] https://wiki.freebsd.org/KDE/Qt
MFH: 2026Q4
