BSD Commit Log Search

www/wordpress: upgrade to 6.9.4 (security)

Upstream does not offer localized tarballs for 6.9.4, so download the
6.9.1 tarballs and apply files/patch-6.9.1-to-6.9.4 instead.

Security fixes in 6.9.2:
- Blind SSRF
- PoP-chain weakness in HTML API and Block Registry
- Regex DoS in Numeric Character References
- Stored XSS in Nav Menus
- AJAX query-attachments Authorization Bypass
- Stored XSS via data-wp-bind directive
- XSS allowing override of client-side templates in admin area
- PclZip Path Traversal
- Authorization Bypass on Notes feature
- XXE in external getID3 library

Bug fix in 6.9.3:
- Restore compatibility for themes using stringable objects with the

    [6 lines not shown]

misc/crush: Update to 0.47.2

Changelog:
- https://github.com/charmbracelet/crush/releases/tag/v0.47.0
- https://github.com/charmbracelet/crush/releases/tag/v0.47.1
- https://github.com/charmbracelet/crush/releases/tag/v0.47.2

Reported by:    GitHub (watch releases)

x11/waveterm: Update to 0.14.1

Changelog: https://github.com/wavetermdev/waveterm/releases/tag/v0.14.1

Reported by:    GitHub (watch releases)

comms/conserver-com: update to 8.3.0

Changes: https://github.com/bstansell/conserver/releases/tag/v8.3.0

While here: add an option to enable IPv6 support (default: on).

editors/vim: Update to 9.2.0140

Contains a fix for a null pointer dereferencing vulnerability in the
regex engine. Vim assigned it a MODERATE risk score. See the below
disclosure report.

Security:       https://github.com/vim/vim/security/advisories/GHSA-9phh-423r-778r
(cherry picked from commit e71b9fe51b2dce20d35006bc0fe751f735583845)

editors/vim: Update to 9.2.0140

Contains a fix for a null pointer dereferencing vulnerability in the
regex engine. Vim assigned it a MODERATE risk score. See the below
disclosure report.

Security:       https://github.com/vim/vim/security/advisories/GHSA-9phh-423r-778r

x11/nvidia-driver, x11/nvidia-kmod, x11/linux-nvidia-libs, graphics/nvidia-drm*-kmod, x11/nvidia-settings, x11/nvidia-xconfig: Update to 580.142

Update to latest Production Branch of drivers 580.142:
https://www.nvidia.com/en-us/drivers/details/265444/

Linux counterparts for x11/linux-nvidia-libs:
https://www.nvidia.com/en-us/drivers/details/265443/

Add graphics/egl-wayland2 as a dependency for non-legacy branches.
This library can be installed alongside the previous egl-wayland
implementation (graphics/egl-wayland) and has a higher selection
priority by default, but doesn't support legacy branches.

PR:             293738
Differential Revision:  https://reviews.freebsd.org/D55813

games/veloren-weekly: update to s20260311

Changes:        https://gitlab.com/veloren/veloren/-/compare/7c7606b0d4...96cd780828
(cherry picked from commit 469548a9564ce9df59175e549dc4877c8113a6b7)

graphics/mesa-devel: update to 26.0.b.2279

Changes:        https://gitlab.freedesktop.org/mesa/mesa/-/compare/651cf906e24...a4cabc1334e

games/veloren-weekly: update to s20260311

Changes:        https://gitlab.com/veloren/veloren/-/compare/7c7606b0d4...96cd780828

shells/xonsh: Update to 0.22.7

ChangeLog: https://github.com/xonsh/xonsh/releases/tag/0.22.7

devel/binaryen: Update to 127

ChangeLog: https://github.com/WebAssembly/binaryen/blob/main/CHANGELOG.md#v127

devel/aws-c-mqtt: Update to 0.15.0

ChangeLog: https://github.com/awslabs/aws-c-mqtt/releases/tag/v0.15.0

www/pmwiki: Update 2.5.4 => 2.5.8, take maintainership

Changelogs:
https://www.pmwiki.org/wiki/PmWiki/ChangeLog#v259

Release Notes:
https://www.pmwiki.org/wiki/PmWiki/ReleaseNotes#v258

Improve port:
- Replace PORTVERSION with DISTVERSION.
- Fix warnings from portclippy.
- Remove unnecessary MKDIR.
- Move install docs to do-install-DOCS-on goal.

PR:     293743

security/nmap: Restore missed ./configure patch

PR:             293713
Fixes:          be8868737f7b
Submitted by:   Charlie Bo <cbo at dreamsolution.nl>
MFH:            2026Q1

databases/dbeaver: fix build on openjdk25

Some jdk.xml EntitySizeLimit defaults changed in openjdk24.
In the issue are more details.

Tested to still compile with openjdk21 also.

PR:     293697
Approved-by:     Martin Filla (maintainer)

emulators/wine-devel: Update 11.3 => 11.4

Changelog:
- SAX reader reimplemented in MSXML.
- Resampling optimizations in DirectSound.
- Beginnings of a proper CFGMGR32 implementation.
- Better Unix timezone matching.
- Various bug fixes.
https://gitlab.winehq.org/wine/wine/-/releases/wine-11.4

Add support for libusb

PR:     293722

textproc/py-ebcdic: Update to 2.0.0

ChangeLog: https://github.com/roskakori/CodecMapper/releases/tag/v2.0.0

sysutils/py-rendercv: Update to 2.7

ChangeLog: https://github.com/rendercv/rendercv/releases/tag/v2.7

security/py-unicode-show: Update to 48.8-1

ChangeLog: https://github.com/Kicksecure/helper-scripts/compare/48.5-1...48.8-1

net/dataplaneapi: Update to 3.3.1

ChangeLog: https://github.com/haproxytech/dataplaneapi/releases/tag/v3.3.1

devel/cargo-tarpaulin: update 0.34.1 → 0.35.2

devel/gitoxide: update 0.47.0 → 0.51.0

devel/cargo-mutants: update 26.2.0 → 27.0.0

devel/cargo-llvm-cov: update 0.6.21 → 0.8.4

finance/ord: update 0.20.0 → 0.27.0

devel/cargo-hack: update 0.6.39 → 0.6.43

devel/cargo-edit: update 0.13.8 → 0.13.9

devel/grcov: update 0.10.5 → 0.10.7

devel/cargo-dist: update 0.30.3 → 0.31.0