BSD Commit Log Search

misc/netron: update 4.1.9 → 9.0.6

x11/xconsole: Update to 1.1.1

Update pkg-descr.

https://lists.x.org/archives/xorg-announce/2024-April/003512.html
https://lists.x.org/archives/xorg-announce/2026-April/003689.html

PR:             294937
Approved by:    x11 (fluffy)
Approved by:    fluffy (mentor)

x11/libXcomposite: Update to 0.4.7

Update WWW and pkg-descr.
The dependency on libXext has been removed for over 15 years, so remove
it.

https://lists.x.org/archives/xorg-announce/2026-January/003658.html

PR:             293926
Approved by:    x11 (arrowd)
Approved by:    fluffy (mentor)

devel/xorg-macros: Update to 1.20.2

PR:             293585

x11-fonts/libXfont2: Update to 2.0.7

Update COMMENT, WWW, LICENSE and pkg-descr.

This release cleans out remnants of support for archiac platforms,
improves handling of font server reconnection, fixes several issues
found by static analysis, and updates some build checks.

https://lists.x.org/archives/xorg-announce/2024-August/003523.html

PR:             287459
Approved by:    x11 (arrowd)
Approved by:    fluffy (mentor)

x11-wm/twm: Update to 1.0.13.1

Add WWW and update pkg-descr.

https://lists.x.org/archives/xorg-announce/2025-May/003599.html
https://lists.x.org/archives/xorg-announce/2025-May/003600.html

PR:             287157
Approved by:    x11 (arrowd)
Approved by:    fluffy (mentor)

x11/libXinerama: Update to 1.1.6

Update COMMENT, WWW and pkg-descr.
Add LICENSE_FILE and INSTALL_TARGET=install-strip.

https://lists.x.org/archives/xorg-announce/2026-January/003661.html

PR:             294056
Approved by:    x11 (arrowd)
Approved by:    fluffy (mentor)

sysutils/containerd: Update to 2.3.0

finance/p5-Finance-Quote: 1.68

Crucially, this revision fixes throttling by AlphaVantage.

https://metacpan.org/dist/Finance-Quote/changes

PR:             292417
Approved by:    sunpoet (maintainer timeout)

security/kanidm: Update to 1.10.0

* OpenSSL is no longer required as a dependency. All cryptographic paths
  have been replaced by RustCrypto or Rustls using aws-lc-rs

ChangeLog: https://github.com/kanidm/kanidm/releases/tag/v1.10.0

Approved by:    bofh@ (implicit)

sysutils/amazon-ssm-plugin: Update to 1.2.814.0

ChangeLog:      https://github.com/aws/session-manager-plugin/releases/tag/1.2.814.0
Approved by:    hrs (mentor, blanket)

net/geoclue: update to 2.8.1

PR:             294928

devel/libgsf: Enable testing

devel/libgsf: update to 1.14.58

PR:             294910

net/liferea: update to 1.16.9

Release Notes:
  https://github.com/lwindolf/liferea/releases/tag/v1.16.9

net-mgmt/check_ssl_cert: update to 2.99.0

Release Notes:
  https://github.com/matteocorti/check_ssl_cert/releases/tag/v2.99.0

textproc/gojq: Update to 0.12.19

Changelog:      https://github.com/itchyny/gojq/releases/tag/v0.12.19
Approved by:    hrs (mentor, blanket)

sysutils/usacloud: Update to 1.22.1

ChangeLogs:     https://github.com/sacloud/usacloud/releases/tag/v1.22.1
Approved by:    hrs (mentor, blanket)

devel/ruby-build: Update to 20260501

Changes:        https://github.com/rbenv/ruby-build/releases/tag/v20260501
(cherry picked from commit 591e27396e41ab5af13d064d5fce350f6611482a)

devel/ruby-build: Update to 20260501

Changes:        https://github.com/rbenv/ruby-build/releases/tag/v20260501

*: Reset MAINTAINER of Andreas Bilke's ports per his request

Thank you for your work

Reference:      https://lists.freebsd.org/archives/freebsd-ports/2026-May/009427.html

ports-mgmt/rc-subr-jail: Update to 6

Changes:
- Wait for jail PIDs
- Force unmount devfs in jail_kill()

x11/hyprpaper: Update to 0.8.4

Changelog: https://github.com/hyprwm/hyprpaper/releases/tag/v0.8.4

Reported by:    GitHub (watch releases)

lang/python314: Fix incomplete mitigation of webbrowser.open()

Cherry-pick fix to resolve
Incomplete mitigation of CVE-2026-4519,
%action expansion for command injection to webbrowser.open()

Obtained from:  GitHub repo
                https://github.com/python/cpython/pull/148516
Security:       CVE-2026-4786
                cf75f572-378a-11f1-a119-e36228bfe7d4
Pull Request:   https://github.com/freebsd/freebsd-ports/pull/511

(cherry picked from commit 965c6f73bbe0a9361fdd92952e3ac622736ebbb3)

lang/python314: Security update + other fixes

Fix critical use-after-free bug in LZMA/BZ2/ZLib decompressor routines
when reusing decompressor instances after a MemoryError was raised from
one.

While here:

- fix DEBUG build/package (several %%ABI%% were in the wrong place
  in pkg-plist that caused failed installs)
- switch to using system textproc/expat2 library
- issue warnings in pre-test that IPV6, PYMALLOC are required and
  DEBUG also breaks one self-test
- bump PORTREVISION
- drop LTOFULL again and make LTO use =full

References:
https://mail.python.org/archives/list/security-announce@python.org/thread/HTWB2Z6KT5QQX4RYEZAFININDHNOSIF3
https://www.cve.org/CVERecord?id=CVE-2026-6100

    [9 lines not shown]

graphics/openexr*: Security update to 3.4.11

Changelog:
https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.4.11

PR:             294882
Security:       787cde46-4424-11f1-943f-05b19d100dca
                CVE-2026-42217
                CVE-2026-42216
                CVE-2026-41142
MFH:            2026Q2
Pull Request:   https://github.com/freebsd/freebsd-ports/pull/511

(cherry picked from commit 782fe1731d04b9842442b7e06b28c43884dcd542)

graphics/openexr*: Security update to 3.4.10

Addresses security vulnerabilities

Changelog:
https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.4.10

Obtained from:  GitHub repo
Security:       CVE-2026-39886
                CVE-2026-40244
                CVE-2026-40250
Pull Request:   https://github.com/freebsd/freebsd-ports/pull/511

(cherry picked from commit a096d170b8b4eaa6b2f8f9b54ecb616d14346a19)

security/openvpn: security update to 2.6.20

Changelog:      https://github.com/OpenVPN/openvpn/releases/tag/v2.6.20
Security:       549313db-3e93-11f1-8d38-7fbbe0285610
Security:       CVE-2026-35058
Security:       CVE-2026-40215
PR:             294714
Pull Request:   https://github.com/freebsd/freebsd-ports/pull/511

(direct commit to quarterly, branches have diverged)

*: Bump PORTREVISION on Poppler's consumers

graphics/inkscape: Fix build against newest Poppler

Differential Revision:  https://reviews.freebsd.org/D56472