BSD Commit Log Search

databases/pg-safeupdate: Update 1.5 => 1.7

Changelog:
https://github.com/eradman/pg-safeupdate/blob/1.7/NEWS

PR:             300740
Approved by:    osa, vvd (mentors, implicit)

finance/venice: Update 0.754beta => 0.761beta

www/onlyoffice-documentserver: Update 9.4.0 => 10.0.0

- Update bundled NodeJS to 26.12.1

Changes:
https://github.com/ONLYOFFICE/DocumentServer/blob/master/CHANGELOG.md#1000

PR:             300454

www/immich-ml: Add missing pillow-jxl-plugin dependency

Since 3.4.0 the transforms module imports pillow_jxl unconditionally, so
the service does not start without it.

Sponsored by:   Netzkommune GmbH

graphics/py-pillow-jxl-plugin: Add New Port

A Pillow plugin that adds reading and writing of JPEG XL images. The
codec comes from graphics/libjxl, the plugin binds it through Rust.

www: https://github.com/Isotr0py/pillow-jpegxl-plugin

Sponsored by:   Netzkommune GmbH

security/vuxml: document mongodb vulnerability CVE-2026-118383

There are more CVEs in MongoDB, but this one has CVSS 9.5.

www/tgpt: Update 2.15.0 => 2.16.0

Changelog:
https://github.com/aandrew-me/tgpt/releases/tag/v2.16.0

Reported by:    Repology, portscout
Approved by:    osa, vvd (mentors, implicit)

net-im/nextcloud-talk: Update to 25.0.8

www/nextcloud-memories: Update to 11.1.3

www/nextcloud: Update to 35.0.3

sysutils/bfs: update to 4.1.7

Changes:        https://github.com/tavianator/bfs/releases/tag/4.1.7

net/geoclue: Update 2.8.1 to 2.8.2

- Translations for Georgian and Occitan.
- Building translations now works.
- Fix double free in on_desktop_id_set() and on_client_proxy_ready().
- Fix some gobject-linter rules in the correctness category.
- Document the command to register network NMEA sources to avahi.

Changelog: https://gitlab.freedesktop.org/geoclue/geoclue/-/blob/2.8.2/NEWS
Approved by:    jrm (mentor), desktop (arrowd)
Differential Revision:  https://reviews.freebsd.org/D61474

devel/libgsf: Update 1.14.58 to 1.14.60

- Fix ABW for ole2.
- Fix some OLE2 edge cases.
- Plug leak.
- Improve thread safety of GSF_CLASS_FULL.
- Fix zip read for corrupted stream.
- Fix ole2 leaks.
- Protect ole2 loader from crazy recursion.

Changelog: https://gitlab.gnome.org/GNOME/libgsf/-/blob/LIBGSF_1_14_60/NEWS
Approved by:    jrm (mentor), desktop (arrowd)
Differential Revision:  https://reviews.freebsd.org/D61471

security/vuxml: Document mod_http2 vulnerability

www/mod_http2: Deprecated, removed end of 2026

databases/mongodb80: 8.0.38

Announcement of 8.0.37:
https://www.mongodb.com/community/forums/t/mongodb-8-0-37-is-released/344846?u=r_k

Release Notes:
https://www.mongodb.com/docs/manual/release-notes/8.0/#8038---nov-10-2026

Security:       CVE-2026-118383 https://www.mongodb.com/community/forums/t/important-mongodb-security-update-available-action-required-november-10-2026/344843?u=r_k
Security:       a lot more CVEs in the Release Notes

www/pomerium: update to 0.34.1

Changes:        https://github.com/pomerium/pomerium/releases/tag/v0.34.1

www/angie: Security update to 1.12.4

This release fixes CVE-2026-93479, CVE-2026-97629, CVE-2026-95101,
CVE-2026-15176 and CVE-2026-97205, ported from nginx 1.31.7.
angie-module-njs is updated to 1.0.2, which fixes CVE-2026-101025
and CVE-2026-101019.

PR:             299694
Changes:        https://en.angie.software/angie/docs/oss_changes/#angie-1-12-4
Security:       a1ede43e-de8c-11f1-bae2-3497f65b111b
Security:       a1ee2283-de8c-11f1-bae2-3497f65b111b
MFH:            2026Q4
Sponsored by:   Netzkommune GmbH

(cherry picked from commit efd77031b011f43144c1397e11c15ba0d0bc16dc)

security/vuxml: Document angie and angie-module-njs vulnerabilities

PR:             299694
Sponsored by:   Netzkommune GmbH

www/angie: Security update to 1.12.4

This release fixes CVE-2026-93479, CVE-2026-97629, CVE-2026-95101,
CVE-2026-15176 and CVE-2026-97205, ported from nginx 1.31.7.
angie-module-njs is updated to 1.0.2, which fixes CVE-2026-101025
and CVE-2026-101019.

PR:             299694
Changes:        https://en.angie.software/angie/docs/oss_changes/#angie-1-12-4
Security:       a1ede43e-de8c-11f1-bae2-3497f65b111b
Security:       a1ee2283-de8c-11f1-bae2-3497f65b111b
MFH:            2026Q4
Sponsored by:   Netzkommune GmbH

devel/glab: update to 1.130.0

Changes:        https://gitlab.com/gitlab-org/cli/-/releases

www/feroxbuster: update 2.13.1 → 2.14.0

shells/atuin: update 18.24.6 → 18.24.8

misc/lean-ctx: update 3.12.3 → 3.12.4

x11/rio: update 0.5.29 → 0.5.30

misc/fabric: update 1.4.568 → 1.4.569

security/trufflehog: update 3.99.8 → 3.99.9

devel/cli: update 2.2.0 → 2.3.0

misc/py-litellm: Update to 1.109.1

Changelog: https://github.com/BerriAI/litellm/releases/tag/v1.109.1

Reported by:    portscout

devel/py-ty: Update to 0.0.102

Changelog: https://github.com/astral-sh/ty/blob/0.0.102/CHANGELOG.md

Reported by:    portscout