FreeBSD/ports 0a6000asecurity/openvpn Makefile distinfo

security/openvpn: bugfix update to 2.7.6

This is not security-relevant on FreeBSD, one security fix affects
Windows, the other one only affects builds against mbedTLS (which is not
currently supported by the port), and a third one (second bullet point)
turned out to not be exploitable.

Note that the --dev option defaults to "tun" (if not specified).

Note that --ping and --keepalive settings are now capped at 24 h.

TCP-based configurations now always enable TCP_NODELAY.

Changelog:      https://github.com/OpenVPN/openvpn/releases/tag/v2.7.6
MFH:            2026Q3
Pull Request:   https://github.com/freebsd/freebsd-ports/pull/584

(cherry picked from commit bbddd98141d38561ab0c715c737ed7dbd87688d6)
DeltaFile
+3-3security/openvpn/distinfo
+2-2security/openvpn/Makefile
+5-52 files

FreeBSD/ports b17362adatabases/rainfrog Makefile distinfo

databases/rainfrog: Update to 0.4.4

ChangeLog:      https://github.com/achristmascarl/rainfrog/releases/tag/v0.4.4

Reported by:    "github-actions[bot]" <notifications at github.com>
DeltaFile
+3-3databases/rainfrog/distinfo
+1-1databases/rainfrog/Makefile
+4-42 files

FreeBSD/ports f0f863bMk/Scripts qa.sh

Mk/Scripts/qa.sh: readelf 1 file a time, baselibs()

...to repair detection of libssl/libcrypto usage inside a port,
to avoid a bogus "you may not need USES=ssl" warning from stage-qa
in ports that have USES=ssl and that do dynamically link against
libcrypto.so or libssl.so.

The cause is that the script currently feeds many files to readelf -d,
in lexiographical order from find -s, and might feed non-ELF
executables, such as scripts. In that case, readelf aborts without looking
at any other file, and the error message is sent 2>/dev/null,
we and may miss those files later in the list that do use crypto/ssl.

Fix: feed files individually to readelf -d
to make sure it really looks at each of them.

PR:             296889
Fixes:          cfff850 Make baselibs QA check non recursive and activate it again
(The ldd -a used before the earlier more lenient and would process all files.)
DeltaFile
+1-1Mk/Scripts/qa.sh
+1-11 files

FreeBSD/ports bbddd98security/openvpn Makefile distinfo

security/openvpn: bugfix update to 2.7.6

This is not security-relevant on FreeBSD, one security fix affects
Windows, the other one only affects builds against mbedTLS (which is not
currently supported by the port), and a third one (second bullet point)
turned out to not be exploitable.

Note that the --dev option defaults to "tun" (if not specified).

Note that --ping and --keepalive settings are now capped at 24 h.

TCP-based configurations now always enable TCP_NODELAY.

Changelog:      https://github.com/OpenVPN/openvpn/releases/tag/v2.7.6
MFH:            2026Q3
Pull Request:   https://github.com/freebsd/freebsd-ports/pull/584
DeltaFile
+3-3security/openvpn/distinfo
+2-2security/openvpn/Makefile
+5-52 files

FreeBSD/ports 46a40c1databases/powa-web Makefile distinfo

databases/powa-web: Update to 5.3.0

Release notes:  https://github.com/powa-team/powa-web/releases/tag/5.3.0
DeltaFile
+3-3databases/powa-web/distinfo
+1-1databases/powa-web/Makefile
+4-42 files

FreeBSD/ports be222c9sysutils/fluent-bit Makefile distinfo

sysutils/fluent-bit: Update to 5.1.1

Release notes:  https://github.com/fluent/fluent-bit/releases/tag/v5.1.1
DeltaFile
+3-3sysutils/fluent-bit/distinfo
+1-1sysutils/fluent-bit/Makefile
+4-42 files

FreeBSD/ports a6f1534databases/powa-archivist Makefile pkg-plist

databases/powa-archivist: Update to 5.3.0

Release notes:  https://github.com/powa-team/powa-archivist/blob/master/CHANGELOG.md
DeltaFile
+3-3databases/powa-archivist/distinfo
+1-1databases/powa-archivist/Makefile
+2-0databases/powa-archivist/pkg-plist
+6-43 files

FreeBSD/ports 822e687lang/chicken distinfo Makefile

lang/chicken: update to 6.0.0

https://lists.nongnu.org/archive/html/chicken-users/2026-08/msg00017.html
DeltaFile
+31-13lang/chicken/pkg-plist
+4-8lang/chicken/Makefile
+3-3lang/chicken/distinfo
+38-243 files

FreeBSD/ports e73efedmultimedia/libvpl-tools pkg-plist Makefile, multimedia/libvpl-tools/files patch-tools_legacy_sample__common_src_vm_thread__linux.cpp patch-tools_cli_val-surface-sharing_src_vpp.cpp

multimedia/libvpl-tools: New port: Intel Video Processing Library Tools

Intel Video Processing Library (Intel VPL) tools provide access to hardware
accelerated video decode, encode, and processing capabilities on Intel GPU
from the command line.

The tools require the Intel VPL base library and a runtime library installed.
Current runtime implementations:

- Intel VPL GPU Runtime for use on Intel Iris Xe graphics and newner
- Intel Media SDK for use on legacy Intel graphic

WWW: https://www.intel.com/content/www/us/en/developer/tools/vpl/overview.html

PR:             297308
Reported by:    Yuichiro NAITO <naito.yuichiro at gmail.com> (new maintainer)
DeltaFile
+43-0multimedia/libvpl-tools/Makefile
+38-0multimedia/libvpl-tools/files/patch-tools_cli_val-surface-sharing_src_encode.cpp
+20-0multimedia/libvpl-tools/files/patch-tools_cli_val-surface-sharing_src_vpp.cpp
+20-0multimedia/libvpl-tools/files/patch-tools_legacy_sample__common_CMakeLists.txt
+19-0multimedia/libvpl-tools/files/patch-tools_legacy_sample__common_src_vm_thread__linux.cpp
+12-0multimedia/libvpl-tools/pkg-plist
+152-010 files not shown
+242-016 files

FreeBSD/ports 397a933audio/musicpd Makefile distinfo, audio/musicpd/files patch-doc_mpdconf.example

audio/musicpd: Update to upstream release 0.24.14

Details:
- Bug fixes, mostly, see changelog:
  https://raw.githubusercontent.com/MusicPlayerDaemon/MPD/v0.24.14/NEWS

MFH:            2026Q3
(cherry picked from commit 6e51026ff5300c9f8e85874cb25d867a88455b68)
DeltaFile
+7-7audio/musicpd/files/patch-doc_mpdconf.example
+3-3audio/musicpd/distinfo
+1-1audio/musicpd/Makefile
+11-113 files

FreeBSD/ports f3ebb9fdevel/py-expression distinfo Makefile

devel/py-expression: Update to 5.7.0

While here, add USE_PYTHON=pytest.

Changelog: https://github.com/dbrattli/Expression/blob/v5.7.0/CHANGELOG.md

Reported by:    portscout
DeltaFile
+5-4devel/py-expression/Makefile
+3-3devel/py-expression/distinfo
+8-72 files

FreeBSD/ports fd3fd42www/bozohttpd Makefile, www/bozohttpd/files patch-auth-bozo.c patch-bozohttpd.c

www/bozohttpd: Use blocklist

Starting from FreeBSD version 1500000, prefer the new blocklist
nomenclature.

Once older versions are no longer supported, we should use blocklist
exclusively.

PR:             294080
DeltaFile
+56-0www/bozohttpd/files/blacklist-patches/patch-bozohttpd.8
+0-54www/bozohttpd/files/patch-bozohttpd.8
+0-53www/bozohttpd/files/patch-bozohttpd.c
+53-0www/bozohttpd/files/blacklist-patches/patch-bozohttpd.c
+12-5www/bozohttpd/Makefile
+0-15www/bozohttpd/files/patch-auth-bozo.c
+121-1275 files not shown
+160-14711 files

FreeBSD/ports 8aca7f6www/pecl-solr distinfo pkg-descr, www/pecl-solr/files extra-src__php_solr.h

www/php-solr: update to 2.9.3, also move to new php extension standard.

PR:             297611
DeltaFile
+0-28www/pecl-solr/Makefile
+25-0www/php-solr/Makefile
+0-11www/pecl-solr/files/extra-src__php_solr.h
+0-4www/pecl-solr/pkg-descr
+4-0www/php-solr/pkg-descr
+0-3www/pecl-solr/distinfo
+29-463 files not shown
+34-479 files

FreeBSD/ports 60abebbdevel/py-uvloop Makefile distinfo

devel/py-uvloop: Update to version 0.22.1 with python314 free-threading support

PR:             ports/294535
Approved by:    maintainer (farrokhi)
DeltaFile
+3-3devel/py-uvloop/distinfo
+1-2devel/py-uvloop/Makefile
+4-52 files

FreeBSD/ports 387b7d6java/netbeans Makefile distinfo

java/netbeans: Update 30 => 31

Changelog:
https://github.com/apache/netbeans/releases/tag/31

PR:             297602
Sponsored by:   UNIS Labs
DeltaFile
+28-26java/netbeans/pkg-plist
+3-3java/netbeans/distinfo
+1-1java/netbeans/Makefile
+32-303 files

FreeBSD/ports d16294bdevel/py-ty Makefile Makefile.crates

devel/py-ty: Update to 0.0.72

Changelog: https://github.com/astral-sh/ty/blob/0.0.72/CHANGELOG.md

Reported by:    portscout
DeltaFile
+11-3devel/py-ty/distinfo
+4-0devel/py-ty/Makefile.crates
+1-1devel/py-ty/Makefile
+16-43 files

FreeBSD/ports eba41bemultimedia/ffmpeg Makefile, multimedia/handbrake Makefile

multimedia:{ffmpeg,handbrake}: Switch dependency from onevpl to libvpl

onevpl has been superceded by libvpl upstream. So switch dependencies
of dependent ports.

PR:             293561
Reported by:    Yuichiro NAITO <naito.yuichiro at gmail.com>
Approved by:    portmgr (blanket; switch deprecated dependencies)
DeltaFile
+3-3multimedia/ffmpeg/Makefile
+2-2multimedia/handbrake/Makefile
+5-52 files

FreeBSD/ports 7ef46d5multimedia/libvpl Makefile pkg-plist, multimedia/libvpl/files patch-libvpl_src_mfx__dispatcher__vpl__loader.cpp patch-libvpl_src_mfx__dispatcher__vpl__lowlatency.cpp

multimedia/libvpl: New port: Intel Video Processing Library API, dispatcher, and examples

Intel Video Processing Library (Intel VPL) provides access to hardware
accelerated video decode, encode, and processing capabilities on Intel GPUs
to support AI visual inference, media delivery, cloud gaming, and virtual
desktop infrastructure use cases.

This repository contains the following components:

- Copies of the Intel VPL API header files.
  The version of the API is listed in the mfxdefs.h file.
- Intel VPL Dispatcher
- Examples demonstrating API usage

*** IMPORTANT ***

Intel VPL Tools are no longer in this repository. They have all been
moved to libvpl-tools.


    [4 lines not shown]
DeltaFile
+131-0multimedia/libvpl/files/patch-libvpl_src_mfx__dispatcher__vpl__msdk.cpp
+113-0multimedia/libvpl/pkg-plist
+73-0multimedia/libvpl/files/patch-libvpl_src_linux_device__ids.h
+36-0multimedia/libvpl/Makefile
+30-0multimedia/libvpl/files/patch-libvpl_src_mfx__dispatcher__vpl__lowlatency.cpp
+27-0multimedia/libvpl/files/patch-libvpl_src_mfx__dispatcher__vpl__loader.cpp
+410-08 files not shown
+494-014 files

FreeBSD/ports 424318emultimedia/onevpl Makefile

multimedia/onevpl: Deprecate and set to expire on 2026-09-30

Upstream has been renamed to libvpl and libvpl-tools. Use
multimedia/libvpl and multimedia/libvpl-tools.

While here, add CONFLICTS_INSTALL=libvpl.

PR:             293561
Reported by:    Yuichiro NAITO <naito.yuichiro at gmail.com>
DeltaFile
+5-0multimedia/onevpl/Makefile
+5-01 files

FreeBSD/ports 887848fcad/irsim Makefile

cad/irsim: Use https:// scheme for MASTER_SITES and WWW

Approved by:            db@, yuri@ (Mentors, implicit)
DeltaFile
+2-2cad/irsim/Makefile
+2-21 files

FreeBSD/ports 3855ba2cad/xcircuit distinfo Makefile

cad/xcircuit: Update 3.10.44 => 3.10.45, take maintainership

* Add WWW for source code repository

Approved by:            danilo@ (maintainer)
Approved by:            db@, yuri@ (Mentors, implicit)
Differential Revision:  https://reviews.freebsd.org/D58866
DeltaFile
+4-3cad/xcircuit/Makefile
+3-3cad/xcircuit/distinfo
+7-62 files

FreeBSD/ports 5939902devel/libffi pkg-plist Makefile

devel/libffi: Update to 3.8.0

Contains BSD fixes for i386 and powerpc64
DeltaFile
+3-3devel/libffi/distinfo
+1-1devel/libffi/pkg-plist
+1-1devel/libffi/Makefile
+5-53 files

FreeBSD/ports c995da1java/openjdk8 distinfo Makefile

java/openjdk8: Update to 8u502
DeltaFile
+3-3java/openjdk8/distinfo
+3-3java/openjdk8/Makefile
+6-62 files

FreeBSD/ports 15033a2mail/mailman3 Makefile, mail/mailman3/files mailman.in

mail/mailman3: Update rc.d script

Fix the exit code of "service mailman status".  Mailman's own status
command exits 0 when it is not running and 1 when it is, which is the
inverse of the rc.subr convention.  Wrap it so that a running master
yields 0, as service(8) consumers such as Ansible expect.

Also add a start_precmd that detects an already running master via the
pidfile, so that "service mailman start" no longer dumps a full click
usage block on a second invocation.

PR:             292404
Sponsored by:   Netzkommune GmbH

(cherry picked from commit ae15f89980dff827563056d876641f942a70c6dd)
DeltaFile
+24-1mail/mailman3/files/mailman.in
+1-1mail/mailman3/Makefile
+25-22 files

FreeBSD/ports ae15f89mail/mailman3 Makefile, mail/mailman3/files mailman.in

mail/mailman3: Update rc.d script

Fix the exit code of "service mailman status".  Mailman's own status
command exits 0 when it is not running and 1 when it is, which is the
inverse of the rc.subr convention.  Wrap it so that a running master
yields 0, as service(8) consumers such as Ansible expect.

Also add a start_precmd that detects an already running master via the
pidfile, so that "service mailman start" no longer dumps a full click
usage block on a second invocation.

PR:             292404
Sponsored by:   Netzkommune GmbH
DeltaFile
+24-1mail/mailman3/files/mailman.in
+1-1mail/mailman3/Makefile
+25-22 files

FreeBSD/ports ae0f39agames/robocode-naval Makefile

games/robocode-naval: Ignore portscout

robocode-naval and robocode share the same SourceForge project, so
portscout keeps reporting games/robocode versions as new releases for
this port.  Naval Robocode has its own versioning scheme (0.9.2 being
the latest), so just ignore it.
DeltaFile
+1-1games/robocode-naval/Makefile
+1-11 files

FreeBSD/ports 0827384deskutils/calibre distinfo Makefile

deskutils/calibre: Fix build with build with FFmpeg 9.0

Import upstream patch to fix the issue.

While here, fix some portclippy/portfmt warnings.

PR:             297387
Obtained from:  https://github.com/kovidgoyal/calibre/commit/49af1f0904e00351ffbf9ad430a37bfe66226bae
DeltaFile
+11-8deskutils/calibre/Makefile
+3-1deskutils/calibre/distinfo
+14-92 files

FreeBSD/ports ddef84awww/gitea Makefile distinfo

www/gitea: Update to 1.27.2

Changelog:      https://blog.gitea.com/release-of-1.27.0/
                https://blog.gitea.com/release-of-1.27.1/
                https://github.com/go-gitea/gitea/releases/tag/v1.27.2
Security:       2f3568eb-999e-11f1-a655-3497f65b111b
Security:       f4af92f7-95ae-11f1-a6f7-b42e991fc52e
PR:             297194
Reported by:    FiLiS
Approved by:    maintainer timeout (ports at foss-daily.org)
Sponsored by:   Netzkommune GmbH

(cherry picked from commit c81002f9d9b6dba0aaef25ebf36a8d1b801252df)
DeltaFile
+3-3www/gitea/distinfo
+1-2www/gitea/Makefile
+4-52 files

FreeBSD/ports 8b554f7security/vuxml/vuln 2026.xml

security/vuxml: Document gitea < 1.27.0 vulnerabilities

Gitea 1.27.0 fixed 45 security issues, including privilege
escalation, remote denial of service, SSRF, authorization and
token scope bypasses, and information disclosure.

Sponsored by:   Netzkommune GmbH
DeltaFile
+75-0security/vuxml/vuln/2026.xml
+75-01 files

FreeBSD/ports c81002fwww/gitea Makefile distinfo

www/gitea: Update to 1.27.2

Changelog:      https://blog.gitea.com/release-of-1.27.0/
                https://blog.gitea.com/release-of-1.27.1/
                https://github.com/go-gitea/gitea/releases/tag/v1.27.2
Security:       2f3568eb-999e-11f1-a655-3497f65b111b
Security:       f4af92f7-95ae-11f1-a6f7-b42e991fc52e
PR:             297194
Reported by:    FiLiS
Approved by:    maintainer timeout (ports at foss-daily.org)
Sponsored by:   Netzkommune GmbH
DeltaFile
+3-3www/gitea/distinfo
+1-2www/gitea/Makefile
+4-52 files