FreeBSD/ports d477151security/vuxml/vuln 2026.xml

security/vuxml: Fix giflib entry

The update to 6.1.3 already contains in files/ a patch for CVE-2026-26740 so use
lt instead of le to fix the version range.

PR:             296876
DeltaFile
+1-1security/vuxml/vuln/2026.xml
+1-11 files

FreeBSD/ports a6046e2security/vuxml/vuln 2026.xml

security/vuxml: Document www/angie vulnerabilities

PR:             297154
Approved by:    osa, vvd (Mentors, implicit)
DeltaFile
+32-0security/vuxml/vuln/2026.xml
+32-01 files

FreeBSD/ports 4851f28www/angie distinfo, www/angie-module-vod Makefile

www/angie-module-vod: Update 1.9.0 => 1.9.1

This patch release fixes following bugs:
- Make thumbnail selection frame-accurate (#133)
- Honor sample aspect ratio (SAR) for thumb size calculations (#96)

Changelog:
https://github.com/dio-az/nginx-vod-module/blob/v1.9.1/CHANGELOG.md

Commit log:
https://github.com/dio-az/nginx-vod-module/compare/v1.9.0...v1.9.1

PR:             297200
Reported by:    Sebastian Oswald <sko at rostwald.de> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q3

(cherry picked from commit 0a372f3a862c8c2969df8b01e5b2a812f1869b71)
DeltaFile
+2-2www/angie/distinfo
+2-2www/angie-module-vod/Makefile
+4-42 files

FreeBSD/ports f739dd9www/angie distinfo, www/angie-module-vod Makefile

www/angie-module-vod: Update 1.8.1 => 1.9.0

Changelog:
https://github.com/dio-az/nginx-vod-module/releases/tag/v1.9.0

PR:             296796
Sponsored by:   UNIS Labs

(cherry picked from commit 3c6813367fdd58ede4168c637cd135aa7f007d36)
DeltaFile
+2-2www/angie/distinfo
+1-1www/angie-module-vod/Makefile
+3-32 files

FreeBSD/ports fdabc3dwww/angie distinfo, www/angie-module-jwt Makefile

www/angie-module-jwt: update 3.4.4 => 3.4.5

Trigger CI on test files and workflow changes

Commit log:
https://github.com/max-lt/nginx-jwt-module/compare/v3.4.4...v3.4.5

PR:             297199
Reported by:    Sebastian Oswald <sko at rostwald.de> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q3

(cherry picked from commit 04200cd0d6a3d2531f8d1215cf45df952f5693e0)
DeltaFile
+4-4www/angie/distinfo
+2-2www/angie-module-jwt/Makefile
+6-62 files

FreeBSD/ports 2c95edewww/angie-module-lua Makefile, www/angie-module-lua/files patch-lua-config

www/angie-module-lua: Unbreak build after update

The module was updated but files/patch-lua-config still pointed
to the old working directory.

PR:             297198
Reported by:    Sebastian Oswald <sko at rostwald.de> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q3

(cherry picked from commit 565dc2c4047d886d51024ec852352e26a7bb7c5a)
DeltaFile
+2-2www/angie-module-lua/files/patch-lua-config
+2-2www/angie-module-lua/Makefile
+4-42 files

FreeBSD/ports db905fawww/angie distinfo, www/angie-module-lua Makefile

www/angie-module-lua: Update 0.10.29R2 => 0.10.31

Changelog:
https://github.com/openresty/lua-nginx-module/releases/tag/v0.10.31

PR:             296796
Approved by:    Sebastian Oswald <sko at rostwald.de> (maintainer, implicit)
Sponsored by:   UNIS Labs

(cherry picked from commit 247f29084b10387077589822e6b9c42dd650acff)
DeltaFile
+2-2www/angie/distinfo
+1-1www/angie-module-lua/Makefile
+3-32 files

FreeBSD/ports b5b8914www/angie distinfo, www/angie-module-auth-jwt Makefile

www/angie: update 1.12.0 => 1.12.1

This patch release brings various security and bug fixes.

Changelog:
https://en.angie.software/angie/docs/oss_changes/#angie-1-12-1

PR:             297154
Reported by:    tjlegg at gmail.com
Approved by:    osa, vvd (Mentors, implicit)
Security:       CVE-2026-42533
Security:       CVE-2026-60005
Security:       CVE-2026-56434
MFH:            2026Q3

(cherry picked from commit ec945e58c5d3a62aeb623a6ccaf2d9c1921820c2)
DeltaFile
+3-3www/angie/distinfo
+3-3www/angie-module-lua/Makefile
+2-2www/angie-module-vod/Makefile
+2-2www/angie-module-headers-more/Makefile
+2-2www/angie-module-echo/Makefile
+2-2www/angie-module-auth-jwt/Makefile
+14-1418 files not shown
+32-3224 files

FreeBSD/ports 7a71e6fwww/angie Makefile distinfo

www/angie: Update 1.11.8 => 1.12.0

Changelog:
https://en.angie.software/angie/docs/oss_changes/#angie-1-12-0

PR:             296796
Sponsored by:   UNIS Labs

(cherry picked from commit 9e607a9c1ab3b68a79ec035f9c3e5ebde6e384cf)
DeltaFile
+3-3www/angie/distinfo
+1-1www/angie/Makefile
+4-42 files

FreeBSD/ports 0a372f3www/angie distinfo, www/angie-module-vod Makefile

www/angie-module-vod: Update 1.9.0 => 1.9.1

This patch release fixes following bugs:
- Make thumbnail selection frame-accurate (#133)
- Honor sample aspect ratio (SAR) for thumb size calculations (#96)

Changelog:
https://github.com/dio-az/nginx-vod-module/blob/v1.9.1/CHANGELOG.md

Commit log:
https://github.com/dio-az/nginx-vod-module/compare/v1.9.0...v1.9.1

PR:             297200
Reported by:    Sebastian Oswald <sko at rostwald.de> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q3
DeltaFile
+3-3www/angie-module-vod/Makefile
+2-2www/angie/distinfo
+5-52 files

FreeBSD/ports 04200cdwww/angie distinfo, www/angie-module-jwt Makefile

www/angie-module-jwt: update 3.4.4 => 3.4.5

Trigger CI on test files and workflow changes

Commit log:
https://github.com/max-lt/nginx-jwt-module/compare/v3.4.4...v3.4.5

PR:             297199
Reported by:    Sebastian Oswald <sko at rostwald.de> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q3
DeltaFile
+2-2www/angie/distinfo
+2-2www/angie-module-jwt/Makefile
+4-42 files

FreeBSD/ports 565dc2cwww/angie-module-lua Makefile, www/angie-module-lua/files patch-lua-config

www/angie-module-lua: Unbreak build after update

The module was updated but files/patch-lua-config still pointed
to the old working directory.

PR:             297198
Reported by:    Sebastian Oswald <sko at rostwald.de> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q3
DeltaFile
+2-2www/angie-module-lua/files/patch-lua-config
+2-2www/angie-module-lua/Makefile
+4-42 files

FreeBSD/ports ec945e5www/angie distinfo, www/angie-module-auth-jwt Makefile

www/angie: update 1.12.0 => 1.12.1

This patch release brings various security and bug fixes.

Changelog:
https://en.angie.software/angie/docs/oss_changes/#angie-1-12-1

PR:             297154
Reported by:    tjlegg at gmail.com
Approved by:    osa, vvd (Mentors, implicit)
Security:       CVE-2026-42533
Security:       CVE-2026-60005
Security:       CVE-2026-56434
MFH:            2026Q3
DeltaFile
+3-3www/angie/distinfo
+1-1www/angie-module-cache-purge/Makefile
+1-1www/angie-module-brotli/Makefile
+1-1www/angie-module-auth-totp/Makefile
+1-1www/angie-module-auth-spnego/Makefile
+1-1www/angie-module-auth-jwt/Makefile
+8-818 files not shown
+26-2624 files

FreeBSD/ports 269231anet/deltachat-rpc-server/files patch-cargo-crates_netdev-0.31.0_src_interface_unix.rs patch-cargo-crates_netwatch-0.5.0_src_interfaces_bsd_freebsd.rs

net/deltachat-rpc-server: fix build on powerpc64*

Same as games/jumpy.
DeltaFile
+14-0net/deltachat-rpc-server/files/patch-cargo-crates_netwatch-0.5.0_src_interfaces_bsd_freebsd.rs
+13-0net/deltachat-rpc-server/files/patch-cargo-crates_netdev-0.31.0_src_interface_unix.rs
+27-02 files

FreeBSD/ports 3fa6049net-im/libsignal Makefile, net-im/libsignal/files patch-boringssl_include_openssl_target.h

net-im/libsignal: fix build on powerpc64*

ring-sys 5.0.2] /wrkdirs/usr/ports/net-im/libsignal/work/target/release/build/boring-sys-ef33d39251a122cc/out/boringssl/crypto/fipsmodule/../internal.h:230:2: error: "Must define either OPENSSL_32_BIT or OPENSSL_64_BIT"
DeltaFile
+14-0net-im/libsignal/files/patch-boringssl_include_openssl_target.h
+4-0net-im/libsignal/Makefile
+18-02 files

FreeBSD/ports 032f99bsecurity/py-utls Makefile, security/py-utls/files patch-boringssl_include_openssl_target.h

security/py-utls: fix build on powerpc64*

/wrkdirs/usr/ports/security/py-utls/work-py312/utls-2026.7.8/target/release/build/boring-sys-5d0bded094004099/out/boringssl/include/openssl/target.h:76:2: error: "Unknown target CPU"
DeltaFile
+14-0security/py-utls/files/patch-boringssl_include_openssl_target.h
+4-0security/py-utls/Makefile
+18-02 files

FreeBSD/ports 1900152net/quiche Makefile, net/quiche/files patch-cargo-crates_boring-sys-4.17.0_deps_boringssl_src_include_openssl_base.h

net/quiche: fix powerpc64* build

In file included from /wrkdirs/usr/ports/net/quiche/work/target/release/build/boring-sys-e26f46e56ac7f264/out/boringssl/err_data.c:17:
  /wrkdirs/usr/ports/net/quiche/work/target/release/build/boring-sys-e26f46e56ac7f264/out/boringssl/src/include/openssl/base.h:124:2: error: "Unknown target CPU"
    124 | #error "Unknown target CPU"
        |  ^
  1 error generated.
DeltaFile
+14-0net/quiche/files/patch-cargo-crates_boring-sys-4.17.0_deps_boringssl_src_include_openssl_base.h
+4-0net/quiche/Makefile
+18-02 files

FreeBSD/ports 3072eb2devel/android-tools Makefile, devel/android-tools/files patch-vendor_boringssl_include_openssl_target.h

devel/android-tools: fix powerpc64* build
DeltaFile
+14-0devel/android-tools/files/patch-vendor_boringssl_include_openssl_target.h
+4-0devel/android-tools/Makefile
+18-02 files

FreeBSD/ports e6cdd1ddevel/php-grpc/files patch-third__party_boringssl-with-bazel_include_openssl_target.h

devel/php-grpc: add powerpc64* support

/wrkdirs/usr/ports/devel/php-grpc/work-php82/grpc-php-ext-1.83.0/third_party/boringssl-with-bazel/include/openssl/target.h:74:2: error: "Unknown target CPU"
   74 | #error "Unknown target CPU"
      |  ^
1 error generated.
DeltaFile
+14-0devel/php-grpc/files/patch-third__party_boringssl-with-bazel_include_openssl_target.h
+14-01 files

FreeBSD/ports 87773edgames/openrct2 Makefile distinfo

games/openrct2: update to 0.5.4

While here, also add testing support.

Changelog:      https://github.com/OpenRCT2/OpenRCT2/releases/tag/v0.5.4
DeltaFile
+13-11games/openrct2/distinfo
+14-5games/openrct2/Makefile
+27-162 files

FreeBSD/ports 1d95d8edevel/perfetto/files patch-gn_standalone_android.gni

devel/perfetto: fix build on powerpc*

Currently build requires the target architecture to be
Android-supported. That doesn't make sense, since the tools
this port builds are to run on the target system, not Android.
DeltaFile
+25-0devel/perfetto/files/patch-gn_standalone_android.gni
+25-01 files

FreeBSD/ports 4267868devel/cbmc/files patch-src_util_config.cpp

devel/cbmc: fix build on powerpc64*

1. powerpc64 always uses 64-bit long double.
2. powerpc64le before 16.0 uses 64-bit long double and switched to
128-bit IEEE long double in 16.0.
DeltaFile
+19-0devel/cbmc/files/patch-src_util_config.cpp
+19-01 files

FreeBSD/ports 60252f3devel/objfw/files patch-src_runtime_lookup-asm_lookup-asm-powerpc64-elf.S

devel/objfw: fix build on powerpc64*

Taking the address of _objc_taggedPointerClasses with

    addis   %r6, %r2, _objc_taggedPointerClasses at toc@ha
    addi    %r6, %r6, _objc_taggedPointerClasses at toc@l

emits an R_PPC64_TOC16_LO relocation against the symbol itself, which
requires the symbol to be non-preemptible and reachable relative to the
TOC pointer. Neither holds for a global symbol in a shared library, so
linking libobjfwrt.so fails on FreeBSD/powerpc64le:

  ld: error: relocation R_PPC64_TOC16_LO cannot be used against symbol
  '_objc_taggedPointerClasses'; recompile with -fPIC
  >>> defined in tagged-pointer.lib.o
  >>> referenced by lookup-asm.lib.o:(objc_msg_lookup) in archive
      lookup-asm/lookup-asm.lib.a

The "recompile with -fPIC" hint is misleading: every object is already

    [14 lines not shown]
DeltaFile
+13-0devel/objfw/files/patch-src_runtime_lookup-asm_lookup-asm-powerpc64-elf.S
+13-01 files

FreeBSD/ports 9592faedatabases/py-chroma-hnswlib Makefile

databases/py-chroma-hnswlib: remove -march=native
DeltaFile
+3-0databases/py-chroma-hnswlib/Makefile
+3-01 files

FreeBSD/ports 34632cfgames/jumpy/files patch-cargo-crates_iroh-net-0.22.0_src_net_interfaces_bsd_freebsd.rs

games/jumpy: fix build on powerpc64le

Same as net/sendme.
DeltaFile
+14-0games/jumpy/files/patch-cargo-crates_iroh-net-0.22.0_src_net_interfaces_bsd_freebsd.rs
+14-01 files

FreeBSD/ports 3f9f562games/etlegacy/files patch-src_qcommon_q__platform.h

games/etlegacy: readd powerpc* support
DeltaFile
+19-0games/etlegacy/files/patch-src_qcommon_q__platform.h
+19-01 files

FreeBSD/ports 1b106b2www/py-autobahn Makefile

www/py-autobahn: various fixes

1. Remove -march=native.
2. Strip all the libraries.
3. Removing -march=native allows to build on armv7.
DeltaFile
+5-3www/py-autobahn/Makefile
+5-31 files

FreeBSD/ports 4f8570bmisc/pytorch pkg-plist

misc/pytorch: fix packaging on !amd64
DeltaFile
+64-64misc/pytorch/pkg-plist
+64-641 files

FreeBSD/ports 0c7158agraphics/krita Makefile

graphics/krita: fix build on powerpc64le

xsimd also needed on powerpc64le.
DeltaFile
+1-0graphics/krita/Makefile
+1-01 files

FreeBSD/ports 6dfb907devel/xsimd Makefile, devel/xsimd/files patch-include_xsimd_types_xsimd__vsx__register.hpp

devel/xsimd: fix powerpc64le runtime

vector variables with long type are deprecated,
switch to long long as upstream did.
DeltaFile
+16-0devel/xsimd/files/patch-include_xsimd_types_xsimd__vsx__register.hpp
+1-0devel/xsimd/Makefile
+17-02 files