BSD Commit Log Search

*/*: Bump port revision after electron42 update (7b8520ff7197)

databases/py-redisvl: Update to 0.27.0

Changelog: https://github.com/redis/redis-vl-python/releases/tag/v0.27.0

Reported by:    portscout

devel/electron42: Update to 42.10.1

Changelog: https://github.com/electron/electron/releases/tag/v42.10.1

Reported by:    GitHub (watch releases)

(cherry picked from commit f832ff69ee413e53c45533f19928e30e6f3da72b)

devel/electron42: Update to 42.11.1

Changelog: https://github.com/electron/electron/releases/tag/v42.11.1

Reported by:    GitHub (watch releases)
MFH:            2026Q3 (includes security fixes)
Security:       271556c1-ddbf-4d44-95e6-a731841539b2

(cherry picked from commit 7b8520ff71979892f7f9ae195f5efab9780884bc)

devel/electron42: Update to 42.11.0

Changelog: https://github.com/electron/electron/releases/tag/v42.11.0

Reported by:    GitHub (watch releases)

(cherry picked from commit 011f831ac591b2b5f65407ccbd6b50e30f27f83a)

devel/electron42: Update to 42.10.0

Changelog: https://github.com/electron/electron/releases/tag/v42.10.0

Reported by:    GitHub (watch releases)

(cherry picked from commit d346072f67bec5fc8bee498efeedc91f94661cff)

devel/electron42: Update to 42.9.3

Changelog:
- https://github.com/electron/electron/releases/tag/v42.9.1
- https://github.com/electron/electron/releases/tag/v42.9.2
- https://github.com/electron/electron/releases/tag/v42.9.3

Reported by:    GitHub (watch releases)

(cherry picked from commit 49ce10da799eaff13ee9978a99b3d11b0daf3722)

devel/electron42: Update to 42.9.0

While here, prepare node modules archives for amd64 and aarch64
separately.

Changelog: https://github.com/electron/electron/releases/tag/v42.9.0
(cherry picked from commit e25bed0a6ecccf59a2fe82b0faa7b515212f6e4d)

devel/electron42: Update to 42.8.0

Changelog: https://github.com/electron/electron/releases/tag/v42.8.0

Reported by:    GitHub (watch releases)

(cherry picked from commit 4c360b5ba109634bdf13ab21299b7ab1c5b13711)

devel/electron42: Update to 42.8.1

Changelog: https://github.com/electron/electron/releases/tag/v42.8.1

Reported by:    GitHub (watch releases)

(cherry picked from commit d074a8e368f4269934e727a8769730e147f63e7a)

devel/electron42: Update to 42.6.1

Changelog: https://github.com/electron/electron/releases/tag/v42.6.1

Reported by:    GitHub (watch releases)

(cherry picked from commit 4ed0ee6e70442b354c895d4ff7d002aa4025ac7f)

devel/electron42: Update to 42.7.0

Changelog:
- https://github.com/electron/electron/releases/tag/v42.6.2
- https://github.com/electron/electron/releases/tag/v42.7.0

Reported by:    GitHub (watch releases)

(cherry picked from commit fd67ba2aab44502a5d8d363a288a8340ae6a6157)

devel/electron42: Update to 42.7.1

Changelog: https://github.com/electron/electron/releases/tag/v42.7.1

Reported by:    GitHub (watch releases)

(cherry picked from commit 6aa325ae9f88740fe72964f8fe3f4e967a606e10)

devel/electron42: Update to 42.11.1

Changelog: https://github.com/electron/electron/releases/tag/v42.11.1

Reported by:    GitHub (watch releases)
MFH:            2026Q3 (includes security fixes)
Security:       271556c1-ddbf-4d44-95e6-a731841539b2

databases/adodb5: update to 5.22.12 release (+)

Release notes:  https://github.com/ADOdb/ADOdb/releases/tag/v5.22.12

ftp/oftpd: Mark DEPRECATED

Abandoned and has known vulnerability (CVE-2005-2239).

PR:             298096
Approved by:    osa (mentor)
MFH:            2026Q3

(cherry picked from commit 0a1a8715e94376451714741428d649526b35b0a4)

japanese/mecab-ipadic: Update MASTER_SITES

Take maintainership.

PR:             298135
Reported by:    pkg-fallout
Approved by:    osa (mentor)
MFH:            2026Q3

ftp/oftpd: Mark DEPRECATED

Abandoned and has known vulnerability (CVE-2005-2239).

PR:             298096
Approved by:    osa (mentor)
MFH:            2026Q3

security/vuxml: Remove duplicate entry for giflib CVE-2026-26740

Already added in 5b67b86dbc40c1e6f20bac05b3f7b8a25ba00730

dns/powerdns-recursor: Update 5.4.5 => 5.4.6

Changelog:
https://doc.powerdns.com/recursor/changelog/5.4.html#change-5.4.6

PR:             298145
Reported by:    Ralf van der Enden <tremere at cainites.net> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)

security/vuxml: Document njs XML canonicalization vulnerability

CVE-2026-78689, fixed in njs 1.0.1.

Sponsored by:   Netzkommune GmbH

dns/nsd: Update 4.15.1 => 4.15.2

Release Notes:
https://community.nlnetlabs.nl/t/nsd-4-15-2-released/3451

PR:             298140
Reported by:    Jaap Akkerhuis <jaap at NLnetLabs.nl> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q3

(cherry picked from commit e5b6b785df35dcb504218ee8f269821b7c6ad161)

dns/nsd: Update 4.15.1 => 4.15.2

Release Notes:
https://community.nlnetlabs.nl/t/nsd-4-15-2-released/3451

PR:             298140
Reported by:    Jaap Akkerhuis <jaap at NLnetLabs.nl> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q3

www/nginx-devel: Update to 1.31.5

Changes with nginx 1.31.5                                        02 Sep
2026

    *) Feature: control API.

    *) Feature: predicate locations.

    *) Feature: the ngx_http_json_module.

    *) Feature: the "client_body_early_read" directive.

    *) Bugfix: use-after-free might occur in a worker process if
proxying
       with buffering was used and an error occurred while sending the
       response to an HTTP/2 client.

    *) Bugfix: a worker process might not exit or "accept4() failed (9:

    [13 lines not shown]

games/veloren-weekly: update to s20260902

Changes:        https://gitlab.com/veloren/veloren/-/compare/1292019541...f64ec65731
(cherry picked from commit 2a2e9d1ec0e41f6c7600d35a84dd568c40a2e784)

games/veloren-weekly: update to s20260902

Changes:        https://gitlab.com/veloren/veloren/-/compare/1292019541...f64ec65731

www/{nginx,nginx-devel,freenginx}: 3rd-party modules management

Chase the www/nginx-module-njs update to 1.0.1, which contains
security fixes.  Bump PORTREVISION so the packages pick up the new
module.

Sponsored by:   Netzkommune GmbH

www/nginx-module-njs: Update to 1.0.1

This release contains security fixes: an access control bypass in
js_access when an asynchronous request body continuation threw an
exception, a worker process crash when reading Response.statusText, a
heap buffer overflow in XML exclusive canonicalization and a stack
buffer overflow when exporting large RSA keys to JWK in WebCrypto.
Upstream has not assigned CVE numbers.

Changes:        https://nginx.org/en/docs/njs/changes.html

Sponsored by:   Netzkommune GmbH

devel/libnjs: Update to 1.0.1

This release contains security fixes: a heap buffer overflow while
parsing namespace prefix lists in XML exclusive canonicalization and a
stack buffer overflow when exporting RSA keys larger than 4096 bits to
JWK in WebCrypto.  Upstream has not assigned CVE numbers.

Changes:        https://nginx.org/en/docs/njs/changes.html

Sponsored by:   Netzkommune GmbH

lang/njs: Update to 1.0.1

This release contains security fixes: a heap buffer overflow while
parsing namespace prefix lists in XML exclusive canonicalization and a
stack buffer overflow when exporting RSA keys larger than 4096 bits to
JWK in WebCrypto.  Upstream has not assigned CVE numbers.

Changes:        https://nginx.org/en/docs/njs/changes.html

Sponsored by:   Netzkommune GmbH