BSD Commit Log Search

net-p2p/{lib,r}torrent: Update to 0.16.23

This release includes various bugfixes and minor improvements as part of
a stable series of releases.

ChangeLog:      https://github.com/rakshasa/rtorrent/releases/tag/v0.16.23
MFH:            2026Q3
(cherry picked from commit 2bab20852d1715a94be81dcd2aca69bcb12e8bc0)

dns/bind9-devel: update to 9.21.26

Changes:        https://downloads.isc.org/isc/bind9/9.21.26/doc/arm/html/notes.html
Security:       CVE-2026-19668 CVE-2026-19033 CVE-2026-77119
                CVE-2026-19941 CVE-2026-19666 CVE-2026-19667
                CVE-2026-75029 CVE-2026-77692 CVE-2026-81736
                CVE-2026-76163 CVE-2026-78301 CVE-2026-80274
                CVE-2026-81563
(cherry picked from commit 076689801fdaf575584e21649ea04f2cdd2892d9)

sysutils/edk2: fix network boot on bhyve

NetworkPkg's DxeNetLib needs EFI_RNG_PROTOCOL, and the Bhyve build's
only producer is VirtioRngDxe, which never binds since bhyve has no
virtio-rng device. RngDxe uses RDRAND instead and needs no device.
TcpDxe depexes gEfiHash2ServiceBindingProtocolGuid, so add
Hash2DxeCrypto too; without TcpDxe there is no HttpServiceBinding.
Also enable HTTP boot.

PR:             298499
Approved by:    manu
Sponsored by:   Netflix

net-p2p/{lib,r}torrent: Update to 0.16.23

This release includes various bugfixes and minor improvements as part of
a stable series of releases.

ChangeLog:      https://github.com/rakshasa/rtorrent/releases/tag/v0.16.23
MFH:            2026Q3

multimedia/py-knowit: Fix test depends version check

Remove upper version limit on test dependency devel/py-pint

multimedia/py-trakit: Update to 0.4.0

ChangeLog: https://github.com/ratoaq2/trakit/releases/tag/0.4.0

dns/bind920: update to 9.20.29

Changes:        https://downloads.isc.org/isc/bind9/9.20.29/doc/arm/html/notes.html#notes-for-bind-9-20-28
Security:       CVE-2026-19668 CVE-2026-19033 CVE-2026-77119
                CVE-2026-19941 CVE-2026-19666 CVE-2026-19667
                CVE-2026-19662 CVE-2026-75029 CVE-2026-77692
                CVE-2026-81736 CVE-2026-76163 CVE-2026-78301
                CVE-2026-80274 CVE-2026-81563
(cherry picked from commit 076689704fa0831f48d04e951d5ab08a2e653466)

dns/bind9-devel: update to 9.21.26

Changes:        https://downloads.isc.org/isc/bind9/9.21.26/doc/arm/html/notes.html
Security:       CVE-2026-19668 CVE-2026-19033 CVE-2026-77119
                CVE-2026-19941 CVE-2026-19666 CVE-2026-19667
                CVE-2026-75029 CVE-2026-77692 CVE-2026-81736
                CVE-2026-76163 CVE-2026-78301 CVE-2026-80274
                CVE-2026-81563

dns/bind920: update to 9.20.29

Changes:        https://downloads.isc.org/isc/bind9/9.20.29/doc/arm/html/notes.html#notes-for-bind-9-20-28
Security:       CVE-2026-19668 CVE-2026-19033 CVE-2026-77119
                CVE-2026-19941 CVE-2026-19666 CVE-2026-19667
                CVE-2026-19662 CVE-2026-75029 CVE-2026-77692
                CVE-2026-81736 CVE-2026-76163 CVE-2026-78301
                CVE-2026-80274 CVE-2026-81563

editors/emacs: Apply a security fix from upstream

Previous fix for CVE-2024-53920 was incomplete[0].

[0] https://www.openwall.com/lists/oss-security/2026/09/14/1

PR:             298557
MFH:            2026Q3
Security:       7ba6c085-1590-491a-98ce-5452646b196f
Security:       CVE-2024-53920
(cherry picked from commit 93d11220ce575a5ab5fff7f1dc1e587631bf1ac9)

editors/emacs: Fix native compilation with canna flavor

isearch-ext.el is a file that comes with the canna patch.  Because it is
preloaded, it was native-compiled during the bootstrap stage.  This
caused the native-lisp directory to be created, which in turn meant AOT
for all other elisp was silently skipped.

Fix this by adding isearch-ext to native-comp-bootstrap-deny-list, so it
is native-compiled later along with the rest of the elisp.

Sponsored by:   The FreeBSD Foundation

(cherry picked from commit f9566b80622d676208b0f0c5b4ed6f286ce37b10)

editors/emacs: Update to new major release, 31.1

Announcement:   https://lists.gnu.org/archive/html/info-gnu-emacs/2026-08/msg00004.html
Sponsored by:   The FreeBSD Foundation

(cherry picked from commit f33b08e8fc362a7d256d6a50238811ad8a7f925a)

Emacs ports: Align Makefiles

Lightly reorganize the options sections of editors/emacs and
editors/emacs-devel, so the two can be more easily compared.  This is a
no-op change.

Reviewed by:    ashish
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D58719

(cherry picked from commit edac99244ec45578b29725ee14c1e3ee70fe8b4a)

editors/emacs: Update to 31.0.91 (second pretest for 31.1)

Announcement:   https://lists.gnu.org/archive/html/emacs-devel/2026-07/msg00270.html
Reviewed by:    ashish
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D58570

(cherry picked from commit 0113e8aa6651c69850518e172172f0632384f5fb)

mail/thunderbird-esr: update to 153.3.0 (ga)

Release Notes:
  https://www.thunderbird.net/en-US/thunderbird/153.3.0esr/releasenotes/

(cherry picked from commit 10500712359d50c613a86eff7ad491c3f319c8dd)

mail/thunderbird-esr: update to 153.3.0 (ga)

Release Notes:
  https://www.thunderbird.net/en-US/thunderbird/153.3.0esr/releasenotes/

security/vuxml: Document Unbound vulnerabilities

PR:             298574
Approved by:    osa, vvd (Mentors, implicit)

editors/emacs: Apply a security fix from upstream

Previous fix for CVE-2024-53920 was incomplete[0].

[0] https://www.openwall.com/lists/oss-security/2026/09/14/1

PR:             298557
MFH:            2026Q3
Security:       7ba6c085-1590-491a-98ce-5452646b196f
Security:       CVE-2024-53920

www/element-web: Update to 1.12.28

Approved by:    maintainer (implicit, version bump, as per PR 258262)

security/vuxml: Revise emacs vulnerability

See https://www.openwall.com/lists/oss-security/2026/09/14/1

PR:             298557

security/stunnel: Update to 5.81

dns/unbound: Security update 1.26.0 => 1.26.1

Release Notes:
https://community.nlnetlabs.nl/t/unbound-1-26-1-released/3463

Changelog:
https://github.com/NLnetLabs/unbound/releases/tag/release-1.26.1

PR:             298574
Approved by:    osa, vvd (Mentors, implicit)
Security:       CVE-2026-81642
Security:       CVE-2026-81634
Security:       CVE-2026-82717
Security:       CVE-2026-77955
Security:       CVE-2026-78227
Security:       CVE-2026-80225
Security:       CVE-2026-82720
Security:       CVE-2026-85501
Security:       CVE-2026-77860

    [3 lines not shown]

dns/unbound: Security update 1.26.0 => 1.26.1

Release Notes:
https://community.nlnetlabs.nl/t/unbound-1-26-1-released/3463

Changelog:
https://github.com/NLnetLabs/unbound/releases/tag/release-1.26.1

PR:             298574
Approved by:    osa, vvd (Mentors, implicit)
Security:       CVE-2026-81642
Security:       CVE-2026-81634
Security:       CVE-2026-82717
Security:       CVE-2026-77955
Security:       CVE-2026-78227
Security:       CVE-2026-80225
Security:       CVE-2026-82720
Security:       CVE-2026-85501
Security:       CVE-2026-77860
MFH:            2026Q3

multimedia/go2tv: Update to 2.6.1

ChangeLog:

1. https://github.com/alexballas/go2tv/releases/tag/v2.6.1

Reported by:    "github-actions[bot]" <notifications at github.com>

devel/tuicr: Update to 0.26.0

audio/mpz: the port had been updated to version 2.1.6

Per several requests, switch to Qt 6 by default but keep Qt 5
as an option for those who prefer better user experience over
higher toolkit version number.

PR:             296248
Reported by:    portscout

devel/hs-haskell-language-server: Update 2.14.0.0 => 2.15.0.0

* Add WWW for Hackage package
* Remove NOT_FOR_ARCHS= i386 as lang/ghc* is 64-bit only anyway

Approved by:            haskell@ (alven@)

misc/libsweep-lidar: Mark deprecated

PR:             298579
Approved by:    Hyun Hwang <hyun at caffeinated.codes> (maintainer)

(cherry picked from commit c0e43b11fb5c5a0b8ce0f8305fdcafd5afb4fc05)

misc/libsweep-lidar: Mark deprecated

PR:             298579
Approved by:    Hyun Hwang <hyun at caffeinated.codes> (maintainer)

databases/p5-Redis-JobQueue: Fix runtime error, bump PORTREVISION