www/nginx*: Security update to 1.30.5 and 1.31.6
Changes with nginx 1.30.5 15 Sep 2026
*) Security: a heap memory buffer overflow might occur in a worker
process under certain configurations when using HTTP/3 with OpenSSL
3.5.0 and earlier (CVE-2026-90439).
Thanks to Banny Liao.
*) Change: now the QUIC transport parameters extension received in an
SSL connection is always ignored.
Changes with nginx 1.31.6 15 Sep 2026
*) Security: a heap memory buffer overflow might occur in a worker
process under certain configurations when using HTTP/3 with OpenSSL
3.5.0 and earlier (CVE-2026-90439).
Thanks to Banny Liao.
[20 lines not shown]
security/modsecurity3-nginx: Chase the nginx update to 1.30.5
Read the version from www/nginx/version.mk instead of keeping a copy,
so the port follows the nginx updates on its own.
Sponsored by: Netzkommune GmbH
net/nats-server: Update to 2.14.7
Add a PORTSCOUT limit: upstream's -RC and -preview tags in the Go
module proxy list kept portscout from detecting new releases.
multimedia/gaupol: Update 2.0 => 2.0.1
While here, use shebangfix instead.
Changelog:
- Fix theming related hang on startup with GTK ≥ 4.23.1 (#249)
- Drop support for the general.theme config file option with GTK < 4.20
https://github.com/otsaloma/gaupol/releases/tag/2.0.1
Reported by: portscout
Approved by: osa, vvd (Mentors, implicit)
java/jextract: new port
jextract is a tool which mechanically generates Java bindings from
native library headers. This tools leverages the clang C API in order
to parse the headers associated with a given native library, and the
generated Java bindings build upon the Foreign Function & Memory API.
Co-authored-by: Michael Osipov <michaelo at FreeBSD.org>
PR: 285159
