BSD Commit Log Search

security/mbedtls4: Apply upstream fix for a TLS 1.2 client regression

TLS 1.2 client regression that caused valid ServerKeyExchange signatures
using rsa_pss_rsae_* to be rejected:
https://github.com/Mbed-TLS/mbedtls/issues/10668
https://github.com/Mbed-TLS/mbedtls/commit/5fc28f401666f3ab3338168f6dcee71e6b468a4e

While at it, add a DEBUG option that was useful to figure out the
problem.

PR:             294776
Sponsored by:   UNIS Labs
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>
MFH:            2026Q2

(cherry picked from commit 12d2ebc10b688232d9e0928c180512d30d445414)

security/mbedtls4: Apply upstream fix for a TLS 1.2 client regression

TLS 1.2 client regression that caused valid ServerKeyExchange signatures
using rsa_pss_rsae_* to be rejected:
https://github.com/Mbed-TLS/mbedtls/issues/10668
https://github.com/Mbed-TLS/mbedtls/commit/5fc28f401666f3ab3338168f6dcee71e6b468a4e

While at it, add a DEBUG option that was useful to figure out the
problem.

PR:             294776
Sponsored by:   UNIS Labs
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>
MFH:            2026Q2

security/gnutls: Update to 3.8.13

(cherry picked from commit b2662314eb46e2ec04b3192df2757db9c1a46af7)

security/beid: Update to 5.1.28

games/vkquake: Update 1.32.3.1 => 1.34.1

Changelogs:
https://github.com/Novum/vkQuake/releases/tag/1.33.0
https://github.com/Novum/vkQuake/releases/tag/1.33.1
https://github.com/Novum/vkQuake/releases/tag/1.34.0
https://github.com/Novum/vkQuake/releases/tag/1.34.1

PR:             294511
Approved by:    Amelia Marsh <seafork at disroot.org> (maintainer)
Sponsored by:   UNIS Labs

security/gnutls: Update to 3.8.13

textproc/p5-Text-CSV_XS: Security update 1.61 => 1.62

Changelog:
https://metacpan.org/dist/Text-CSV_XS/changes

PR:             294892
Reported by:    Sergei Vyshenski <svysh.fbsd at gmail.com> (maintainer)
Approved by:    osa (mentor)
Security:       CVE-2026-7111
MFH:            2026Q2

(cherry picked from commit a992918fe0687c03e1146fdcba5e054da2c12320)

textproc/p5-Text-CSV_XS: Security update 1.61 => 1.62

Changelog:
https://metacpan.org/dist/Text-CSV_XS/changes

PR:             294892
Reported by:    Sergei Vyshenski <svysh.fbsd at gmail.com> (maintainer)
Approved by:    osa (mentor)
Security:       CVE-2026-7111
MFH:            2026Q2

net/spoofdpi: Update 1.2.1 => 1.4.0

Changelogs:
- https://github.com/xvzc/spoofdpi/releases/tag/v1.3.0
- https://github.com/xvzc/spoofdpi/releases/tag/v1.3.1
- https://github.com/xvzc/spoofdpi/releases/tag/v1.4.0

Port changes:
* Require at least Go 1.26.
* Update WWW entries.
* Remove sample configuration.
* Update rc.d service to disable default TUI.

Reviewed by:    osa, vvd (mentors)
Approved by:    osa, vvd (mentors)
Differential Revision: https://reviews.freebsd.org/D56737

multimedia/gaupol: Update 1.15 => 1.16

Changelog:
https://github.com/otsaloma/gaupol/releases/tag/1.16

Reviewed by:    osa, vvd (mentors)
Approved by:    osa, vvd (mentors)
Differential Revision: https://reviews.freebsd.org/D56738

net-im/flare: Update 0.20.3 => 0.20.4

Changelog:
https://gitlab.com/schmiddi-on-mobile/flare/-/releases/0.20.4

Reviewed by:    osa, vvd (mentors)
Approved by:    osa (mentor)
Differential Revision: https://reviews.freebsd.org/D56739

misc/gitlogue: Update 0.8.0 => 0.9.0

While here, unbundle libgit2.

Changelog:
https://github.com/unhappychoice/gitlogue/releases/tag/v0.9.0

Reviewed by:    osa, vvd (mentors)
Approved by:    osa (mentor)
Differential Revision: https://reviews.freebsd.org/D56724

MOVED: Add date to records with emulators/virtualbox-ose-additions* flavorization

PR:             294806
Reported by:    Michael Butler <imb at protected-networks.net> (via email)
Sponsored by:   UNIS Labs

print/cups: Update to 2.4.19

(cherry picked from commit 0b605090f1405780a1d47d53078d4f8bc3fa266c)

print/cups: Update to 2.4.19

editors/zed: Update to 1.0.0

Changelog:
- https://github.com/zed-industries/zed/releases/tag/v0.233.8
- https://github.com/zed-industries/zed/releases/tag/v0.233.9
- https://github.com/zed-industries/zed/releases/tag/v0.233.10
- https://github.com/zed-industries/zed/releases/tag/v1.0.0

Reported by:    GitHub (watch releases)

devel/aws-crt-cpp: Update to 0.38.6

ChangeLog: https://github.com/awslabs/aws-crt-cpp/releases/tag/v0.38.6

benchmarks/iozone: Update to 3.510

ChangeLog: https://www.iozone.org/src/current/Changes.txt

astro/kstars: fix string quoting for SQL queries

PR:             282980
Submitted by:   Raúl Zighelboim

emulators/virtualbox-ose-additions*: Flavorize, add xlibre flavor

Flavors: xorg (default), xlibre, nox11.

While here add PAE option for ARCH=i386, fix warnings from portclippy,
make non-functional changes related to indentation and formatting,
make simplification of CONFLICTS_INSTALL, make unification.

PR:             294806
Sponsored by:   UNIS Labs
Co-authored-by: b-aaz <b-aazbsd at proton.me>

*/*: Bump PORTREVISION on *-sbcl ports after lang/sbcl upgrade.

lang/sbcl: Update to 2.6.4

security/syft: fix fetch

The port tries to fetch google.golang.org/genproto and its submodules
in different versions for some reason.  This confuses our framework to
the point where it cannot fetch the port.

Fix the build by fetching the same (newer) version for both parent and
child.  The versions are ~2 months apart, which should pose no problem.

Also mark as only for aarch64, amd64 due to use of modernc.org/sqlite

Approved by:    portmgr (build fix blanket)
MFH:            2026Q2

(cherry picked from commit c86a02ab3b84ac1e4a972e1217412a401d5692de)

graphics/colmap: update to 4.0.4

A bug fix release.

Changelog: https://github.com/colmap/colmap/releases/tag/4.0.4

MFH:            2026Q2
(cherry picked from commit 75052c64b7fe60b39612d2e2a6b46eb659a6fde5)

security/syft: fix fetch

The port tries to fetch google.golang.org/genproto and its submodules
in different versions for some reason.  This confuses our framework to
the point where it cannot fetch the port.

Fix the build by fetching the same (newer) version for both parent and
child.  The versions are ~2 months apart, which should pose no problem.

Also mark as only for aarch64, amd64 due to use of modernc.org/sqlite

Approved by:    portmgr (build fix blanket)
MFH:            2026Q2

games/nbsdgames: update to 6.0.1

A bug fix release.

Changelog: https://github.com/abakh/nbsdgames/releases/tag/v6.0.1

graphics/colmap: update to 4.0.4

A bug fix release.

Changelog: https://github.com/colmap/colmap/releases/tag/4.0.4

MFH:            2026Q2

converters/simdutf: man pages only present if TOOLS options selected

This fixes the packaging if built with -TOOLS.

PR:             294895
Reported by:    smyru
Reported by:    Alessandro Sagratini <ale_sagra at hotmail.com>

finance/ticker: update to 5.2.1

Now requires Go 1.26.

Changelog: https://github.com/achannarasappa/ticker/releases/tag/v5.2.1

www/janus: update to 1.4.1.