FreeBSD/ports 6ec2c7e — print/cups Makefile distinfo

print/cups: Fix build with AVAHI option disabled

PR:             299342
Reported by:    vvd

(cherry picked from commit 3c361bc0461b5f269173c7998fc09ac6d435ed7c)
DeltaFile
+3-1print/cups/distinfo
+3-0print/cups/Makefile
+6-12 files

FreeBSD/ports 88dd83c — print/cups Makefile distinfo

print/cups: Update to 2.4.20

PR:             299342
(cherry picked from commit 23eee321bb5a4bcb713fc57ac7affbaff7ef70ea)
DeltaFile
+3-3print/cups/distinfo
+1-2print/cups/Makefile
+4-52 files

FreeBSD/ports 7893aea — www/nginx-module-cache-purge Makefile distinfo

www/nginx-module-cache-purge: Update to 3.0.4

Fixes a symlink traversal during cache tree traversal: an attacker able to
create symbolic links inside the cache directory could make a purge delete
arbitrary files the worker can reach (CVE-2026-108981).

https://github.com/nginx-modules/ngx_cache_purge/releases/tag/3.0.4

Security:       CVE-2026-108981
Sponsored by:   Netzkommune GmbH

(cherry picked from commit 225227080d2216b2f5ea3d331ad203ed41937520)
DeltaFile
+3-3www/nginx-module-cache-purge/distinfo
+1-1www/nginx-module-cache-purge/Makefile
+4-42 files

FreeBSD/ports 4d9365e — security/vuxml/vuln 2026.xml

security/vuxml: Document ngx_cache_purge vulnerability

Sponsored by:   Netzkommune GmbH
DeltaFile
+32-0security/vuxml/vuln/2026.xml
+32-01 files

FreeBSD/ports fc9a445 — www/freenginx Makefile, www/nginx Makefile

www/{nginx,nginx-devel,freenginx}: Bump PORTREVISION for the module updates

The cache_purge, njs and lua modules are built into these ports, and a
BUILD_DEPENDS does not rebuild them by itself.

Sponsored by:   Netzkommune GmbH
DeltaFile
+1-1www/freenginx/Makefile
+1-0www/nginx/Makefile
+1-0www/nginx-devel/Makefile
+3-13 files

FreeBSD/ports 688221f — www/nginx-module-njs pkg-plist Makefile, www/nginx-module-njs/files patch-src_njs__object.c patch-src_njs__value.c

www/nginx-module-njs: Update to 1.0.2

Fixes memory corruption in RegExp operations, crashes after a failed
module compilation, and excessive resource usage when sorting huge sparse
arrays.

Both local patches are gone: njs 1.0.2 carries the indexed fast path fix
for exotic objects itself.

Sponsored by:   Netzkommune GmbH
DeltaFile
+0-24www/nginx-module-njs/files/patch-src_njs__value.c
+0-11www/nginx-module-njs/files/patch-src_njs__object.c
+3-3www/nginx-module-njs/distinfo
+1-2www/nginx-module-njs/Makefile
+2-0www/nginx-module-njs/pkg-plist
+6-405 files

FreeBSD/ports 67b99bc — www/nginx-module-lua Makefile pkg-plist, www/nginx-module-lua/files patch-src_ngx__http__lua__ssl__client__helloby.c patch-src_ngx__http__lua__subrequest.c

www/nginx-module-lua: Update to 0.10.31

Two stable releases at once, 0.10.29 is from 2025.

All three local patches are gone: 0.10.31 guards the freenginx cases
upstream, in the client hello handler, in the subrequest start time and in
ngx_http_lua_time.

Sponsored by:   Netzkommune GmbH
DeltaFile
+0-19www/nginx-module-lua/files/patch-src_ngx__http__lua__time.c
+0-16www/nginx-module-lua/files/patch-src_ngx__http__lua__subrequest.c
+0-11www/nginx-module-lua/files/patch-src_ngx__http__lua__ssl__client__helloby.c
+3-3www/nginx-module-lua/distinfo
+4-0www/nginx-module-lua/pkg-plist
+1-2www/nginx-module-lua/Makefile
+8-516 files

FreeBSD/ports 2252270 — www/nginx-module-cache-purge Makefile distinfo

www/nginx-module-cache-purge: Update to 3.0.4

Fixes a symlink traversal during cache tree traversal: an attacker able to
create symbolic links inside the cache directory could make a purge delete
arbitrary files the worker can reach (CVE-2026-108981).

https://github.com/nginx-modules/ngx_cache_purge/releases/tag/3.0.4

Security:       CVE-2026-108981
Sponsored by:   Netzkommune GmbH
DeltaFile
+3-3www/nginx-module-cache-purge/distinfo
+1-1www/nginx-module-cache-purge/Makefile
+4-42 files

FreeBSD/ports e4127f0 — emulators/ares Makefile

emulators/ares: Bump PORTREVISION after librashader update

PR:             299328
Approved by:    osa, vvd (Mentors, implicit)
DeltaFile
+1-1emulators/ares/Makefile
+1-11 files

FreeBSD/ports 2435a0d — devel/librashader Makefile distinfo

devel/librashader: Update 0.12.0 => 0.12.1

Changelog:
https://github.com/SnowflakePowered/librashader/releases/tag/librashader-v0.12.1

PR:             299328
Approved by:    osa, vvd (Mentors, implicit)
DeltaFile
+3-3devel/librashader/distinfo
+1-2devel/librashader/Makefile
+4-52 files

FreeBSD/ports b2d5666 — graphics/photocraft Makefile distinfo

graphics/photocraft: update to 0.9.0

Changelog:      https://github.com/storytold/photocraft/releases/tag/v0.9.0
DeltaFile
+211-3graphics/photocraft/distinfo
+106-3graphics/photocraft/Makefile
+317-62 files

FreeBSD/ports 9377490 — chinese/gcin Makefile, chinese/gcin/files patch-configure patch-tsa2d32.cpp

chinese/gcin: fix build on powerpc64*

Build with -fsigned-char: the phrase tables flag mixed-case English
words with a negative length stored in plain char. Also fix the hash
index of 1-byte keys in tsa2d32 on big-endian.
DeltaFile
+12-0chinese/gcin/files/patch-tsa2d32.cpp
+9-0chinese/gcin/files/patch-configure
+0-2chinese/gcin/Makefile
+21-23 files

FreeBSD/ports f033b22 — security/kuku/files patch-CMakeLists.txt patch-src_kuku_internal_hash.h

security/kuku: fix build on powerpc64

Upstream rejects big-endian targets because item words and the BLAKE2xb-seeded
tabulation table were read in native byte order, so a big-endian build would
compute a different table layout than little-endian peers. Define both in
little-endian byte order instead (a no-op on little-endian targets) and drop
the guards.
DeltaFile
+137-0security/kuku/files/patch-src_kuku_common.h
+33-0security/kuku/files/patch-src_kuku_internal_hash.h
+19-0security/kuku/files/patch-CMakeLists.txt
+189-03 files

FreeBSD/ports 282aecf — math/lcalc pkg-plist Makefile

math/lcalc: update to 2.2.2

Fixes the build with math/pari 2.19.0, which removed gaffect() and gaffsg().

Changelog:      https://gitlab.com/sagemath/lcalc/-/releases/2.2.2
DeltaFile
+3-3math/lcalc/distinfo
+2-2math/lcalc/Makefile
+1-1math/lcalc/pkg-plist
+6-63 files

FreeBSD/ports db5830f — ftp/py-curl-cffi/files patch-libs.json

ftp/py-curl-cffi: fix build on powerpc64le

platform.uname().machine is "powerpc" on every FreeBSD PowerPC flavour, so the
"powerpc64" entry introduced by the 0.16.3 update never matched and the build
died with "Unsupported arch".
DeltaFile
+1-1ftp/py-curl-cffi/files/patch-libs.json
+1-11 files

FreeBSD/ports 5dbbf82 — net/tcplog_dumper/files patch-tcplog__dumper.c

net/tcplog_dumper: fix build on powerpc64

struct tcp_log_bbr lost its ininput member in FreeBSD 14.0 (a370832bec5f);
it was only referenced by the big-endian conversion code.
DeltaFile
+13-0net/tcplog_dumper/files/patch-tcplog__dumper.c
+13-01 files

FreeBSD/ports 4455ec0 — misc/outside/files patch-cargo-crates_savefile-derive-0.19.0_src_lib.rs patch-cargo-crates_savefile-0.19.0_src_lib.rs

misc/outside: fix build on powerpc64

The savefile crate refuses to build on big-endian targets with its
bit-vec feature, and its raw-memory fast paths write native byte order
there while the data is read back as little-endian, corrupting the
cache on round-trip. Serialize the BitVec storage words as little-endian
and disable the fast paths on big-endian.
DeltaFile
+93-0misc/outside/files/patch-cargo-crates_savefile-0.19.0_src_lib.rs
+11-0misc/outside/files/patch-cargo-crates_savefile-derive-0.19.0_src_lib.rs
+104-02 files

FreeBSD/ports 6144a75 — sysutils/fastfetch distinfo Makefile

sysutils/fastfetch: update to 2.70.0

Drop QUICKJS option, removed upstream.

Changelog:      https://github.com/fastfetch-cli/fastfetch/releases/tag/2.70.0
DeltaFile
+3-8sysutils/fastfetch/Makefile
+3-3sysutils/fastfetch/distinfo
+6-112 files

FreeBSD/ports 8489b73 — www/qt6-webengine/files patch-src_3rdparty_chromium_third__party_dav1d_libdav1d_src_ppc_dav1d__types.h patch-src_3rdparty_chromium_v8_BUILD.gn

www/qt6-webengine: add powerpc64le support

The architecture layer is derived from Chimera Linux's qt6-qtwebengine
ppc64le patchset, reduced to the files FreeBSD actually compiles and
adapted to FreeBSD:
- gn: map uname -m "powerpc" to ppc64 in host arch detection
- cmake/QtToolchainHelpers: map power64 to the ppc64 GN arch
- build/config/compiler: don't force a Linux target triple on BSD
- PartitionAlloc: ppc64 GN wiring, dynamic-page-size ASLR variant on BSD
  (as for arm64), pin kAlignment to 16 (alignof(max_align_t) is 8 while
  long double is 64-bit)
- v8: POWER8 baseline with AltiVec/VSX; make
  Assembler::kMaximalBufferSize public, as the 6.11.2 baseline compiler
  needs it
- base: define kThreadPriorityToNiceValueMapForTest on BSD; on ppc64 the
  TOC reference survives --gc-sections
- blink/webaudio: fix the stale scalar ProcessARateVector fallback
  signature in delay.cc
- devtools: don't create a zero-sized @rollup/plugin-terser worker pool

    [8 lines not shown]
DeltaFile
+51-0www/qt6-webengine/files/patch-src_3rdparty_chromium_third__party_dav1d_config_linux_ppc64_config.h
+33-0www/qt6-webengine/files/patch-src_3rdparty_chromium_third__party_libvpx_BUILD.gn
+29-0www/qt6-webengine/files/patch-src_3rdparty_chromium_v8_test_BUILD.gn
+23-1www/qt6-webengine/files/patch-src_3rdparty_chromium_third__party_dawn_src_dawn_common_Platform.h
+19-4www/qt6-webengine/files/patch-src_3rdparty_chromium_v8_BUILD.gn
+22-0www/qt6-webengine/files/patch-src_3rdparty_chromium_third__party_dav1d_libdav1d_src_ppc_dav1d__types.h
+177-524 files not shown
+467-2230 files

FreeBSD/ports 4068bdb — devel/jetbrains-rustrover Makefile

devel/jetbrains-rustrover: fix pty4j and sqlite paths on powerpc64le

The IDE looks up libsqliteij.so under linux-x86_64 on anything that is
not arm64, and pty4j uses JNA arch name ppc64le.
DeltaFile
+4-3devel/jetbrains-rustrover/Makefile
+4-31 files

FreeBSD/ports 0effc31 — devel/jetbrains-clion pkg-plist Makefile

devel/jetbrains-clion: enable on powerpc64le

JetBrains provides no build of its clangd fork for powerpc64le, and the
IDE refuses a stock clangd, so the bundled clang tools are not installed
there.
DeltaFile
+16-4devel/jetbrains-clion/Makefile
+6-6devel/jetbrains-clion/pkg-plist
+22-102 files

FreeBSD/ports f4a4a79 — emulators/azahar Makefile

emulators/azahar: enable on powerpc64le

There is no dynarmic JIT backend for PowerPC, so the CPU falls back
to the interpreter.
DeltaFile
+1-1emulators/azahar/Makefile
+1-11 files

FreeBSD/ports d498309 — databases/clickhouse-cpp Makefile

databases/clickhouse-cpp: enable on powerpc64le
DeltaFile
+2-2databases/clickhouse-cpp/Makefile
+2-21 files

FreeBSD/ports 7bed7b0 — biology/hmmer Makefile, biology/hmmer/files patch-easel_esl__vmx.h patch-configure

biology/hmmer: add powerpc64le support

Swap vec_sld operands on little-endian so the Altivec code keeps its
big-endian element order, and drop the configure check that rejects
VMX on little-endian.
DeltaFile
+17-0biology/hmmer/files/patch-configure
+13-0biology/hmmer/files/patch-easel_esl__vmx.h
+1-1biology/hmmer/Makefile
+31-13 files

FreeBSD/ports 5a80069 — security/vuxml/vuln 2026.xml

security/vuxml: Document www/newsboat vulnerabilities

PR:             299303
Approved by:    osa, vvd (Mentors, implicit)
DeltaFile
+30-0security/vuxml/vuln/2026.xml
+30-01 files

FreeBSD/ports 3f5c0ef — www/newsboat Makefile Makefile.crates

www/newsboat: Update 2.44 => 2.45

This release includes some security fixes.

While here, build with -DNCURSES_WIDECHAR by default.

Changelog:
https://github.com/newsboat/newsboat/blob/r2.45/CHANGELOG.md

PR:             299303
Approved by:    Marko Turk <mt-bugs at markoturk.info> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
Security:       Remote code execution via manual OPML import (CVE pending)
Security:       GHSA-4m8m-vj3m-hfxx: Remote code execution via OPML import
Security:       GHSA-pvg7-gjxf-23c9: Podboat could write at arbitrary paths
MFH:            2026Q4

(cherry picked from commit e2442c39a64af21782ca70f1f1f8cc23d84eef27)
DeltaFile
+143-179www/newsboat/distinfo
+70-88www/newsboat/Makefile.crates
+3-2www/newsboat/Makefile
+216-2693 files

FreeBSD/ports e2442c3 — www/newsboat Makefile Makefile.crates

www/newsboat: Update 2.44 => 2.45

This release includes some security fixes.

While here, build with -DNCURSES_WIDECHAR by default.

Changelog:
https://github.com/newsboat/newsboat/blob/r2.45/CHANGELOG.md

PR:             299303
Approved by:    Marko Turk <mt-bugs at markoturk.info> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
Security:       Remote code execution via manual OPML import (CVE pending)
Security:       GHSA-4m8m-vj3m-hfxx: Remote code execution via OPML import
Security:       GHSA-pvg7-gjxf-23c9: Podboat could write at arbitrary paths
MFH:            2026Q4
DeltaFile
+143-179www/newsboat/distinfo
+70-88www/newsboat/Makefile.crates
+3-2www/newsboat/Makefile
+216-2693 files

FreeBSD/ports b1773ff — www/freenginx-devel Makefile.extmod Makefile

www/freenginx-devel: third-party modules management

- update njs module to 1.0.2

Bump PORTREVISION.

Sponsored by:   tipi.work

<ChangeLog>

nginx modules:

*) Bugfix: fixed response body framing and keepalive connection reuse
   in ngx.fetch().  Responses with conflicting Content-Length fields,
   with both Transfer-Encoding and Content-Length, or with 1xx status
   codes are now rejected.

*) Bugfix: fixed enforcement of max_response_body_size for chunked
   responses in ngx.fetch().

    [110 lines not shown]
DeltaFile
+3-3www/freenginx-devel/distinfo
+1-1www/freenginx-devel/Makefile.extmod
+1-1www/freenginx-devel/Makefile
+5-53 files

FreeBSD/ports 92375a4 — lang/qmasm Makefile, math/py-spopt Makefile

*/*: fix build broken by PuLP rename

PuLP was renamed to pulp in the port math/py-PuLP and by the upstream.

Reported by:    fallout
Approved by:    portmgr (unbreak; blanket)
DeltaFile
+1-1science/py-libpysal/Makefile
+1-1science/py-chempy/Makefile
+1-1misc/snakemake/Makefile
+1-1math/py-spopt/Makefile
+1-1lang/qmasm/Makefile
+5-55 files

FreeBSD/ports 3212c2a — misc/py-onnxruntime Makefile

misc/py-onnxruntime: broken on i386

Reported by:    fallout

(cherry picked from commit 8d6067708c59e5222c6b772cf229572198013e62)
DeltaFile
+2-0misc/py-onnxruntime/Makefile
+2-01 files