FreeBSD/ports 5c8aafb — net-im/nextcloud-talk Makefile distinfo

net-im/nextcloud-talk: Update to 25.0.6
DeltaFile
+3-3net-im/nextcloud-talk/distinfo
+1-1net-im/nextcloud-talk/Makefile
+4-42 files

FreeBSD/ports 6c6d6f8 — www/nextcloud-memories Makefile distinfo

www/nextcloud-memories: Update to 10.1.0
DeltaFile
+3-3www/nextcloud-memories/distinfo
+1-1www/nextcloud-memories/Makefile
+4-42 files

FreeBSD/ports e387c7e — www/nextcloud-appointments Makefile distinfo

www/nextcloud-appointments: Update to 2.8.6
DeltaFile
+3-3www/nextcloud-appointments/distinfo
+1-1www/nextcloud-appointments/Makefile
+4-42 files

FreeBSD/ports 150a5e1 — security/sequoia-chameleon-gnupg Makefile Makefile.crates

security/sequoia-chameleon-gnupg: re-update some more crates

Most notably, the downgrade of nettle-sys in the process of updating
libc broke the build.

Pointy-hat to: asomers
DeltaFile
+15-7security/sequoia-chameleon-gnupg/distinfo
+7-3security/sequoia-chameleon-gnupg/Makefile.crates
+1-1security/sequoia-chameleon-gnupg/Makefile
+23-113 files

FreeBSD/ports 03d71e7 — net/cloudquery Makefile distinfo

net/cloudquery: update to version 6.48.0

Changes in this version:

 - New command: cloudquery upgrade check
DeltaFile
+5-5net/cloudquery/distinfo
+1-2net/cloudquery/Makefile
+6-72 files

FreeBSD/ports 7201f3d — dns/nsd Makefile distinfo

dns/nsd: Security update 4.15.2 => 4.15.3

Release Notes:
https://community.nlnetlabs.nl/t/nsd-4-15-3-security-release/3490

PR:             299412
Approved by:    osa, vvd (Mentors, implicit)
Security:       CVE-2026-101337
Security:       CVE-2026-101338
Security:       CVE-2026-101339
Security:       CVE-2026-101341
MFH:            2026Q4

(cherry picked from commit ba6fa0984be114ff5cfb7d58d74a9dea19cedb43)
DeltaFile
+3-3dns/nsd/distinfo
+1-1dns/nsd/Makefile
+4-42 files

FreeBSD/ports ba6fa09 — dns/nsd Makefile distinfo

dns/nsd: Security update 4.15.2 => 4.15.3

Release Notes:
https://community.nlnetlabs.nl/t/nsd-4-15-3-security-release/3490

PR:             299412
Approved by:    osa, vvd (Mentors, implicit)
Security:       CVE-2026-101337
Security:       CVE-2026-101338
Security:       CVE-2026-101339
Security:       CVE-2026-101341
MFH:            2026Q4
DeltaFile
+3-3dns/nsd/distinfo
+1-1dns/nsd/Makefile
+4-42 files

FreeBSD/ports 6d8f46f — www/freenginx-devel Makefile Makefile.extmod

www/freenginx-devel: third-party modules management (+)

- update lua module to its recent snapshot
- update lua-stream module to its recent snapshot

Bump PORTREVISION.

Sponsored by:   tipi.work
DeltaFile
+9-10www/freenginx-devel/distinfo
+6-6www/freenginx-devel/Makefile.extmod
+1-1www/freenginx-devel/Makefile
+16-173 files

FreeBSD/ports feef44a — security/vuxml/vuln 2026.xml

security/vuxml: Document dns/nsd vulnerabilities

PR:             299412
Approved by:    osa, vvd (Mentors, implicit)
DeltaFile
+39-0security/vuxml/vuln/2026.xml
+39-01 files

FreeBSD/ports ac696ba — www/freenginx-devel Makefile.extmod Makefile

www/freenginx-devel: third-party modules management (+)

- security update of the ngx_http_cache_purge to v.3.0.4

ChangeLog:      https://github.com/nginx-modules/ngx_cache_purge/compare/3.0.2...3.0.4
Security:       CVE-2026-108981

Bump PORTREVISION.

Sponsored by:   tipi.work
DeltaFile
+3-2www/freenginx-devel/distinfo
+1-1www/freenginx-devel/Makefile.extmod
+1-1www/freenginx-devel/Makefile
+5-43 files

FreeBSD/ports 0ee810c — databases/postgresql19-server pkg-plist-client Makefile

databases/postgresql19-server: Update to 19RC1

The PostgreSQL Global Development Group announces that the first release
candidate of PostgreSQL 19 is now available for download. As a release
candidate, PostgreSQL 19 RC 1 will be mostly identical to the initial
release of PostgreSQL 19, though some more fixes may be applied prior to
the general availability of PostgreSQL 19.

To upgrade to PostgreSQL 19 RC 1 from earlier versions of PostgreSQL,
you will need to use a major version upgrade strategy, e.g. pg_upgrade
or pg_dump / pg_restore. For more information, please visit the
documentation section on upgrading:

https://www.postgresql.org/about/news/postgresql-19-rc-1-released-3409/
DeltaFile
+11-4databases/postgresql19-server/pkg-plist-server
+3-3databases/postgresql19-server/distinfo
+1-1databases/postgresql19-server/Makefile
+1-0databases/postgresql19-server/pkg-plist-client
+16-84 files

FreeBSD/ports 7a0111e — www/bunkerweb distinfo Makefile, www/bunkerweb/files patch-src_scheduler_main.py

www/bunkerweb: Update to 1.6.16

The web UI now compresses its responses, which adds py-brotli and
py-flask-compress to the run dependencies.

Replace the LUA_VER substitutions makeplist left in pkg-plist: they
stand for parts of bundled version numbers, not for the Lua version.

Changes:        https://github.com/bunkerity/bunkerweb/releases/tag/v1.6.16
Sponsored by:   Netzkommune GmbH
DeltaFile
+152-83www/bunkerweb/pkg-plist
+13-13www/bunkerweb/files/patch-src_scheduler_main.py
+3-3www/bunkerweb/distinfo
+4-2www/bunkerweb/Makefile
+172-1014 files

FreeBSD/ports 9817d29 — misc/freebsd-doc-all Makefile, misc/freebsd-doc-en Makefile pkg-plist

misc/freebsd-doc-*: Update to rev. 1f4bec7 from FreeBSD docset

Approved by:    dcoeng (implicit)
DeltaFile
+3-3misc/freebsd-doc-en/distinfo
+3-0misc/freebsd-doc-en/pkg-plist
+1-1misc/freebsd-doc-en/Makefile
+1-1misc/freebsd-doc-all/Makefile
+1-0misc/freebsd-doc-ru/pkg-plist
+9-55 files

FreeBSD/ports 10768ab — devel/mongo-cxx-driver Makefile, science/orthanc Makefile

Release a few more ports to ports@

Narrowing my focus more toward upstream development
DeltaFile
+1-1science/orthanc/Makefile
+1-1science/orthanc-webviewer/Makefile
+1-1science/orthanc-postgresql/Makefile
+1-1science/orthanc-mysql/Makefile
+1-1science/orthanc-dicomweb/Makefile
+1-1devel/mongo-cxx-driver/Makefile
+6-62 files not shown
+8-88 files

FreeBSD/ports d076190 — deskutils/fet distinfo Makefile

deskutils/fet: Update to 7.12.0

The *.qm files don't shipped so should build them.

Changelogs: https://lalescu.ro/liviu/fet/news.html
DeltaFile
+3-3deskutils/fet/distinfo
+3-3deskutils/fet/Makefile
+6-62 files

FreeBSD/ports 2e177fb — editors/vscode Makefile, net-im/teams Makefile

*/*: Bump port revision after electron43 update (4297da69480c)
DeltaFile
+1-1textproc/obsidian/Makefile
+1-1net-im/teams/Makefile
+1-1editors/vscode/Makefile
+3-33 files

FreeBSD/ports 4297da6 — devel/electron43 distinfo, devel/electron43/files patch-electron_spec_api-web-contents.spec.ts patch-electron_spec_api-content-tracing.spec.ts

devel/electron43: Update to 43.7.11

Changelog:
- https://github.com/electron/electron/releases/tag/v43.7.10
- https://github.com/electron/electron/releases/tag/v43.7.11

Reported by:    GitHub (watch releases)
DeltaFile
+33-24devel/electron43/files/patch-electron_spec_api-app.spec.ts
+13-13devel/electron43/files/patch-electron_spec_api-browser-window.spec.ts
+7-7devel/electron43/files/patch-electron_spec_api-content-tracing.spec.ts
+7-7devel/electron43/files/patch-electron_BUILD.gn
+7-7devel/electron43/distinfo
+5-5devel/electron43/files/patch-electron_spec_api-web-contents.spec.ts
+72-639 files not shown
+94-8215 files

FreeBSD/ports 6e9fe8c — textproc/py-zensical Makefile distinfo

textproc/py-zensical: Update to 0.0.70

Approved by:    kai (maintainer via email)
DeltaFile
+3-3textproc/py-zensical/distinfo
+1-2textproc/py-zensical/Makefile
+4-52 files

FreeBSD/ports 6ec2c7e — print/cups Makefile distinfo

print/cups: Fix build with AVAHI option disabled

PR:             299342
Reported by:    vvd

(cherry picked from commit 3c361bc0461b5f269173c7998fc09ac6d435ed7c)
DeltaFile
+3-1print/cups/distinfo
+3-0print/cups/Makefile
+6-12 files

FreeBSD/ports 88dd83c — print/cups Makefile distinfo

print/cups: Update to 2.4.20

PR:             299342
(cherry picked from commit 23eee321bb5a4bcb713fc57ac7affbaff7ef70ea)
DeltaFile
+3-3print/cups/distinfo
+1-2print/cups/Makefile
+4-52 files

FreeBSD/ports 7893aea — www/nginx-module-cache-purge Makefile distinfo

www/nginx-module-cache-purge: Update to 3.0.4

Fixes a symlink traversal during cache tree traversal: an attacker able to
create symbolic links inside the cache directory could make a purge delete
arbitrary files the worker can reach (CVE-2026-108981).

https://github.com/nginx-modules/ngx_cache_purge/releases/tag/3.0.4

Security:       CVE-2026-108981
Sponsored by:   Netzkommune GmbH

(cherry picked from commit 225227080d2216b2f5ea3d331ad203ed41937520)
DeltaFile
+3-3www/nginx-module-cache-purge/distinfo
+1-1www/nginx-module-cache-purge/Makefile
+4-42 files

FreeBSD/ports 4d9365e — security/vuxml/vuln 2026.xml

security/vuxml: Document ngx_cache_purge vulnerability

Sponsored by:   Netzkommune GmbH
DeltaFile
+32-0security/vuxml/vuln/2026.xml
+32-01 files

FreeBSD/ports fc9a445 — www/freenginx Makefile, www/nginx Makefile

www/{nginx,nginx-devel,freenginx}: Bump PORTREVISION for the module updates

The cache_purge, njs and lua modules are built into these ports, and a
BUILD_DEPENDS does not rebuild them by itself.

Sponsored by:   Netzkommune GmbH
DeltaFile
+1-1www/freenginx/Makefile
+1-0www/nginx/Makefile
+1-0www/nginx-devel/Makefile
+3-13 files

FreeBSD/ports 688221f — www/nginx-module-njs pkg-plist Makefile, www/nginx-module-njs/files patch-src_njs__object.c patch-src_njs__value.c

www/nginx-module-njs: Update to 1.0.2

Fixes memory corruption in RegExp operations, crashes after a failed
module compilation, and excessive resource usage when sorting huge sparse
arrays.

Both local patches are gone: njs 1.0.2 carries the indexed fast path fix
for exotic objects itself.

Sponsored by:   Netzkommune GmbH
DeltaFile
+0-24www/nginx-module-njs/files/patch-src_njs__value.c
+0-11www/nginx-module-njs/files/patch-src_njs__object.c
+3-3www/nginx-module-njs/distinfo
+1-2www/nginx-module-njs/Makefile
+2-0www/nginx-module-njs/pkg-plist
+6-405 files

FreeBSD/ports 67b99bc — www/nginx-module-lua Makefile pkg-plist, www/nginx-module-lua/files patch-src_ngx__http__lua__ssl__client__helloby.c patch-src_ngx__http__lua__subrequest.c

www/nginx-module-lua: Update to 0.10.31

Two stable releases at once, 0.10.29 is from 2025.

All three local patches are gone: 0.10.31 guards the freenginx cases
upstream, in the client hello handler, in the subrequest start time and in
ngx_http_lua_time.

Sponsored by:   Netzkommune GmbH
DeltaFile
+0-19www/nginx-module-lua/files/patch-src_ngx__http__lua__time.c
+0-16www/nginx-module-lua/files/patch-src_ngx__http__lua__subrequest.c
+0-11www/nginx-module-lua/files/patch-src_ngx__http__lua__ssl__client__helloby.c
+3-3www/nginx-module-lua/distinfo
+4-0www/nginx-module-lua/pkg-plist
+1-2www/nginx-module-lua/Makefile
+8-516 files

FreeBSD/ports 2252270 — www/nginx-module-cache-purge Makefile distinfo

www/nginx-module-cache-purge: Update to 3.0.4

Fixes a symlink traversal during cache tree traversal: an attacker able to
create symbolic links inside the cache directory could make a purge delete
arbitrary files the worker can reach (CVE-2026-108981).

https://github.com/nginx-modules/ngx_cache_purge/releases/tag/3.0.4

Security:       CVE-2026-108981
Sponsored by:   Netzkommune GmbH
DeltaFile
+3-3www/nginx-module-cache-purge/distinfo
+1-1www/nginx-module-cache-purge/Makefile
+4-42 files

FreeBSD/ports e4127f0 — emulators/ares Makefile

emulators/ares: Bump PORTREVISION after librashader update

PR:             299328
Approved by:    osa, vvd (Mentors, implicit)
DeltaFile
+1-1emulators/ares/Makefile
+1-11 files

FreeBSD/ports 2435a0d — devel/librashader Makefile distinfo

devel/librashader: Update 0.12.0 => 0.12.1

Changelog:
https://github.com/SnowflakePowered/librashader/releases/tag/librashader-v0.12.1

PR:             299328
Approved by:    osa, vvd (Mentors, implicit)
DeltaFile
+3-3devel/librashader/distinfo
+1-2devel/librashader/Makefile
+4-52 files

FreeBSD/ports b2d5666 — graphics/photocraft Makefile distinfo

graphics/photocraft: update to 0.9.0

Changelog:      https://github.com/storytold/photocraft/releases/tag/v0.9.0
DeltaFile
+211-3graphics/photocraft/distinfo
+106-3graphics/photocraft/Makefile
+317-62 files

FreeBSD/ports 9377490 — chinese/gcin Makefile, chinese/gcin/files patch-configure patch-tsa2d32.cpp

chinese/gcin: fix build on powerpc64*

Build with -fsigned-char: the phrase tables flag mixed-case English
words with a negative length stored in plain char. Also fix the hash
index of 1-byte keys in tsa2d32 on big-endian.
DeltaFile
+12-0chinese/gcin/files/patch-tsa2d32.cpp
+9-0chinese/gcin/files/patch-configure
+0-2chinese/gcin/Makefile
+21-23 files