BSD Commit Log Search

devel/libdbusmenu-lxqt: Add missing dependency

PR:             300650
Reported by:    Dean E. Weimer <dweimer __at_ dweimer.net>

devel/liblxqt: Update to 2.5.0

PR:             300653
Reported by:    Dean E. Weimer <dweimer __at__ dweimer.net>

security/krb5-devel: update to the latest MIT/KRB5 github commit

(cherry picked from commit 6f1b113b45ea1b78b5a379b5b33ffd3234750b03)

security/krb5-122: Update to 1.22.3

This is a bug fix release, with a focus on security issues discovered
with the aid of large language models.  See
https://web.mit.edu/kerberos/advisories/MITKRB5-SA-2026-001.txt for
information on the risks of continuing to use unpatched releases.

* Fix a logic error when checking PAC server checksums
   [CVE-2026-111423].

* Check for unkeyed checksums when validating CAMMAC verifiers
   [CVE-2026-71199].

* Fix a loophole in the KDC's client authdata filtering which could
   allow clients to include fake PAC and CAMMAC authdata values when
   requesting service tickets.  These fake values would be rejected by
   application servers, were it not for the two bugs noted above.

* Check for the lockdown_keys attribute when processing password

    [46 lines not shown]

security/krb5-devel: update to the latest MIT/KRB5 github commit

security/vuxml: Add www/newsboat vulnerability

PR:             300655
Approved by:    osa, vvd (mentors, implicit)

www/newsboat: Security update 2.45 => 2.45.1

Changelog:
https://github.com/newsboat/newsboat/releases/tag/r2.45.1

Commit log:
https://github.com/newsboat/newsboat/compare/r2.45...r2.45.1

PR:             300655
Approved by:    Marko Turk <mt-bugs at markoturk.info> (maintainer)
Approved by:    osa, vvd (mentors, implicit)
Security:       GHSA-78q5-mpjq-5q34
MFH:            2026Q4

(cherry picked from commit e198820f97bf10eb36af5cffcf472df186cb48e1)

www/newsboat: Security update 2.45 => 2.45.1

Changelog:
https://github.com/newsboat/newsboat/releases/tag/r2.45.1

Commit log:
https://github.com/newsboat/newsboat/compare/r2.45...r2.45.1

PR:             300655
Approved by:    Marko Turk <mt-bugs at markoturk.info> (maintainer)
Approved by:    osa, vvd (mentors, implicit)
Security:       GHSA-78q5-mpjq-5q34
MFH:            2026Q4

KDE: Update KDE Plasma to 6.8.3

Announcements: https://kde.org/announcements/plasma/6/6.8.3

deskutils/kaichat: Add new port

Chat interface for AI models such as ollama.

WWW: https://apps.kde.org/kaichat

sysutils/logstash8: Update 8.19.24 => 8.19.25

Changelog:
https://www.elastic.co/guide/en/logstash/8.19/logstash-8-19-25.html
https://github.com/elastic/logstash/releases/tag/v8.19.25

Approved by:    elastic (implicit, inactive)
Sponsored by:   UNIS Labs
MFH:            2026Q4

(cherry picked from commit c3f0ce9d78cc705e6ab5c199907ecadb3543f871)

sysutils/beats8: Update 8.19.24 => 8.19.25

Changelog:
https://www.elastic.co/guide/en/beats/libbeat/current/release-notes-8.19.25.html
https://github.com/elastic/beats/releases/tag/v8.19.25

Approved by:    elastic (implicit, inactive)
Sponsored by:   UNIS Labs
MFH:            2026Q4

(cherry picked from commit e00bb9a590a34e5512d6c5e7992593776aeaa968)

textproc/kibana8: Update 8.19.24 => 8.19.25

Changelog:
https://www.elastic.co/guide/en/kibana/8.19/release-notes-8.19.25.html

Approved by:    elastic (implicit, inactive)
Sponsored by:   UNIS Labs
MFH:            2026Q4

(cherry picked from commit c7d7398f9c1e068f1412aa578890523f65e25d61)

textproc/elasticsearch8: Update 8.19.24 => 8.19.25

Changelog:
https://www.elastic.co/guide/en/elasticsearch/reference/8.19/release-notes-8.19.25.html

Approved by:    elastic (implicit, inactive)
Sponsored by:   UNIS Labs
MFH:            2026Q4

(cherry picked from commit 2c333c7aa3f37a506a98a70e065da03d4fcabbe4)

textproc/elasticsearch8: Improving adherence to the coding style in the patches

PR:             290954
Approved by:    elastic (implicit, inactive)
Sponsored by:   UNIS Labs

(cherry picked from commit 64c5b3e8ca14e6cd0aa04b31ecd5dd01f331469d)

sysutils/logstash8: Update 8.19.24 => 8.19.25

Changelog:
https://www.elastic.co/guide/en/logstash/8.19/logstash-8-19-25.html
https://github.com/elastic/logstash/releases/tag/v8.19.25

Approved by:    elastic (implicit, inactive)
Sponsored by:   UNIS Labs
MFH:            2026Q4

sysutils/beats8: Update 8.19.24 => 8.19.25

Changelog:
https://www.elastic.co/guide/en/beats/libbeat/current/release-notes-8.19.25.html
https://github.com/elastic/beats/releases/tag/v8.19.25

Approved by:    elastic (implicit, inactive)
Sponsored by:   UNIS Labs
MFH:            2026Q4

textproc/kibana8: Update 8.19.24 => 8.19.25

Changelog:
https://www.elastic.co/guide/en/kibana/8.19/release-notes-8.19.25.html

Approved by:    elastic (implicit, inactive)
Sponsored by:   UNIS Labs
MFH:            2026Q4

textproc/elasticsearch8: Update 8.19.24 => 8.19.25

Changelog:
https://www.elastic.co/guide/en/elasticsearch/reference/8.19/release-notes-8.19.25.html

Approved by:    elastic (implicit, inactive)
Sponsored by:   UNIS Labs
MFH:            2026Q4

emulators/libmt32emu: Update 2.8.5 => 2.8.6

This release contains fixes and improvements for the floating point
audio renderer and exposes an option to specify its performance level.
The port defaults to upstream's default value "Fast".

Changelog:
https://github.com/munt/munt/blob/libmt32emu_2_8_6/mt32emu/NEWS.txt

PR:             300657
Approved by:    osa, vvd (mentors, implicit)
MFH:            2026Q4

(cherry picked from commit 56230ee8a26f741f9118f9c0eb9788b038e3bb8e)

emulators/libmt32emu: Update 2.8.5 => 2.8.6

This release contains fixes and improvements for the floating point
audio renderer and exposes an option to specify its performance level.
The port defaults to upstream's default value "Fast".

Changelog:
https://github.com/munt/munt/blob/libmt32emu_2_8_6/mt32emu/NEWS.txt

PR:             300657
Approved by:    osa, vvd (mentors, implicit)
MFH:            2026Q4

mail/hydroxide: Restrict PORTSCOUT to 0.2.x range

Since portscout falsely detected a version for another
project that is something like "v1.5.2-proton".

Approved by:    osa, vvd (mentors, implicit)

net-im/iamb: update 0.0.12 -> 0.13.1

Changelog:
https://github.com/ulyssa/iamb/releases/tag/v0.0.13
https://github.com/ulyssa/iab/releases/tag/v0.13.1

Commitlog:
https://github.com/ulyssa/iamb/compare/v0.0.12...v0.13.1

PR:           300646

www/linux-freetube: Update to 0.26.0.b

- Pet portfmt

ChangeLog:

1. https://github.com/FreeTubeApp/FreeTube/releases/tag/v0.26.0-beta

Reported by:    "efb4f5ff-1298-471a-8973-3d47447115dc" <notifications at github.com>

security/vuxml: Document p5-Furl memory exhaustion vulnerability

www/p5-Furl: update 3.14 -> 3.16

Changelog: https://metacpan.org/dist/Furl/changes

Also fix tests.

Security:       CVE-2026-65059

security/vuxml: Document p5-HTTP-Body multiple vulnerabilities

www/p5-HTTP-Body: update 1.24 -> 1.25

Changelog: https://metacpan.org/dist/HTTP-Body/changes

Security:       CVE-2026-117500
Security:       CVE-2026-117501
Security:       CVE-2026-121006

converters/p5-Sereal: update 6.003 -> 7.001

Changelog: https://metacpan.org/dist/Sereal/changes

converters/p5-Sereal-Decoder: update 6.003 -> 7.001

Changelog: https://metacpan.org/dist/Sereal-Decoder/changes