BSD Commit Log Search

games/xtxf: Change to zig015

PR:             295207
Approved by:    maintainer
Approved by:    arrowd (co-mentor)

textproc/CLDR: update to 48.2

net/samba423: Bump PORTREVISION

PR:     295130
Approved by:    samba (kiwi)
Sponsored by:   Klara, Inc.

net/haproxy24: update to version 2.4.35.

net/haproxy26: update to version 2.6.29

net/haproxy28: update to version 2.8.24.

net/haproxy30: update to version 3.0.23.

net/haproxy33: update to version 3.3.10

net/haproxy: update to version 3.2.19.

graphics/xviewer: update to 3.4.16

- explicitly define USE_GNOME=gdkpixbuf2xlib to match Linux Mint
  packaging
- include upstream commit for GIRepository-2.0 compatibility,
  especially after devel/libpeas1 update

PR: 292771

devel/libpeas1: bump LIB_DEPENDS consumers after ABI break update

devel/libpeas1: update to 1.38.1

Changelog: https://gitlab.gnome.org/GNOME/libpeas/-/blob/libpeas-1.38.1/NEWS

Most notably, breaks ABI to support GIRepository-2.0, along with
higher glib version requirement (2.85/2.86). All consumers to be
bumped.

x11-fm/sushi: update to 50.0

Update to 50.0

  50.0
  ====

  - Fix a typo (Danial Behzadi)
  - Translation updates

Switch to USES= gettext-tools

Rewrite COMMENT and pkg-descr

Adjust dependencies

PR:             294997

x11/py-nwg-displays: Update to 0.4.2

Changelog: https://github.com/nwg-piotr/nwg-displays/releases/tag/v0.4.2

Reported by:    GitHub (watch releases)

devel/py-ty: Update to 0.0.35

Changelog: https://github.com/astral-sh/ty/blob/0.0.35/CHANGELOG.md

Reported by:    GitHub (watch releases)

net/samba423: Fix SIGABRT in bsd_attr_list()

After FORTIFY_SOURCE was added for https://bugzilla.samba.org/show_bug.cgi?id=16040, which landed in Samba 4.23.7, the net/samba423 port started crashing quite soon after startup.

It turns out that bsd_attr_list() does a number of overlapping strncpy() calls, and this is undefined behavior.

PR:     295130
Approved by:    samba (kiwi)
Sponsored by:   Klara, Inc.

misc/crush: Update to 0.67.0

Changelog: https://github.com/charmbracelet/crush/releases/tag/v0.67.0

Reported by:    GitHub (watch releases)

sysutils/py-croniter: Fix build.

PR:             295195
Approved by:    skreuzer@ (maintainer)

devel/cargo-c: update to 0.10.22

Changes: https://github.com/lu-zero/cargo-c/releases/tag/v0.10.22

www/waterfox: native DNS HTTPS resolving

This enables the geckos to use the OS' resolver to resolve
DNS HTTPS RRs (see RFC 9460 https://www.rfc-editor.org/rfc/rfc9460
for specs on that)

PR:             295188
Sponsored by:   UNIS Labs
MFH:            2026Q2

(cherry picked from commit c43948c764157afaebeb539389c279ba6d3b5128)

www/librewolf: native DNS HTTPS resolving

This enables the geckos to use the OS' resolver to resolve
DNS HTTPS RRs (see RFC 9460 https://www.rfc-editor.org/rfc/rfc9460
for specs on that)

PR:             295187
Sponsored by:   UNIS Labs
MFH:            2026Q2

(cherry picked from commit 5328dc34befa51e1dbe5767897daab1b135ef0a6)

www/librewolf: native DNS HTTPS resolving

This enables the geckos to use the OS' resolver to resolve
DNS HTTPS RRs (see RFC 9460 https://www.rfc-editor.org/rfc/rfc9460
for specs on that)

PR:             295188
Sponsored by:   UNIS Labs
MFH:            2026Q2

www/librewolf: native DNS HTTPS resolving

This enables the geckos to use the OS' resolver to resolve
DNS HTTPS RRs (see RFC 9460 https://www.rfc-editor.org/rfc/rfc9460
for specs on that)

PR:             295187
Sponsored by:   UNIS Labs
MFH:            2026Q2

*/*: Bump port revision after electron41 update (573fa89ba24b)

devel/electron41: Update to 41.5.1

Changelog: https://github.com/electron/electron/releases/tag/v41.5.1

Reported by:    GitHub (watch releases)

x11-fonts/py-QtAwesome: update to 1.4.2.

textproc/expat2: [security] upgrade to 2.8.1

See https://blog.hartwork.org/posts/expat-2-8-1-released/

Fixes:  CVE-2026-45186 and CVSS unreliability
Security:       CVE-2026-45186

MFC after:      1 day

PR:             295206
Approved by:    vishwin

security/vuxml: adding an entry for expat

See https://blog.hartwork.org/posts/expat-2-8-1-released/
and https://nvd.nist.gov/vuln/detail/CVE-2026-45186

Security:       CVE-2026-45186

dns/dnsmasq: Update 2.92 => 2.92rel2 (6 CVEs)

Including privilege escalation, cache poisoning/rediction, information
leak, and denial of service.

See https://www.kb.cert.org/vuls/id/471747
See https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2026q2/018471.html

PR:             295204
Security:       eeb4d69a-4d74-11f1-9a9c-994b98c88011
Security:       CVE-2026-2291
Security:       CVE-2026-4890
Security:       CVE-2026-4891
Security:       CVE-2026-4892
Security:       CVE-2026-4893
Security:       CVE-2026-5172
Sponsored by:   UNIS Labs
MFH:            2026Q2

(cherry picked from commit b8a4de5ca6ca9d2607d14894dacc9e24852bac50)

dns/dnsmasq: Update 2.92 => 2.92rel2 (6 CVEs)

Including privilege escalation, cache poisoning/rediction, information
leak, and denial of service.

See https://www.kb.cert.org/vuls/id/471747
See https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2026q2/018471.html

PR:             295204
Security:       eeb4d69a-4d74-11f1-9a9c-994b98c88011
Security:       CVE-2026-2291
Security:       CVE-2026-4890
Security:       CVE-2026-4891
Security:       CVE-2026-4892
Security:       CVE-2026-4893
Security:       CVE-2026-5172
Sponsored by:   UNIS Labs
MFH:            2026Q2