BSD Commit Log Search

textproc/krep: Update 3.0.2 => 3.1.0

games/veloren-weekly: update to s20260915

Changes:        https://gitlab.com/veloren/veloren/-/compare/b2bf67917f...86808a45a4
(cherry picked from commit ec7e657f0cba93d46113ff0bb25e4f730fcff05c)

graphics/mesa-devel: update to 26.2.b.3482

Changes:        https://gitlab.freedesktop.org/mesa/mesa/-/compare/0ba4b08edc6...a6bb6e52b7c

games/veloren-weekly: update to s20260915

Changes:        https://gitlab.com/veloren/veloren/-/compare/b2bf67917f...86808a45a4

multimedia/vmaf: update to 3.2.1

Changes:        https://github.com/Netflix/vmaf/releases/tag/v3.2.1
Reported by:    GitHub (watch releases)

www/gallery-dl: update to 1.32.12

Changes:        https://github.com/mikf/gallery-dl/releases/tag/v1.32.12
Reported by:    GitHub (watch releases)

deskutils/tatuin: Update 0.26.0 => 0.27.0

emulators/virtualbox-ose-*72: Update 7.2.16 => 7.2.18 (19 CVEs)

Changelog:
https://www.virtualbox.org/wiki/Changelog-7.2#v18

Oracle Critical Security Patch Update Advisory - September 2026:
https://www.oracle.com/security-alerts/cspusep2026.html#AppendixOVIR

Sponsored by:   UNIS Labs
Security:       CVE-2026-87273
Security:       CVE-2026-87268
Security:       CVE-2026-87269
Security:       CVE-2026-87270
Security:       CVE-2026-87271
Security:       CVE-2026-87272
Security:       CVE-2026-87276
Security:       CVE-2026-87277
Security:       CVE-2026-87278
Security:       CVE-2026-87279

    [12 lines not shown]

emulators/virtualbox-ose-*72: Update 7.2.16 => 7.2.18 (19 CVEs)

Changelog:
https://www.virtualbox.org/wiki/Changelog-7.2#v18

Oracle Critical Security Patch Update Advisory - September 2026:
https://www.oracle.com/security-alerts/cspusep2026.html#AppendixOVIR

Sponsored by:   UNIS Labs
Security:       CVE-2026-87273
Security:       CVE-2026-87268
Security:       CVE-2026-87269
Security:       CVE-2026-87270
Security:       CVE-2026-87271
Security:       CVE-2026-87272
Security:       CVE-2026-87276
Security:       CVE-2026-87277
Security:       CVE-2026-87278
Security:       CVE-2026-87279

    [10 lines not shown]

devel/sentry-cli: Update to 3.8.0

Changelog: https://github.com/getsentry/sentry-cli/blob/3.8.0/CHANGELOG.md

Reported by:    GitHub (watch releases)

misc/crush: Update to 0.95.0

Changelog: https://github.com/charmbracelet/crush/releases/tag/v0.95.0

Reported by:    GitHub (watch releases)

security/vuxml: Document vulnerabilities in net/traefik

security/vuxml: Document vulnerabilities in multimedia/mkvtoolnix

graphics/hyprland-protocols: Update to 0.7.1

Changelog: https://github.com/hyprwm/hyprland-protocols/releases/tag/v0.7.1

Reported by:    GitHub (watch releases)

net-mgmt/nagios-pf-plugin: fix build on FreeBSD 15+

PR:             294009
Approved by:    maintainer timeout (never replied)
MFH:            2026Q3

(cherry picked from commit 9eddf7dd87dfa63edde409b82273742b00b1344a)

net-mgmt/nagios-pf-plugin: fix build on FreeBSD 15+

PR:             294009
Approved by:    maintainer timeout (never replied)
MFH:            2026Q3

audio/shairport-sync: Update to 5.5.2

audio/noctavox: Update to 0.3.5

ChangeLog:

1. https://github.com/Jaxx497/NoctaVox/releases/tag/v0.3.5

Reported by:    "github-actions[bot]" <notifications at github.com>

multimedia/mkvtoolnix: Update to upstream release 102.0

Details:
Bug- and security fixes, see
https://mkvtoolnix.download/doc/NEWS.md

MFH:            2026Q3
Security:       CVE-2026-90783

net/traefik: Update to upstream release 3.7.13

Details:
* Bug- and security fixes, see
  https://github.com/traefik/traefik/releases/tag/v3.7.13
* Changes may require updating the configuration, see
  https://doc.traefik.io/traefik/v3.7/migrate/v3/#v3713

MFH:            2026Q3
Security:       https://github.com/traefik/traefik/security/advisories/GHSA-qqjf-53cj-pwvv
                https://github.com/traefik/traefik/security/advisories/GHSA-f52w-8j3h-j724
                https://github.com/traefik/traefik/security/advisories/GHSA-v67p-phpq-fc8x
                https://github.com/traefik/traefik/security/advisories/GHSA-w4v4-9rw7-5326
                https://github.com/traefik/traefik/security/advisories/GHSA-8fcf-v89g-xpg6

math/octave-forge-statistics: Update to 1.9.3.

devel/Makefile: add missing py-opengrok-tools

Reported by:    rcm at rcm.sh
Fixes:          789a6e9d868a

math/R-cran-combinat: Update 0.0-8 => 0.0-9

While here, populate pkg-descr.

Commit log:
https://github.com/cran/combinat/compare/0.0-8...0.0-9

PR:             298551
Approved by:    no maintainer
Approved by:    osa, vvd (Mentors, implicit)

sysutils/edk2: fix network boot on bhyve

NetworkPkg's DxeNetLib needs EFI_RNG_PROTOCOL, and the Bhyve build's
only producer is VirtioRngDxe, which never binds since bhyve has no
virtio-rng device. RngDxe uses RDRAND instead and needs no device.
TcpDxe depexes gEfiHash2ServiceBindingProtocolGuid, so add
Hash2DxeCrypto too; without TcpDxe there is no HttpServiceBinding.
Also enable HTTP boot.

This recommits 3fcead9dc69a ("sysutils/edk2: fix network boot on bhyve"),
which also contained three unrelated patch files.

PR:             298499
Approved by:    manu
Sponsored by:   Netflix

Revert "sysutils/edk2: fix network boot on bhyve"

This reverts commit 3fcead9dc69a1fb01bf4200ce3b079e942b57f39.

Wrongly added non-related files to previous commit.

security/debian-keyring: Update 2026.06.27 → 2026.08.27

Changelog:
https://salsa.debian.org/debian-keyring/keyring/-/raw/2026.08.27/debian/changelog

PR:             298552
Approved by:    osa, vvd (Mentors, implicit)

Mk: fix checksum when makesum is defined

Fixes regression from 076687302bffe156fb9b379c2eb622f0ac2e711e

Reported by:    eduardo

net-p2p/{lib,r}torrent: Update to 0.16.23

This release includes various bugfixes and minor improvements as part of
a stable series of releases.

ChangeLog:      https://github.com/rakshasa/rtorrent/releases/tag/v0.16.23
MFH:            2026Q3
(cherry picked from commit 2bab20852d1715a94be81dcd2aca69bcb12e8bc0)

dns/bind9-devel: update to 9.21.26

Changes:        https://downloads.isc.org/isc/bind9/9.21.26/doc/arm/html/notes.html
Security:       CVE-2026-19668 CVE-2026-19033 CVE-2026-77119
                CVE-2026-19941 CVE-2026-19666 CVE-2026-19667
                CVE-2026-75029 CVE-2026-77692 CVE-2026-81736
                CVE-2026-76163 CVE-2026-78301 CVE-2026-80274
                CVE-2026-81563
(cherry picked from commit 076689801fdaf575584e21649ea04f2cdd2892d9)

sysutils/edk2: fix network boot on bhyve

NetworkPkg's DxeNetLib needs EFI_RNG_PROTOCOL, and the Bhyve build's
only producer is VirtioRngDxe, which never binds since bhyve has no
virtio-rng device. RngDxe uses RDRAND instead and needs no device.
TcpDxe depexes gEfiHash2ServiceBindingProtocolGuid, so add
Hash2DxeCrypto too; without TcpDxe there is no HttpServiceBinding.
Also enable HTTP boot.

PR:             298499
Approved by:    manu
Sponsored by:   Netflix