BSD Commit Log Search

security/vuxml: Document xrdp RCE vulnerability

Security:       https://www.cve.org/CVERecord?id=CVE-2025-68670
Security:       https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-rwvg-gp87-gh6f

x11-drivers/xorgxrdp: Update to 0.15.0

Changes:        https://github.com/neutrinolabs/xorgxrdp/releases/tag/v0.10.5

net/xrdp: Update to 0.10.5

Security:       CVE-2025-68670
Security:       https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-rwvg-gp87-gh6f
Changes:        https://github.com/neutrinolabs/xrdp/releases/tag/v0.10.5

sysutils/gitwatch: Update version 0.4=>0.5

Changelog: https://github.com/gitwatch/gitwatch/releases/tag/v0.5

databases/mroonga: Update version 15.04=>15.05

Changelog: https://mroonga.org/docs/news/15.html#release-15-05

sysutils/dar: Update version 2.8.2=>2.8.3

Changelog: https://github.com/Edrusb/DAR/releases/tag/v2.8.3

security/go-tuf: Update version 2.4.0=>2.4.1

Changelog: https://github.com/theupdateframework/go-tuf/releases/tag/v2.4.1

devel/gsoap: Update version 2.8.139=>2.8.140

Changelog: https://www.genivia.com/changelog.html#latest

net/google-cloud-sdk: Update version 553.0.0=>554.0.0

devel/grpc-gateway: Update version 2.27.5=>2.27.6

Changelog: https://github.com/grpc-ecosystem/grpc-gateway/releases/tag/v2.27.6

databases/freetds-devel: Update version 1.5.237=>1.5.239

devel/cirrus-cli: Update version 0.160.0=>0.161.0

Changelog: https://github.com/cirruslabs/cirrus-cli/releases/tag/v0.161.0

multimedia/bcmatroska2: Fix regression in linphone

bcmatroska2 port commented out some part of the code by the patch. But when
net/mediastreamer was built, it turned out that that part was needed.

PR:             291967

net/haproxy33: update to version 3.3.2.

net/haproxy30: update to version 3.0.15.

net/haproxy: update to version 3.2.11.

net/haproxy: fix config test for TCP DNS resolvers

PR:     292815
Submitted by:   Frank Wall <freebsd at moov.de>

astro/wcslib: Update to 8.5

www/{,py-}yt-dlp: update 2025.11.12 → 2026.01.29

deskutils/skim: update 1.11.0 → 1.11.2

Reported by:    portscout

databases/duckdb: Add options for extension mysql and postgres

Unfortunately both fail to build at the moment.

sysutils/xcp: update 0.24.2 → 0.24.3

Reported by:    portscout

net/openldap26-server: upgrade to 2.6.12.

lang/dotnet: Update to 9.0.12

lang/dotnet-host: Update to 9.0.12

math/R-cran-mnormt: Update to 2.1.2

Switch WWW to canonical form.

Changelog: https://cran.r-project.org/web/packages/mnormt/news.html

textproc/television: Update to 0.15.0

Changelog:
https://github.com/alexpasmantier/television/releases/tag/0.15.0

dns/dnsmasq-devel: update to v2.93test2

Changes: (notably --log-malloc)

* ed2ba5b 2026-01-26 | Optimise TCP send. (HEAD -> master, tag: v2.93test2, origin/master, origin/HEAD) [Simon Kelley]
* 729c16a 2026-01-26 | Rationalise DNS TCP buffer use. [Simon Kelley]
* 80acb76 2026-01-24 | Don't start malloc() logging until the log system is configured. [Simon Kelley]
* f1fa05d 2026-01-24 | Don't log free(NULL) calls. [Simon Kelley]
* b148ba4 2026-01-24 | Add --log-malloc debugging option. [Simon Kelley]
* 81f6196 2026-01-24 | Fix memory allocation in blockdata_retrieve() [Simon Kelley]
* cb32170 2026-01-18 | Fix DNSSEC fail with CNAME replies to DS queries. (tag: v2.93test1) [Simon Kelley]
* 8eb3684 2026-01-18 | Log SERVFAIL from usptream servers. [Simon Kelley]
* 8fa68a6 2025-12-19 | The only_failed argument has been added to the log-queries parameter. [Pavel Bozhko]
* 1269f07 2026-01-15 | Fix DNSSEC failure with spurious RRSIGs. [Simon Kelley]
* e1faf70 2026-01-14 | Support Inotify in FreeBSD. [Matthias Andree]
* f603a4f 2026-01-12 | Fix a corner-case in DNSSEC validation with wildcards. [Simon Kelley]
* c090f1d 2025-12-06 | Terminate TCP child processes that arise from UDP truncated replies. [Simon Kelley]
* fa48bdb 2025-12-05 | Tidy up code in in do_tcp_connection() which filters incoming connections. [Simon Kelley]

(cherry picked from commit 81dfe97b7966b99cc0d605a952d3f8a88edc6d16)

dns/dnsmasq-devel: update to v2.93test2

Changes: (notably --log-malloc)

* ed2ba5b 2026-01-26 | Optimise TCP send. (HEAD -> master, tag: v2.93test2, origin/master, origin/HEAD) [Simon Kelley]
* 729c16a 2026-01-26 | Rationalise DNS TCP buffer use. [Simon Kelley]
* 80acb76 2026-01-24 | Don't start malloc() logging until the log system is configured. [Simon Kelley]
* f1fa05d 2026-01-24 | Don't log free(NULL) calls. [Simon Kelley]
* b148ba4 2026-01-24 | Add --log-malloc debugging option. [Simon Kelley]
* 81f6196 2026-01-24 | Fix memory allocation in blockdata_retrieve() [Simon Kelley]
* cb32170 2026-01-18 | Fix DNSSEC fail with CNAME replies to DS queries. (tag: v2.93test1) [Simon Kelley]
* 8eb3684 2026-01-18 | Log SERVFAIL from usptream servers. [Simon Kelley]
* 8fa68a6 2025-12-19 | The only_failed argument has been added to the log-queries parameter. [Pavel Bozhko]
* 1269f07 2026-01-15 | Fix DNSSEC failure with spurious RRSIGs. [Simon Kelley]
* e1faf70 2026-01-14 | Support Inotify in FreeBSD. [Matthias Andree]
* f603a4f 2026-01-12 | Fix a corner-case in DNSSEC validation with wildcards. [Simon Kelley]
* c090f1d 2025-12-06 | Terminate TCP child processes that arise from UDP truncated replies. [Simon Kelley]
* fa48bdb 2025-12-05 | Tidy up code in in do_tcp_connection() which filters incoming connections. [Simon Kelley]

devel/py-rtree: Fix build