BSD Commit Log Search

finance/p5-Finance-Quote: 1.68

Crucially, this revision fixes throttling by AlphaVantage.

https://metacpan.org/dist/Finance-Quote/changes

PR:             292417
Approved by:    sunpoet (maintainer timeout)

security/kanidm: Update to 1.10.0

* OpenSSL is no longer required as a dependency. All cryptographic paths
  have been replaced by RustCrypto or Rustls using aws-lc-rs

ChangeLog: https://github.com/kanidm/kanidm/releases/tag/v1.10.0

Approved by:    bofh@ (implicit)

sysutils/amazon-ssm-plugin: Update to 1.2.814.0

ChangeLog:      https://github.com/aws/session-manager-plugin/releases/tag/1.2.814.0
Approved by:    hrs (mentor, blanket)

net/geoclue: update to 2.8.1

PR:             294928

devel/libgsf: Enable testing

devel/libgsf: update to 1.14.58

PR:             294910

net/liferea: update to 1.16.9

Release Notes:
  https://github.com/lwindolf/liferea/releases/tag/v1.16.9

net-mgmt/check_ssl_cert: update to 2.99.0

Release Notes:
  https://github.com/matteocorti/check_ssl_cert/releases/tag/v2.99.0

textproc/gojq: Update to 0.12.19

Changelog:      https://github.com/itchyny/gojq/releases/tag/v0.12.19
Approved by:    hrs (mentor, blanket)

sysutils/usacloud: Update to 1.22.1

ChangeLogs:     https://github.com/sacloud/usacloud/releases/tag/v1.22.1
Approved by:    hrs (mentor, blanket)

devel/ruby-build: Update to 20260501

Changes:        https://github.com/rbenv/ruby-build/releases/tag/v20260501
(cherry picked from commit 591e27396e41ab5af13d064d5fce350f6611482a)

devel/ruby-build: Update to 20260501

Changes:        https://github.com/rbenv/ruby-build/releases/tag/v20260501

*: Reset MAINTAINER of Andreas Bilke's ports per his request

Thank you for your work

Reference:      https://lists.freebsd.org/archives/freebsd-ports/2026-May/009427.html

ports-mgmt/rc-subr-jail: Update to 6

Changes:
- Wait for jail PIDs
- Force unmount devfs in jail_kill()

x11/hyprpaper: Update to 0.8.4

Changelog: https://github.com/hyprwm/hyprpaper/releases/tag/v0.8.4

Reported by:    GitHub (watch releases)

lang/python314: Fix incomplete mitigation of webbrowser.open()

Cherry-pick fix to resolve
Incomplete mitigation of CVE-2026-4519,
%action expansion for command injection to webbrowser.open()

Obtained from:  GitHub repo
                https://github.com/python/cpython/pull/148516
Security:       CVE-2026-4786
                cf75f572-378a-11f1-a119-e36228bfe7d4
Pull Request:   https://github.com/freebsd/freebsd-ports/pull/511

(cherry picked from commit 965c6f73bbe0a9361fdd92952e3ac622736ebbb3)

lang/python314: Security update + other fixes

Fix critical use-after-free bug in LZMA/BZ2/ZLib decompressor routines
when reusing decompressor instances after a MemoryError was raised from
one.

While here:

- fix DEBUG build/package (several %%ABI%% were in the wrong place
  in pkg-plist that caused failed installs)
- switch to using system textproc/expat2 library
- issue warnings in pre-test that IPV6, PYMALLOC are required and
  DEBUG also breaks one self-test
- bump PORTREVISION
- drop LTOFULL again and make LTO use =full

References:
https://mail.python.org/archives/list/security-announce@python.org/thread/HTWB2Z6KT5QQX4RYEZAFININDHNOSIF3
https://www.cve.org/CVERecord?id=CVE-2026-6100

    [9 lines not shown]

graphics/openexr*: Security update to 3.4.11

Changelog:
https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.4.11

PR:             294882
Security:       787cde46-4424-11f1-943f-05b19d100dca
                CVE-2026-42217
                CVE-2026-42216
                CVE-2026-41142
MFH:            2026Q2
Pull Request:   https://github.com/freebsd/freebsd-ports/pull/511

(cherry picked from commit 782fe1731d04b9842442b7e06b28c43884dcd542)

graphics/openexr*: Security update to 3.4.10

Addresses security vulnerabilities

Changelog:
https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.4.10

Obtained from:  GitHub repo
Security:       CVE-2026-39886
                CVE-2026-40244
                CVE-2026-40250
Pull Request:   https://github.com/freebsd/freebsd-ports/pull/511

(cherry picked from commit a096d170b8b4eaa6b2f8f9b54ecb616d14346a19)

security/openvpn: security update to 2.6.20

Changelog:      https://github.com/OpenVPN/openvpn/releases/tag/v2.6.20
Security:       549313db-3e93-11f1-8d38-7fbbe0285610
Security:       CVE-2026-35058
Security:       CVE-2026-40215
PR:             294714
Pull Request:   https://github.com/freebsd/freebsd-ports/pull/511

(direct commit to quarterly, branches have diverged)

*: Bump PORTREVISION on Poppler's consumers

graphics/inkscape: Fix build against newest Poppler

Differential Revision:  https://reviews.freebsd.org/D56472

editors/libreoffice: Fix build against newest Poppler

Differential Revision:  https://reviews.freebsd.org/D56472

editors/calligra: Fix build against newest Poppler

Differential Revision:  https://reviews.freebsd.org/D56472

graphics/poppler{,-glib,-qt5,-qt6,-utils}: Update to 26.04.0

Differential Revision:  https://reviews.freebsd.org/D56472

textproc/rubygem-nokogiri: Update to 1.19.3

Changes:        https://github.com/sparklemotion/nokogiri/releases
                https://nokogiri.org/CHANGELOG.html
(cherry picked from commit 1dfa57e9b7cc65796adc5c841d744567ed5f550d)

textproc/rubygem-nokogiri: Update to 1.18.10

Changes:        https://github.com/sparklemotion/nokogiri/releases
                https://nokogiri.org/CHANGELOG.html
(cherry picked from commit a6699af8ba44f228c08a091966bd2ec3240d3080)

www/rubygem-railties72: Update to 7.2.3.1

Changes:        https://github.com/rails/rails/releases
(cherry picked from commit 9942324f0c594d965d1d84a82850fe3912659616)

www/rubygem-actionpack72: Update to 7.2.3.1

Changes:        https://github.com/rails/rails/releases
(cherry picked from commit 42786db4a89667e7458d5ce234b8cc2b57481330)

www/rubygem-rails72: Update to 7.2.3.1

Changes:        https://github.com/rails/rails/releases
(cherry picked from commit 1b84dc7c29bc6fb2313dc3ce0fa6e7e353218a11)