devel/libnjs: Update to 1.0.2
Fixes memory corruption in RegExp operations, crashes after a failed
module compilation, and excessive resource usage when sorting huge sparse
arrays.
Sponsored by: Netzkommune GmbH
lang/njs: Update to 1.0.2
Fixes memory corruption in RegExp operations, crashes after a failed
module compilation, and excessive resource usage when sorting huge sparse
arrays.
Sponsored by: Netzkommune GmbH
www/nginx-module-passenger: Add New Port
Sources of the passenger module for the NGINX ports. The module hands
requests to the Passenger agent, which runs Ruby, Python and Node
applications under nginx.
Sponsored by: Netzkommune GmbH
security/vuxml: Document multiple Erlang/OTP vulnerabilities
OTP 29.1.2, 28.5.0.8 and 27.3.4.19 fix CVE-2026-105236 and
CVE-2026-94200 in ssl, and complete the earlier incomplete fixes for
CVE-2026-42789 (public_key), CVE-2026-48856 (inets) and
CVE-2026-70405 (snmp); upstream revised all three advisories on
2026-10-14 to name these releases as the first patched ones.
CVE-2026-96596 in erl_tar gets its own entry: it affects OTP 29 only
and is fixed in 29.1.2.
lang/erlang: Fix the vsn.mk consistency checks in pre-configure
The checks grepped lib/*/vsn.mk for _EI_VSN, _TOOLS_VSN and _SNMP_VSN,
but upstream names those variables EI_VSN, TOOLS_VSN and SNMP_VSN.
The grep therefore matched nothing and each test reduced to
[ ! = <version> ], which sh evaluates as a false string comparison, so
every check passed silently no matter what the Makefile said.
The port-side variables grew their underscore prefix in 12b48a4d8ea,
which renamed them inside the grep patterns as well.
lang/erlang: Do not add WRKSRC/lib to ERL_LIBS during build
ERL_LIBS=${WRKSRC}/lib puts the half-populated in-tree lib/*/ebin
directories on the bootstrap erlc's code path, where they shadow the
bootstrap compiler. That breaks whenever a patch release changes an
API inside the compiler itself. OTP 28.5.0.8 changes
beam_ssa_type:opt_start from arity 2 to arity 3, so the freshly
written beam_ssa_opt.beam gets loaded from lib/compiler/ebin while
beam_ssa_type still comes from the bootstrap, and the build dies with
beam_ssa_recv.erl: internal error in pass beam_ssa_opt:
exception error: undefined function beam_ssa_type:opt_start/3
The ordering inside lib/compiler/src is alphabetical, so this is not a
job race and MAKE_JOBS_UNSAFE, which the error message suggests, does
not help.
The build system derives its own code paths from ERL_TOP, and
lang/erlang-runtime2[789] build the same tarballs, doc chunks
[2 lines not shown]
lang/c3c: Update to 0.8.5_1
Upstream's 0.8.5_1 is a hotfix release over 0.8.5 addressing a WASM
regression. Since FreeBSD reads a trailing _1 as PORTREVISION, the
suffix is carried in DISTVERSIONSUFFIX so DISTNAME matches the real
tag, leaving PKGNAME at c3c-0.8.5.
databases/datui: Link against system SQLite and lzma
Upstream asks rusqlite for the `bundled` feature and xz2 for `static`,
which compile SQLite and liblzma into the binary so that a release
build needs no system library. Drop both and link against
databases/sqlite3 and the liblzma in base instead.
lz4 stays bundled: lz4-sys has no pkg-config path and no override, so
it always builds its own copy.
databases/datui: Update to 0.4.3
Bump mio to 1.2.4 via patch-Cargo.lock. libc 0.2.190 removed
NOTE_PCTRLMASK from its FreeBSD module, which breaks mio 1.2.3:
error[E0425]: cannot find value `NOTE_PCTRLMASK` in crate `libc`
mio 1.2.4 no longer references it.
Upstream dropped build.rs, so the man page is no longer generated
into ${CARGO_TARGET_DIR}/release. Install the pre-generated pages
shipped in crates/datui-cli/man instead, which now cover sections
1, 5 and 7.
Drop the libfontconfig and libfreetype dependencies: freetype-sys
and yeslogic-fontconfig-sys are gone from the dependency graph,
replaced by the pure-Rust fontconfig-parser.
