BSD Commit Log Search

x11-fonts/xfontsel: update from 1.1.1 to 1.1.2

PR:             296370
Approved by:    x11 (arrowd, maintainer)

Sponsored by:   tipi.work

x11/xedit: update to 1.2.5

PR:             296371
Approved by:    x11 (arrowd, maintainer)
Sponsored by:   tipi.work

security/vuxml: Document dns/powerdns vulnerabilities

PR:             296312
Approved by:    osa, vvd (Mentors, implicit)

dns/powerdns: Security update 5.0.5 => 5.1.2

Port changes:
- Switch from Autotools to Meson.
- Add new GNUTLS option.
- Fix build with OPENLDAP option by adding dependency on security/krb5.

Upgrade Notes (from 5.0.0 to 5.1.0):
- https://doc.powerdns.com/authoritative/upgrading.html#to-5-1-0
Changelogs:
- https://doc.powerdns.com/authoritative/changelog/5.0.html#change-5.0.6
- https://doc.powerdns.com/authoritative/changelog/5.1.html#change-5.1.2
Security Advisories:
- https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2026-05.html
- https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2026-07.html

PR:             296312
Reported by:    Jordan Ostreff <jordan at ostreff.info>
Approved by:    osa, vvd (Mentors, implicit)

    [10 lines not shown]

dns/powerdns: Security update 5.0.5 => 5.1.2

Port changes:
- Switch from Autotools to Meson.
- Add new GNUTLS option.
- Fix build with OPENLDAP option by adding dependency on security/krb5.

Upgrade Notes (from 5.0.0 to 5.1.0):
- https://doc.powerdns.com/authoritative/upgrading.html#to-5-1-0
Changelogs:
- https://doc.powerdns.com/authoritative/changelog/5.0.html#change-5.0.6
- https://doc.powerdns.com/authoritative/changelog/5.1.html#change-5.1.2
Security Advisories:
- https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2026-05.html
- https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2026-07.html

PR:             296312
Reported by:    Jordan Ostreff <jordan at ostreff.info>
Approved by:    osa, vvd (Mentors, implicit)

    [8 lines not shown]

devel/py-memory-allocator: chase cython-3.12

security/infisical-cli: update to 0.43.99 release.

math/py-cypari2: chase cython-3.12

devel/py-cysignals: upgrade to 1.12.6

Release notes at https://github.com/sagemath/cysignals/releases/tag/1.12.6

math/py-primecountpy: chase cython-3.12

security/vuxml: Document dns/powerdns-recursor vulnerabilities

PR:             296313
Approved by:    osa, vvd (Mentors, implicit)

dns/powerdns-recursor: Security update 5.4.2 => 5.4.3

Port changes:
- Add NOD option for upstream new feature support
- Set C++17 standard
- Use '+=' instead of '=' for DISTFILES to reduce portlint warnings

Changelog:
https://doc.powerdns.com/recursor/changelog/5.4.html#change-5.4.3
Security Advisory:
https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2026-08.html

PR:             296313
Reported by:    Jordan Ostreff <jordan at ostreff.info>
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q2
Security:       CVE-2026-3361
Security:       CVE-2026-40012
Security:       CVE-2026-42005

    [7 lines not shown]

dns/powerdns-recursor: Update to 5.4.2

Changelog: https://doc.powerdns.com/recursor/changelog/5.4.html#change-5.4.2

PR:             295881
Reported by:    Jordan Ostreff <jordan at ostreff.info>
Approved by:    Ralf van der Enden <tremere at cainites.net> (maintainer)

(cherry picked from commit 1364a0ca4113da56399c94a9b6adc5ac6fd5545e)

dns/powerdns-recursor: Security update 5.4.2 => 5.4.3

Port changes:
- Add NOD option for upstream new feature support
- Set C++17 standard
- Use '+=' instead of '=' for DISTFILES to reduce portlint warnings

Changelog:
https://doc.powerdns.com/recursor/changelog/5.4.html#change-5.4.3
Security Advisory:
https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2026-08.html

PR:             296313
Reported by:    Jordan Ostreff <jordan at ostreff.info>
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q2
Security:       CVE-2026-3361
Security:       CVE-2026-40012
Security:       CVE-2026-42005

    [5 lines not shown]

www/authelia: enable secret mode to fetch secrets from files

Authelia provides the functionality using go templates so screts must
not be part of the config file, but can be read from external files.

That makes handling of keys more more convinient, like:
```
identity_providers:
  oidc:
    jwks:
      - key: {{ secret "/usr/local/etc/authelia/private_ecdsa.pem" | mindent 10 "|" | msquote }}
      - key: {{ secret "/usr/local/etc/authelia/private_rsa.pem" | mindent 10 "|" | msquote }}
```

Authelia must be started for this with the template filter which that commit
adds.

PR:             295354
Approved by:    yuri (maintainer, timeout)

dns/dnsdist: Security update 2.0.6 => 2.0.7

While here, pet portfmt.

Changelog:
https://www.dnsdist.org/changelog.html#change-2.0.7
Security Advisory:
https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.html

PR:             296314
Reported by:    Jordan Ostreff <jordan at ostreff.info>
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q2
Security:       CVE-2026-40011
Security:       CVE-2026-42004
Security:       CVE-2026-42005
Security:       CVE-2026-40208
Security:       CVE-2026-40209
Security:       CVE-2026-40210

    [3 lines not shown]

dns/dnsdist: update to v2.0.6

PR:     295515
Reported by:    Jordan Ostreff <jordan at ostreff.info>
Approved by:    tremere at cainites.net (maintainer)

(cherry picked from commit 9df447a2af2400984d1f068c7d3bed36da348e55)

dns/dnsdist: Security update 2.0.6 => 2.0.7

While here, pet portfmt.

Changelog:
https://www.dnsdist.org/changelog.html#change-2.0.7
Security Advisory:
https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.html

PR:             296314
Reported by:    Jordan Ostreff <jordan at ostreff.info>
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q2
Security:       CVE-2026-40011
Security:       CVE-2026-42004
Security:       CVE-2026-42005
Security:       CVE-2026-40208
Security:       CVE-2026-40209
Security:       CVE-2026-40210
Security:       CVE-2026-40211

archivers/plakar: update to 1.1.3

Changes:        https://github.com/PlakarKorp/plakar/releases
PR:             296059
Approved by:    maintainer (timeout)

security/vuxml: Document dns/dnsdist vulnerabilities

PR:             296314
Approved by:    osa, vvd (Mentors, implicit)

sysutils/gitlab-registry: update to 4.40.2

Changes:        https://gitlab.com/gitlab-org/container-registry/-/releases

www/evcc: update to 0.310.1

Changes:        https://github.com/evcc-io/evcc/releases

security/boringssl: update CONFLICTS

Bump PORTREVISION.

Sponsored by:   tipi.work

security/py-python-nss: Fix build with Python 3.12

src/py_nspr_error.c:189:23: error: too few arguments provided to function-like macro invocation
  189 |         va_start(vargs);
      |                       ^
/usr/include/sys/_stdarg.h:41:9: note: macro 'va_start' defined here
   41 | #define va_start(ap, last)      __builtin_va_start((ap), (last))
      |         ^

Reported by:    pkg-fallout

www/tt-rss: Update g20260501 => g20260622

Commit log:
https://github.com/tt-rss/tt-rss/compare/f88091ccc0f3d...87b42eb3db253

PR:             296359
Approved by:    osa, vvd (Mentors, implicit)

security/vuxml: Add gstreamer1* < 1.28.4

GStreamer1: Update to 1.28.4

Backport several security fixes from not-yet-released 1.28.5.

Add a `create-vuxml` target to multimedia/gstreamer1 to automagically
create a VuXML entry for new GStreamer releases. The backing script
can be used standalone for cases when more fine tuning is needed.

Changes:
https://gstreamer.freedesktop.org/releases/1.28/#1.28.4

Security:       4e82a0e6-6801-42c6-8fb6-91b6b275a9e1

misc/crush: Add option to support for disabling dangerous command blocking

By default, crush blocks the execution of potentially dangerous
commands (like known hazardous system commands or package
installations).

This change adds an option to support for disabling the dangerous
command blocking, which would be convenient if one operates in a
safe environment or needs to run those commands.

PR:             296282
Reported by:    Victor Igumnov <victoriggy at gmail.com>
Pull Request:   https://github.com/freebsd/freebsd-ports/pull/547

sysutils/stackit: Update 0.64.0 => 0.65.0

Changelog:
https://github.com/stackitcloud/stackit-cli/releases/tag/v0.65.0

PR:             296369
Approved by:    osa, vvd (Mentors, implicit)

sysutils/tarbsd-builder: Update 26.06.08 => 26.06.28

Changelog:
https://github.com/pavetheway91/tarbsd/releases/tag/26.06.28
Commit log:
https://github.com/pavetheway91/tarbsd/compare/26.06.08...26.06.28

PR:             296355
Approved by:    osa, vvd (Mentors, implicit)