BSD Commit Log Search

www/nginx: Update to 1.30.1

PR:             295270
Approved by:    security/blanket
Security:       3414ac89-4f9f-11f1-a1c0-0050569f0b83

security/vuxml: Document www/nginx DoS/RCE

PR:             295270
Security:       3414ac89-4f9f-11f1-a1c0-0050569f0b83

devel/nextpnr-devel: Update to 2026-05-12

lang/racket-minimal: Preserve .rackboot section when stripping gracket

PR:             291732
Submitted by:   Wes Frazier

devel/py-maturin: Update to 1.13.3

* Rebase patch and add a boilerplate as well for future reference while
  I'm here.

Changelogs since 1.13.1:

https://github.com/PyO3/maturin/releases/tag/v1.13.3
https://github.com/PyO3/maturin/releases/tag/v1.13.2

textproc/py-zensical: Update to 0.0.41

* While I'm here, adjust the version requirements now that py-click has
  recently been updated.

Changelog:

https://github.com/zensical/zensical/releases/tag/v0.0.41

lang/racket: Preserve .rackboot section when stripping gracket

PR:             291732
Submitted by:   Wes Frazier

security/vuxml: Document new mail/mailpit vulnerabilities

devel/gumbo: Update 0.13.0 => 0.13.2

Changelog:
https://codeberg.org/gumbo-parser/gumbo-parser/src/tag/0.13.2/CHANGES.md

Improve port:
- Switch from fork to upstream.
- Replace PORTVERSION with DISTVERSION.
- Sort USES.
- MV in post-extract with custom WRKSRC.
- Remove unnecessary STRIP_CMD - INSTALL_TARGET=install-strip is enough.

PR:             294862
Approved by:    bdrewery (maintainer, timeout 2 weeks)
Sponsored by:   UNIS Labs
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>

devel/onetbb: Update to 2023.0.0

and fix building of two dependent ports [1].

Release notes:  https://github.com/uxlfoundation/oneTBB/blob/v2023.0.0/RELEASE_NOTES.md
Approved by:    blanket [1]

security/vuxml: Update entry for (py-)setuptools CVE-2025-47273

Expand this to our ancient ports to according to upstream report.
Affects devel/py-setuptools44 and devel/py-setuptools58

www/reproxy: the port had been updated to version 1.6.0

Unfortunately it now requires non-default Go[lang] 1.26.

Reported by:    portscout

print/pdfcpu: Update to 0.12.1

Slight adjustment of version reporting in the compiled bianry

Changelog: https://github.com/pdfcpu/pdfcpu/releases/tag/v0.12.1

audio/fooyin: Update to 0.10.6

Changelog: https://github.com/fooyin/fooyin/releases/tag/v0.10.6

security/vuxml: Add entry for (py-)setuptools CVE-2025-47273

This is almost a one year old CVE

games/colobot: Backport upstream patch to fix build with modern compilers

(cherry picked from commit 736716fcf0f886becc8892adfd6596bc7d405ce9)

games/colobot: Backport upstream patch to fix build with modern compilers

devel/ktextaddons: Update to 2.0.2

x11/plasma-wayland-protocols: Update to 1.21.0

www/ungoogled-chromium: update to 148.0.7778.167

comms/scrcpy: Update to 4.0

Changelog: https://github.com/Genymobile/scrcpy/releases/tag/v4.0

Reported by:    GitHub (watch releases)

security/nextcloud-end_to_end_encryption: Update to 2.1.1

www/nextcloud-appointments: Update to 2.7.3

net/py-kombu: Switch AWS option from py-boto to py-boto3

devel/py-boto was deleted long ago; kombu has supported boto3 since 4.1.

PR:             288530
Submitted by:   James TD Smith <ahktenzero+freebsd at mohorovi.cc>

net/croc: Update to 10.4.3

devel/p5-BZ-Client: Update version 1.072=>4.4

Changelog: https://metacpan.org/dist/BZ-Client/changes

devel/git-codereview: Update version 1.19.0=>1.20.0

textproc/groonga: Update version 16.0.1=>16.0.2

Changelog: https://groonga.org/docs/news/16.html#release-16-0-2

devel/athens: Update version 0.17.0=>0.17.1

Changelog: https://github.com/gomods/athens/releases/tag/v0.17.1

net-mgmt/netbox: Refactor gunicorn requirements

Approved by:    kai (private email)