x11-fm/worker: update the port to the next major release 6.0.0
Most visible changes are internal text editor, copy and rename
based on regular expressions, nanoseconds timestamp support.
On the port's side, there is optional Imlib2 support, C++20 is
now used for compilation, switch to smaller .tar.zst distfile.
Reported by: portscout
filesystems/avfs: update the port to version 1.4.0
- Add alternative WWW and MASTER_SITES locations
- Drop DEBUG option and amend CONFIGURE_ARGS in
accordance to WITH_DEBUG, a user-facing variable
- Add Lzip compression support and enable it with
Zstd, as both are light or common dependencies
Reported by: portscout
databases/pgdog: Update 0.1.61 => 0.1.62
* Move libpg_query crate replacement from post-extract to pre-patch
as `make cargo-crates` was unable to update crates:
`make cargo-crates > Makefile.crates`
rmdir: /libpg_query: No such file or directory
* Remove upstreamed patch
PR: 299460
x11/cosmic-app-library: New port: Modern application launcher for COSMIC
COSMIC App Library is a modern application launcher for the
COSMIC desktop environment that displays graphical apps
in a neat, airy grid.
WWW: https://github.com/pop-os/cosmic-app-library
PR: 299771
Reported by: Josh Megnauth <jo.sh at tutanota.com> (new maintainer)
databases/pgloader3: Fix crash during "reset sequences"
Column names that need to be quoted, will already be so quoting them
again results in sql errors.
Patch taken from:
https://github.com/codereverser/pgloader/commit/aba754a759f28701d94551e85c6b9c369e63698c
Upstreaming is of no use as upstream rewrote pgloader in java and is not
accepting patches for v3 anymore.
While at it:
- Replace PORTVERSION with DISTVERSION.
- Add libzstd to LIB_DEPENDS.
- Fix warnings from portclippy.
- Refresh patch.
PR: 298832
Approved by: freebsd-washroom at duhanic.com (maintainer, timeout 1 month)
Sponsored by: UNIS Labs (vvd)
[4 lines not shown]
databases/pgloader3: Fix crash during "reset sequences"
Column names that need to be quoted, will already be so quoting them
again results in sql errors.
Patch taken from:
https://github.com/codereverser/pgloader/commit/aba754a759f28701d94551e85c6b9c369e63698c
Upstreaming is of no use as upstream rewrote pgloader in java and is not
accepting patches for v3 anymore.
While at it:
- Replace PORTVERSION with DISTVERSION.
- Add libzstd to LIB_DEPENDS.
- Fix warnings from portclippy.
- Refresh patch.
PR: 298832
Approved by: freebsd-washroom at duhanic.com (maintainer, timeout 1 month)
Sponsored by: UNIS Labs (vvd)
[2 lines not shown]
security/vuxml: adjust linux-rl9-libxslt package for b0a3466f-5efc-11f0-ae84-99047d0a6bcc (+)
Rerolled linux-rl9-libxslt-1.1.34_5 now includes fixes for mentioned CVEs
security/linux-rl9-ca-certificates: update to 2026.2.92_v9.0.319-90.3.el9_8
Changelog:
*Thu Oct 22 2026 Krenželok František <fkrenzel at redhat.com> - 2026.2.92_v9.0.319-90.3
- Fix malformed patch header in remove-emsign-root-cs-ca-g3.patch
*Thu Oct 22 2026 Krenželok František <fkrenzel at redhat.com> - 2026.2.92_v9.0.319-90.2
- Removing: emSign Root CS CA - G3 from Microsoft Code Signing certificates
*Wed Oct 21 2026 Krenželok František <fkrenzel at redhat.com> - 2026.2.92_v9.0.319-90.1
- Removing: AAA Certificate Services root CA
- Removing: emSign ECC Root CA - G3 from Microsoft Code Signing certificates
*Wed Oct 21 2026 Krenželok František <fkrenzel at redhat.com> - 2026.2.92_v9.0.319-90.0
- Update to CKBI 2.92_v9.0.319 from NSS 3.131.1
Removing:
- emSign Root CA - C1
Adding:
[38 lines not shown]
textproc/antiword: Deprecate
Upstream has been dead since the 0.37 release in 2005. The only
remaining fork (github.com/grobian/antiword) has no releases and does
not address security issues.
CVE-2026-111677 (heap out-of-bounds read in vGet8LstInfo) and
CVE-2026-111678 (stack out-of-bounds read in vGet8PapInfo and
vGet8ChrInfo) are unfixed upstream and in every distribution.
Set to expire on 2026-11-30.
Sponsored by: Netzkommune GmbH
(cherry picked from commit 100c915a873d51c284aa4febb506da8db7a3a440)
textproc/antiword: Deprecate
Upstream has been dead since the 0.37 release in 2005. The only
remaining fork (github.com/grobian/antiword) has no releases and does
not address security issues.
CVE-2026-111677 (heap out-of-bounds read in vGet8LstInfo) and
CVE-2026-111678 (stack out-of-bounds read in vGet8PapInfo and
vGet8ChrInfo) are unfixed upstream and in every distribution.
Set to expire on 2026-11-30.
Sponsored by: Netzkommune GmbH
www/py-django-extensions: Update 3.2.3 => 4.1
Changelog:
https://github.com/django-extensions/django-extensions/blob/4.1/CHANGELOG.md
Port changes:
- Switch to USE_PYTHON=pep517.
- Add concurrent to USE_PYTHON.
- Add mail/py-aiosmtpd to RUN_DEPENDS for mail_debug.
- Patch the PEP 639 license string for the setuptools in the tree.
- Fix portlint warnings.
PR: 299899
Approved by: Kevin Golding <ports at caomhin.org> (maintainer)
Approved by: osa, vvd (Mentors, implicit)
MFH: 2026Q4
(cherry picked from commit 1c5cc9c088aeb0d7f94c4ccab4ee0acf29d3839a)
www/py-django-extensions: Update 3.2.3 => 4.1
Changelog:
https://github.com/django-extensions/django-extensions/blob/4.1/CHANGELOG.md
Port changes:
- Switch to USE_PYTHON=pep517.
- Add concurrent to USE_PYTHON.
- Add mail/py-aiosmtpd to RUN_DEPENDS for mail_debug.
- Patch the PEP 639 license string for the setuptools in the tree.
- Fix portlint warnings.
PR: 299899
Approved by: Kevin Golding <ports at caomhin.org> (maintainer)
Approved by: osa, vvd (Mentors, implicit)
MFH: 2026Q4
