BSD Commit Log Search

Merge branch 'freebsd/main' into hardenedbsd/main

sysutils/elephant: Update to 2.17.1

While here, remove Go version pinning.[1]

Changelog:
- https://github.com/abenz1267/elephant/releases/tag/v2.17.0
- https://github.com/abenz1267/elephant/releases/tag/v2.17.1

Reported by:    GitHub (watch releases),
                adamw (via private email) [1]

x11/walker: Update to 2.12.1

Changelog:
- https://github.com/abenz1267/walker/releases/tag/v2.12.0
- https://github.com/abenz1267/walker/releases/tag/v2.12.1

Reported by:    GitHub (watch releases)

net/Makefile: Fix unintended change in 7f937bcc8e50bc4a626c72aba2b09a160154db48

net/socat: Update to 1.8.1.0

shells/fd: Assign to submitter

While here,
- Update MASTER_SITES, WWW
- Add LICENSE
etc.

net/py-icmplib: Add new port

icmplib provides the capability to easily forge ICMP packets to build
ping- and tracroute-like functionality into python scripts. A full
description can be found at,

        https://pypi.org/project/icmplib/

security/py-ospd-openvas: Fix package

- Bump PORTREVISION
Reported by:    pkg-fallout

Merge branch 'freebsd/main' into hardenedbsd/main

HBSD: Fix HARDCFLAGS for mail/addresses-goodies

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>

dns/c-ares: Update to 1.34.6

Fixes CVE-2025-62408

Changelog: https://github.com/c-ares/c-ares/releases/tag/v1.34.6

databases/redis: Compile fixes

PR:             276891
Reported by:    jekyll530 at hotmail.com

security/rekor: Update version 1.4.1=>1.4.2

Changelog: https://github.com/sigstore/rekor/releases/tag/v1.4.2

databases/freetds-devel: Update version 1.5.178=>1.5.179

net/freerdp3: Update 3.18.0 => 3.19.0

Changelog:
https://github.com/FreeRDP/FreeRDP/releases/tag/3.19.0

security/vuxml: version Python vuln entries

Security:       613d0f9e-d477-11f0-9e85-03ddfea11990
Security:       CVE-2025-12084
Security:       CVE-2025-13836

math/octave-forge-datatypes: Update to 1.1.1.

lang/python314: security update to 3.14.2

https://github.com/python/cpython/issues/142145 CVE-2025-12084
"Remove quadratic behavior in node ID cache clearing"

https://github.com/python/cpython/issues/119451 CVE-2025-13836
"Out-of-memory when reading a HTTP response with large Content-Length"

Announcement:   https://pythoninsider.blogspot.com/2025/12/python-3142-and-31311-are-now-available.html
Changelog:      https://docs.python.org/release/3.14.2/whatsnew/changelog.html
Security:       613d0f9e-d477-11f0-9e85-03ddfea11990
Security:       CVE-2025-12084
Security:       CVE-2025-13836

security/vuxml: add Python <3.13.11/<3.14.2 vulns

Security:       613d0f9e-d477-11f0-9e85-03ddfea11990
Security:       CVE-2025-12084
Security:       CVE-2025-13836

lang/rust-nightly: update 1.93.0.20251123 → 1.94.0.20251207

Approved by:    rust (implicit)

dns/dnsmasq-devel: security update to v2.92rc3

Changes since v2.92rc2:

* d8f66f4 2025-12-07 | Update German translations. (tag: v2.92rc3) [Conrad Kostecki]
*   629107b 2025-12-06 | Merge OOB memory read fix. CVE-2025-54318 [Simon Kelley]
|\
| * 052aa0f 2025-07-05 | Fix bounds checking in check_ia() [Simon Kelley]

Security:       CVE-2025-54318
MFH:            2025Q4

devel/lua-language-server: Fix build with DEFAULT_VERSIONS+= ninja=samurai

This modifies a hardcoded call to `ninja`.

PR:             291489

archivers/zlib-ng: Update 2.3.1 => 2.3.2

Changelog:
This hotfix release fixes bug #2029.
This bug caused CRC32 failures for data that ended on certain byte
counts above 256KB.
https://github.com/zlib-ng/zlib-ng/releases/tag/2.3.2

MFH:    2025Q4

HBSD: Disable PIE for security/cryptlib

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>

www/nextcloud-groupfolders: Update to 20.1.5

HBSD: Disable FORTIFYSOURCE for devel/pcc-libs

This port implements its own stack protector. Its implementation is
incompatible with FORTIFYSOURCE.

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>

www/p5-Mojolicious: Update to 9.42

deskutils/taskwarrior-tui: Update to 0.26.4 and adopt port

Merge branch 'freebsd/main' into hardenedbsd/main

www/tomcat-devel: Update 11.0.14 => 11.0.15

Changelog:
https://tomcat.apache.org/tomcat-11.0-doc/changelog.html#Tomcat_11.0.15_(markt)

MFH:    2025Q4