BSD Commit Log Search

Merge branch 'freebsd/main' into hardenedbsd/main

emulators/virtualbox-ose-*72: Update 7.2.16 => 7.2.18 (19 CVEs)

Changelog:
https://www.virtualbox.org/wiki/Changelog-7.2#v18

Oracle Critical Security Patch Update Advisory - September 2026:
https://www.oracle.com/security-alerts/cspusep2026.html#AppendixOVIR

Sponsored by:   UNIS Labs
Security:       CVE-2026-87273
Security:       CVE-2026-87268
Security:       CVE-2026-87269
Security:       CVE-2026-87270
Security:       CVE-2026-87271
Security:       CVE-2026-87272
Security:       CVE-2026-87276
Security:       CVE-2026-87277
Security:       CVE-2026-87278
Security:       CVE-2026-87279

    [10 lines not shown]

devel/sentry-cli: Update to 3.8.0

Changelog: https://github.com/getsentry/sentry-cli/blob/3.8.0/CHANGELOG.md

Reported by:    GitHub (watch releases)

misc/crush: Update to 0.95.0

Changelog: https://github.com/charmbracelet/crush/releases/tag/v0.95.0

Reported by:    GitHub (watch releases)

security/vuxml: Document vulnerabilities in net/traefik

security/vuxml: Document vulnerabilities in multimedia/mkvtoolnix

graphics/hyprland-protocols: Update to 0.7.1

Changelog: https://github.com/hyprwm/hyprland-protocols/releases/tag/v0.7.1

Reported by:    GitHub (watch releases)

net-mgmt/nagios-pf-plugin: fix build on FreeBSD 15+

PR:             294009
Approved by:    maintainer timeout (never replied)
MFH:            2026Q3

audio/shairport-sync: Update to 5.5.2

audio/noctavox: Update to 0.3.5

ChangeLog:

1. https://github.com/Jaxx497/NoctaVox/releases/tag/v0.3.5

Reported by:    "github-actions[bot]" <notifications at github.com>

net/traefik: Update to upstream release 3.7.13

Details:
* Bug- and security fixes, see
  https://github.com/traefik/traefik/releases/tag/v3.7.13
* Changes may require updating the configuration, see
  https://doc.traefik.io/traefik/v3.7/migrate/v3/#v3713

MFH:            2026Q3
Security:       https://github.com/traefik/traefik/security/advisories/GHSA-qqjf-53cj-pwvv
                https://github.com/traefik/traefik/security/advisories/GHSA-f52w-8j3h-j724
                https://github.com/traefik/traefik/security/advisories/GHSA-v67p-phpq-fc8x
                https://github.com/traefik/traefik/security/advisories/GHSA-w4v4-9rw7-5326
                https://github.com/traefik/traefik/security/advisories/GHSA-8fcf-v89g-xpg6

multimedia/mkvtoolnix: Update to upstream release 102.0

Details:
Bug- and security fixes, see
https://mkvtoolnix.download/doc/NEWS.md

MFH:            2026Q3
Security:       CVE-2026-90783

math/octave-forge-statistics: Update to 1.9.3.

devel/Makefile: add missing py-opengrok-tools

Reported by:    rcm at rcm.sh
Fixes:          789a6e9d868a

math/R-cran-combinat: Update 0.0-8 => 0.0-9

While here, populate pkg-descr.

Commit log:
https://github.com/cran/combinat/compare/0.0-8...0.0-9

PR:             298551
Approved by:    no maintainer
Approved by:    osa, vvd (Mentors, implicit)

sysutils/edk2: fix network boot on bhyve

NetworkPkg's DxeNetLib needs EFI_RNG_PROTOCOL, and the Bhyve build's
only producer is VirtioRngDxe, which never binds since bhyve has no
virtio-rng device. RngDxe uses RDRAND instead and needs no device.
TcpDxe depexes gEfiHash2ServiceBindingProtocolGuid, so add
Hash2DxeCrypto too; without TcpDxe there is no HttpServiceBinding.
Also enable HTTP boot.

This recommits 3fcead9dc69a ("sysutils/edk2: fix network boot on bhyve"),
which also contained three unrelated patch files.

PR:             298499
Approved by:    manu
Sponsored by:   Netflix

Revert "sysutils/edk2: fix network boot on bhyve"

This reverts commit 3fcead9dc69a1fb01bf4200ce3b079e942b57f39.

Wrongly added non-related files to previous commit.

security/debian-keyring: Update 2026.06.27 → 2026.08.27

Changelog:
https://salsa.debian.org/debian-keyring/keyring/-/raw/2026.08.27/debian/changelog

PR:             298552
Approved by:    osa, vvd (Mentors, implicit)

Mk: fix checksum when makesum is defined

Fixes regression from 076687302bffe156fb9b379c2eb622f0ac2e711e

Reported by:    eduardo

sysutils/edk2: fix network boot on bhyve

NetworkPkg's DxeNetLib needs EFI_RNG_PROTOCOL, and the Bhyve build's
only producer is VirtioRngDxe, which never binds since bhyve has no
virtio-rng device. RngDxe uses RDRAND instead and needs no device.
TcpDxe depexes gEfiHash2ServiceBindingProtocolGuid, so add
Hash2DxeCrypto too; without TcpDxe there is no HttpServiceBinding.
Also enable HTTP boot.

PR:             298499
Approved by:    manu
Sponsored by:   Netflix

net-p2p/{lib,r}torrent: Update to 0.16.23

This release includes various bugfixes and minor improvements as part of
a stable series of releases.

ChangeLog:      https://github.com/rakshasa/rtorrent/releases/tag/v0.16.23
MFH:            2026Q3

multimedia/py-trakit: Update to 0.4.0

ChangeLog: https://github.com/ratoaq2/trakit/releases/tag/0.4.0

multimedia/py-knowit: Fix test depends version check

Remove upper version limit on test dependency devel/py-pint

dns/bind9-devel: update to 9.21.26

Changes:        https://downloads.isc.org/isc/bind9/9.21.26/doc/arm/html/notes.html
Security:       CVE-2026-19668 CVE-2026-19033 CVE-2026-77119
                CVE-2026-19941 CVE-2026-19666 CVE-2026-19667
                CVE-2026-75029 CVE-2026-77692 CVE-2026-81736
                CVE-2026-76163 CVE-2026-78301 CVE-2026-80274
                CVE-2026-81563

dns/bind920: update to 9.20.29

Changes:        https://downloads.isc.org/isc/bind9/9.20.29/doc/arm/html/notes.html#notes-for-bind-9-20-28
Security:       CVE-2026-19668 CVE-2026-19033 CVE-2026-77119
                CVE-2026-19941 CVE-2026-19666 CVE-2026-19667
                CVE-2026-19662 CVE-2026-75029 CVE-2026-77692
                CVE-2026-81736 CVE-2026-76163 CVE-2026-78301
                CVE-2026-80274 CVE-2026-81563

mail/thunderbird-esr: update to 153.3.0 (ga)

Release Notes:
  https://www.thunderbird.net/en-US/thunderbird/153.3.0esr/releasenotes/

Merge branch 'freebsd/main' into hardenedbsd/main

security/vuxml: Document Unbound vulnerabilities

PR:             298574
Approved by:    osa, vvd (Mentors, implicit)

editors/emacs: Apply a security fix from upstream

Previous fix for CVE-2024-53920 was incomplete[0].

[0] https://www.openwall.com/lists/oss-security/2026/09/14/1

PR:             298557
MFH:            2026Q3
Security:       7ba6c085-1590-491a-98ce-5452646b196f
Security:       CVE-2024-53920

www/element-web: Update to 1.12.28

Approved by:    maintainer (implicit, version bump, as per PR 258262)