FreeBSD/ports 5308a25 — security/vuxml/vuln 2026.xml

security/vuxml: Document chromium security fixes

Add the Chrome 157 entry and list linux-chrome in the two previous
chromium entries, which left it out.

Obtained from:  https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html
Sponsored by:   Netzkommune GmbH
DeltaFile
+471-0security/vuxml/vuln/2026.xml
+471-01 files

FreeBSD/ports e20de83 — www/p5-Starlet distinfo Makefile

www/p5-Starlet: update 0.32 -> 0.33

Changelog: https://metacpan.org/dist/Starlet/changes

Security:       prevent excessive CPU use when parsing malformed chunk-size lines
Security:       bound read allocations for large Content-Length values
Security:       suppress response bodies for HEAD requests and 204/304 responses
Security:       stream chunk data to the body buffer and limit chunk-size lines to 4096 bytes
(cherry picked from commit 2d59ccefc7de23da947d3543c2f78f2355c1af98)
DeltaFile
+3-3www/p5-Starlet/distinfo
+3-3www/p5-Starlet/Makefile
+6-62 files

FreeBSD/ports ef5d0f2 — x11-wm/hyprland Makefile pkg-plist, x11-wm/hyprland/files patch-hyprpm_src_core_PluginManager.cpp patch-src_managers_input_Eis.cpp

x11-wm/hyprland: Update to 0.57.1

Release Annoucement: https://hypr.land/news/update57/
Changelog:
- https://github.com/hyprwm/Hyprland/releases/tag/v0.57.0
- https://github.com/hyprwm/Hyprland/releases/tag/v0.57.1

Reported by:    GitHub (watch releases)
DeltaFile
+137-13x11-wm/hyprland/pkg-plist
+13-22x11-wm/hyprland/files/patch-src_init_initHelpers.cpp
+17-0x11-wm/hyprland/files/patch-hyprtester_clients_fullscreen-with-monitor.cpp
+0-15x11-wm/hyprland/files/patch-src_managers_input_Eis.cpp
+0-14x11-wm/hyprland/files/patch-hyprpm_src_core_PluginManager.cpp
+7-7x11-wm/hyprland/Makefile
+174-718 files not shown
+227-9114 files

FreeBSD/ports 0774723 — security/pam_kde Makefile, textproc/xhtml1-xsd Makefile

*: fix plist issues with sbom
DeltaFile
+5-3security/pam_kde/Makefile
+4-2textproc/xhtml1-xsd/Makefile
+1-1x11/swaylock-plugin/Makefile
+10-63 files

FreeBSD/ports 0774722 — . CHANGES, Mk bsd.port.mk

Mk: generate SBOM .pc files for all ports

Each package and subpackage now installs an SBOM file in pkg-config
format, see pc(5).  The file is installed in ${PREFIX}/share/sbom/pc/.
The framework adds it to the plist automatically.

PR:             300098
Differential Revision:  https://reviews.freebsd.org/D60441
DeltaFile
+70-0Mk/Scripts/create-sbom.sh
+60-0Mk/bsd.port.mk
+25-0CHANGES
+4-0Mk/Scripts/check-stagedir.sh
+159-04 files

FreeBSD/ports f6888c1 — net/cloudflare-speed-cli Makefile distinfo

net/cloudflare-speed-cli: Update to 1.0.12
DeltaFile
+3-3net/cloudflare-speed-cli/distinfo
+1-1net/cloudflare-speed-cli/Makefile
+4-42 files

FreeBSD/ports 96b350c — devel/codequery Makefile

devel/codequery: Add missing qt6-tools build dependency

CMake requires Qt6LinguistTools, which was previously pulled in
indirectly and is no longer available, breaking configure.

MFH:            2026Q4
DeltaFile
+2-1devel/codequery/Makefile
+2-11 files

FreeBSD/ports 0fb37d1 — graphics/heimer Makefile

graphics/heimer: Add missing qt6-tools build dependency

CMake requires Qt6LinguistTools, which was previously pulled in
indirectly and is no longer available, breaking configure.

MFH:            2026Q4
DeltaFile
+2-1graphics/heimer/Makefile
+2-11 files

FreeBSD/ports 29fcd01 — games/trx Makefile distinfo

games/trx: Update to 1.12

ChangeLog: https://github.com/LostArtefacts/TRX/releases/tag/trx-1.12
DeltaFile
+3-3games/trx/distinfo
+1-1games/trx/Makefile
+4-42 files

FreeBSD/ports ae41c07 — emulators/sameboy Makefile distinfo

emulators/sameboy: Update to 1.0.5

ChangeLog: https://github.com/LIJI32/SameBoy/releases/tag/v1.0.5
DeltaFile
+3-3emulators/sameboy/distinfo
+1-1emulators/sameboy/Makefile
+4-42 files

FreeBSD/src f739d9f — sys/compat/linuxkpi/common/src linux_tasklet.c

linuxkpi: Do not wait for a disabled tasklet in tasklet_unlock_wait()

tasklet_unlock_wait() waited for the tasklet state to become idle.  Linux
only waits for TASKLET_STATE_RUN, i.e. for a tasklet that is currently
executing.  A tasklet which is scheduled but disabled does not run until
it is enabled again, so in LinuxKPI it stays in the BUSY (queued) state and
the waiter never returns.

This is what happens when unloading i915: execlists_reset_prepare()
disables the engine tasklet with __tasklet_disable_sync_once() while the
tasklet is queued and kldunload loops forever in pause().

Do not wait if the tasklet is only queued and disabled.

Reviewed by:    bz
Sponsored by:   Beckhoff Automation GmbH & Co. KG
DeltaFile
+19-2sys/compat/linuxkpi/common/src/linux_tasklet.c
+19-21 files

FreeBSD/src c15aab0 — sys/compat/linuxkpi/common/src linux_i2c.c

linuxkpi: Fix lkpi_i2c_del_adapter() leaving the devices behind

lkpi_i2c_del_adapter() looked for the lkpi_iic or lkpi_iicbb device to
delete with device_find_child() on increasing unit numbers, and stopped at
the first unit that does not exist.  Units are allocated globally per
devclass, so as soon as one adapter was removed (leaving a hole) or when the
units of a parent do not start at 0, the adapter was not found and its
device was never deleted.  The i2c devices of a driver such as i915 then
accumulate, with a new set of unit numbers, each time it is loaded.

Walk the children of the parent instead and match on the adapter.

Sponsored by:   Beckhoff Automation GmbH & Co. KG
DeltaFile
+30-28sys/compat/linuxkpi/common/src/linux_i2c.c
+30-281 files

FreeBSD/src 71d26da — sys/compat/linuxkpi/common/src linux_pci.c

linuxkpi: Release devres on PCI driver detach

linux_pci_detach_device() called the driver remove method and then only
dropped its reference on the device, expecting the devres list to be
released from lkpi_pci_dev_release() once the last reference is gone.

That never happens when a devres action itself holds a reference on the
device.  The typical case is devm_drm_dev_alloc(): the drm_device takes a
reference on its parent and the matching drm_dev_put() is a devres
action.  The device is thus never released, drm_dev_release() is never
called and the DRM device and everything it owns is leaked, which makes
unloading drm-kmod drivers fail ("failed due to N other pending
references on the LinuxKPI device") and leaves the module unloadable or
crashing.

Linux releases the devres resources when a driver is unbound, so do the
same: call lkpi_devres_release_free_list() right after the remove method.
The list is empty when lkpi_pci_dev_release() runs later.


    [2 lines not shown]
DeltaFile
+8-0sys/compat/linuxkpi/common/src/linux_pci.c
+8-01 files

FreeBSD/src bf87604 — sys/compat/linuxkpi/common/include/linux sysfs.h

linuxkpi: Fix sysfs_remove_group() for groups without a name

sysfs_create_group() handles a group with a NULL name by creating its
attributes directly under the object node, but sysfs_remove_group() passed
the NULL name to sysctl_remove_name(), which then panics in strcmp().

Mirror the creation path: for an unnamed group, remove each attribute and
binary attribute individually.

This was not hit before because the devres actions of a PCI device
(e.g. the one registered by devm_device_add_group()) were not run when
the driver was detached.

Sponsored by:   Beckhoff Automation Gmbh & Co. KG
DeltaFile
+14-1sys/compat/linuxkpi/common/include/linux/sysfs.h
+14-11 files

FreeBSD/ports 569449f — devel/py-ujson Makefile distinfo

devel/py-ujson: Update to 6.1.0

Changes:        https://github.com/ultrajson/ultrajson/releases/tag/6.1.0
DeltaFile
+3-3devel/py-ujson/distinfo
+1-1devel/py-ujson/Makefile
+4-42 files

FreeBSD/ports b042497 — devel/glab pkg-plist Makefile

devel/glab: update to 1.128.0

Changes:        https://gitlab.com/gitlab-org/cli/-/releases
DeltaFile
+5-5devel/glab/distinfo
+2-2devel/glab/Makefile
+1-0devel/glab/pkg-plist
+8-73 files

FreeBSD/ports 34491c9 — sysutils/hyprpolkitagent Makefile, x11-toolkits/hyprtoolkit Makefile

*/*: Bump port revision after hyprgraphics shlib version bump (a225535f5768)
DeltaFile
+1-1x11/hyprpaper/Makefile
+1-1x11/hyprlauncher/Makefile
+1-1x11-wm/hyprland/Makefile
+1-1x11-toolkits/hyprtoolkit/Makefile
+1-1sysutils/hyprpolkitagent/Makefile
+1-0x11/hyprlock/Makefile
+6-56 files

FreeBSD/ports a225535 — graphics/hyprgraphics Makefile distinfo

graphics/hyprgraphics: Update to 0.6.0

Changelog: https://github.com/hyprwm/hyprgraphics/releases/tag/v0.6.0

Reported by:    GitHub (watch releases)
DeltaFile
+3-3graphics/hyprgraphics/distinfo
+2-3graphics/hyprgraphics/Makefile
+5-62 files

FreeBSD/ports 615f913 — sysutils/hyprpolkitagent Makefile, x11-toolkits/hyprtoolkit Makefile

*/*: Bump port revision after aquamarine shlib version bump (4f44f56ed746)
DeltaFile
+1-1x11-wm/hyprland/Makefile
+1-1x11-toolkits/hyprtoolkit/Makefile
+1-0x11/hyprlauncher/Makefile
+1-0sysutils/hyprpolkitagent/Makefile
+4-24 files

FreeBSD/ports 4f44f56 — x11-toolkits/aquamarine Makefile distinfo, x11-toolkits/aquamarine/files extra-patch-src_backend_Headless.cpp

x11-toolkits/aquamarine: Update to 0.16.0

Changelog: https://github.com/hyprwm/aquamarine/releases/tag/v0.16.0

Reported by:    GitHub (watch releases)
DeltaFile
+3-3x11-toolkits/aquamarine/distinfo
+2-2x11-toolkits/aquamarine/files/extra-patch-src_backend_Headless.cpp
+2-2x11-toolkits/aquamarine/Makefile
+7-73 files

FreeBSD/src b138d01 — lib/libc/locale mbrtocXX_iconv.h

libc/locale: Check EILSEQ return

_citrus_iconv_std_iconv_convert can return EILSEQ without setting
invlen. As a result, we should check EILSEQ in the return value or it
will incorrectly return -2

Reviewed by:    kevans
Fixes: e2030ca246a7 ("libc: fix c*rtomb/mbrtoc*")
MFC after:      2 days
Differential Revision: https://reviews.freebsd.org/D61151
DeltaFile
+1-1lib/libc/locale/mbrtocXX_iconv.h
+1-11 files

FreeBSD/ports bf19089 — mail/py-resend Makefile distinfo

mail/py-resend: Update to 2.51.0

Changelog: https://github.com/resend/resend-python/releases/tag/v2.51.0

Reported by:    Repology
DeltaFile
+3-3mail/py-resend/distinfo
+1-1mail/py-resend/Makefile
+4-42 files

FreeBSD/ports c51e455 — devel/py-ty Makefile distinfo, devel/py-ty/files patch-ruff_crates_ty_Cargo.toml

devel/py-ty: Update to 0.0.96

Changelog: https://github.com/astral-sh/ty/blob/0.0.96/CHANGELOG.md

Reported by:    portscout
DeltaFile
+3-3devel/py-ty/distinfo
+1-1devel/py-ty/files/patch-ruff_crates_ty_Cargo.toml
+1-1devel/py-ty/Makefile
+5-53 files

FreeBSD/ports 55b92d3 — databases/py-redisvl Makefile distinfo

databases/py-redisvl: Update to 0.30.0

Changelog: https://github.com/redis/redis-vl-python/releases/tag/v0.30.0

Reported by:    portscout
DeltaFile
+3-3databases/py-redisvl/distinfo
+1-1databases/py-redisvl/Makefile
+4-42 files

FreeBSD/ports 8723a10 — multimedia/jellyfin-ffmpeg Makefile distinfo

multimedia/jellyfin-ffmpeg: Update to 8.1.3.2

Changelog:      https://github.com/jellyfin/jellyfin-ffmpeg/releases/tag/v8.1.3-2
Reviewed by:    dtxdf
Approved by:    dtxdf (mentor)
Differential Revision:  https://reviews.freebsd.org/D61165
DeltaFile
+3-3multimedia/jellyfin-ffmpeg/distinfo
+2-3multimedia/jellyfin-ffmpeg/Makefile
+5-62 files

FreeBSD/ports 2094f47 — sysutils/py-dbuild Makefile distinfo

sysutils/py-dbuild: Update to 1.13.1

ChangeLog:

- https://github.com/daemonless/dbuild/releases/tag/v1.13.1

Reviewed by:    dtxdf
Approved by:    dtxdf (mentor, maintainer)
Differential Revision:  https://reviews.freebsd.org/D61171
DeltaFile
+3-3sysutils/py-dbuild/distinfo
+1-1sysutils/py-dbuild/Makefile
+4-42 files

FreeBSD/ports 5975cd0 — devel/zizmor Makefile Makefile.crates, devel/zizmor/files patch-crates_zizmor_Cargo.toml

devel/zizmor: Update to 1.32.0

Changelog: https://github.com/zizmorcore/zizmor/releases/tag/v1.32.0

Reported by:    GitHub (watch releases)
DeltaFile
+35-31devel/zizmor/distinfo
+16-14devel/zizmor/Makefile.crates
+2-2devel/zizmor/files/patch-crates_zizmor_Cargo.toml
+1-1devel/zizmor/Makefile
+54-484 files

FreeBSD/ports e83ce9c — databases/pgbadger Makefile distinfo

databases/pgbadger: Update to 13.3

Release notes:  https://github.com/darold/pgbadger/releases/tag/v13.3
DeltaFile
+3-3databases/pgbadger/distinfo
+1-1databases/pgbadger/Makefile
+4-42 files

FreeBSD/ports b84b349 — net-mgmt/omada6 distinfo Makefile

net-mgmt/omada6: Update to 6.3.0.111
DeltaFile
+203-202net-mgmt/omada6/pkg-plist
+4-4net-mgmt/omada6/Makefile
+3-3net-mgmt/omada6/distinfo
+210-2093 files

FreeBSD/ports 5fd4a9a — textproc/markterm distinfo, textproc/markterm/files patch-ext_litehtml_src_document.cpp patch-ext_litehtml_include_litehtml_types.h

textproc/markterm: Update to 0.17.0

- bump the rebased litehtml submodule at d908f3f8
- regenerate patches against the new sources

Sponsored by:   SkunkWerks, GmbH
DeltaFile
+12-12textproc/markterm/files/patch-ext_litepdf.cpp
+5-5textproc/markterm/distinfo
+4-4textproc/markterm/files/patch-ext_litehtml_src_render__item.cpp
+2-2textproc/markterm/files/patch-ext_litehtml_src_document.cpp
+2-2textproc/markterm/files/patch-ext_litehtml_include_litehtml_types.h
+2-2textproc/markterm/files/patch-ext_litehtml_include_litehtml_render__item.h
+27-272 files not shown
+31-318 files