FreeBSD/ports c46096fsecurity/vuxml/vuln 2026.xml

security/vuxml: Add postgreql??-* vulnerabilities

* CVE-2026-6472
* CVE-2026-6473
* CVE-2026-6474
* CVE-2026-6475
* CVE-2026-6476
* CVE-2026-6477
* CVE-2026-6478
* CVE-2026-6479
* CVE-2026-6575
* CVE-2026-6637
* CVE-2026-6638
DeltaFile
+177-0security/vuxml/vuln/2026.xml
+177-01 files

FreeBSD/ports 1b9564edatabases/postgresql14-server distinfo, databases/postgresql15-server distinfo

databases/postgresql??-*: Upgrade to latest version

The PostgreSQL Global Development Group has released an update to all
supported versions of PostgreSQL, including 18.4, 17.10, 16.14, 15.18,
and 14.23. This release fixes 11 security vulnerabilities and over 60
bugs reported over the last several months.

Release notes:  https://www.postgresql.org/docs/release/

PostgreSQL 14 EOL Notice

PostgreSQL 14 will stop receiving fixes on November 12, 2026. If you are
running PostgreSQL 14 in a production environment, we suggest that you
make plans to upgrade to a newer, supported version of PostgreSQL.
Please see our versioning policy for more information.

Security:       7185ecc9-4fb7-11f1-bc50-6cc21735f730
                CVE-2026-6472, CVE-2026-6473, CVE-2026-6474,
                CVE-2026-6475, CVE-2026-6476, CVE-2026-6477,

    [2 lines not shown]
DeltaFile
+3-3databases/postgresql15-server/distinfo
+3-3databases/postgresql14-server/distinfo
+3-3databases/postgresql16-server/distinfo
+3-3databases/postgresql17-server/distinfo
+3-3databases/postgresql18-server/distinfo
+1-1databases/postgresql18-server/Makefile
+16-164 files not shown
+20-2010 files

FreeBSD/ports 3dac59emultimedia/zoneminder/files patch-src_zm__signal.cpp

multimedia/zoneminder: Fix build on aarch64 and armv*

PR:             295090
Reviewed by:    fuz
Sponsored by:   UNIS Labs
DeltaFile
+20-0multimedia/zoneminder/files/patch-src_zm__signal.cpp
+20-01 files

FreeBSD/ports a7ce159sysutils/RyzenAdj distinfo Makefile, sysutils/RyzenAdj/files patch-CMakeLists.txt

sysutils/RyzenAdj: Update 0.17.0 => 0.19.0

Changelog:
https://github.com/FlyGoat/RyzenAdj/releases/tag/v0.19.0

PR:             295285
Sponsored by:   UNIS Labs
MFH:            2026Q2

(cherry picked from commit 1d5630179a051c8ed4f70d15b4ead2c00b0f0b78)
DeltaFile
+20-0sysutils/RyzenAdj/files/patch-CMakeLists.txt
+3-3sysutils/RyzenAdj/distinfo
+2-2sysutils/RyzenAdj/Makefile
+25-53 files

FreeBSD/ports 1d56301sysutils/RyzenAdj distinfo Makefile, sysutils/RyzenAdj/files patch-CMakeLists.txt

sysutils/RyzenAdj: Update 0.17.0 => 0.19.0

Changelog:
https://github.com/FlyGoat/RyzenAdj/releases/tag/v0.19.0

PR:             295285
Sponsored by:   UNIS Labs
MFH:            2026Q2
DeltaFile
+20-0sysutils/RyzenAdj/files/patch-CMakeLists.txt
+3-3sysutils/RyzenAdj/distinfo
+2-2sysutils/RyzenAdj/Makefile
+25-53 files

FreeBSD/ports fa8d4eenet/spoofdpi distinfo Makefile, net/spoofdpi/files modules.txt

net/spoofdpi: Update 1.5.1 => 1.5.2

Changelog:
https://github.com/xvzc/spoofdpi/releases/tag/v1.5.2

Approved by:    osa, vvd (Mentors, implicit)
DeltaFile
+21-21net/spoofdpi/distinfo
+14-13net/spoofdpi/files/modules.txt
+11-12net/spoofdpi/Makefile
+46-463 files

FreeBSD/ports 7c9c7aatextproc/moor distinfo Makefile

textproc/moor: Update 2.13.1 => 2.13.2

Changelog:
https://github.com/walles/moor/releases/tag/v2.13.2

Approved by:    osa, vvd (Mentors, implicit)
DeltaFile
+5-5textproc/moor/distinfo
+1-1textproc/moor/Makefile
+6-62 files

FreeBSD/ports 2997a24sysutils Makefile

sysutils/storcli2: New port: SAS4 MegaRAID FreeBSD StorCLI2

Command Line Interface for the MegaRAID SAS4 family of RAID controllers,
used to configure and manage connected storage devices.

The StorCLI2 tool supports the following controllers:
 * MegaRAID 9600 Family eHBA Adapters
 * MegaRAID 9620 Family eHBA Adapters
 * MegaRAID 9660 Family RAID Adapters
 * MegaRAID 9670 Family RAID Adapters

https://techdocs.broadcom.com/us/en/storage-and-ethernet-connectivity/enterprise-storage-solutions/megaraid8-tri-mode-software/1-0/StorCLI_MR8_Intro.html

PR:             293540
Sponsored by:   UNIS Labs
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>
DeltaFile
+1-0sysutils/Makefile
+1-01 files

FreeBSD/ports fa513a9sysutils/storcli2 Makefile distinfo

sysutils/storcli2: New port: SAS4 MegaRAID FreeBSD StorCLI2

Command Line Interface for the MegaRAID SAS4 family of RAID controllers,
used to configure and manage connected storage devices.

The StorCLI2 tool supports the following controllers:
 * MegaRAID 9600 Family eHBA Adapters
 * MegaRAID 9620 Family eHBA Adapters
 * MegaRAID 9660 Family RAID Adapters
 * MegaRAID 9670 Family RAID Adapters

https://techdocs.broadcom.com/us/en/storage-and-ethernet-connectivity/enterprise-storage-solutions/megaraid8-tri-mode-software/1-0/StorCLI_MR8_Intro.html

PR:             293540
Sponsored by:   UNIS Labs
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>
DeltaFile
+12-12sysutils/storcli2/Makefile
+3-3sysutils/storcli2/distinfo
+15-152 files

FreeBSD/ports 8449abdsysutils/storcli2 Makefile distinfo

sysutils/storcli2: Repocopy from sysutils/storcli

PR:             293540
Sponsored by:   UNIS Labs
DeltaFile
+57-0sysutils/storcli2/Makefile
+3-0sysutils/storcli2/distinfo
+2-0sysutils/storcli2/pkg-descr
+62-03 files

FreeBSD/ports bc71934emulators/pcsx2/files patch-3rdparty-fmt-include-fmt-format.h

emulators/pcsx2: Fix build on -CURRENT
DeltaFile
+10-0emulators/pcsx2/files/patch-3rdparty-fmt-include-fmt-format.h
+10-01 files

FreeBSD/src fb4e789sys/cam cam_ccb.h, sys/dev/nvme nvme_sim.c

Revert "nvme: Only attach to storage NVMe devices"

This reverts commit 0a19464bf7afa35ce2aa7649152bc3a7629faa98. It's
incorrect for ahci attachments. Reverting to merge to stable/15
to merge to releng/15.1 for the release.

Sponsored by:           Netflix
DeltaFile
+1-8sys/dev/nvme/nvme_sim.c
+1-1sys/cam/cam_ccb.h
+2-92 files

FreeBSD/doc 469aa41documentation/content/en/books/handbook/boot _index.adoc

boot: Replace occurrences of qualified name with full path

In many parts of this chapter the use of "qualified name" and
"unqualified name" was used to refer to a full path to a file (or just
the filename). This terminology is used more in networking terms (i.e.
fully qualified hostname) and is strange to use when referring to files
and directories in a filesystem. It leads to confusion for the reader,
which is why I replaced it throughout the chapter with the more commonly
used term "full path" where appropriate.

While here, remove some whitespaces at the end of sentences.

PR:     292300
DeltaFile
+11-6documentation/content/en/books/handbook/boot/_index.adoc
+11-61 files

FreeBSD/src 988c039sys/compat/linuxkpi/common/include/linux io.h

linux/io: handle memtype_wc mapping for !DMAP range

The amdgpu driver in drm-kmod will attempt to update/reserve certain GPU
VRAM ranges as write-combining. Depending on the system, this address
range may fall outside of FreeBSD's constructed DMAP. We cannot use
pmap_change_attr() in this case.

When INVARIANTS is enabled, this results in the following:

  panic: physical address 0x880000000 not covered by the DMAP

Add a guard against triggering the KASSERT in PHYS_TO_DMAP().

This limitation in our implementation of arch_io_reserve_memtype_wc() is
already known in drm-kmod's amdgpu_bo_init(), and errors are ignored
there (see "BSDFIXME"). This change is only to eliminate the preventable
assertion failure within this scheme.

Tested by:      kevans

    [4 lines not shown]
DeltaFile
+6-1sys/compat/linuxkpi/common/include/linux/io.h
+6-11 files

FreeBSD/ports 901ca63www/nginx distinfo version.mk

www/nginx: Update to 1.30.1

PR:             295270
Approved by:    security/blanket
Security:       3414ac89-4f9f-11f1-a1c0-0050569f0b83
DeltaFile
+3-3www/nginx/distinfo
+1-1www/nginx/version.mk
+4-42 files

FreeBSD/ports 78c6cd4security/vuxml/vuln 2026.xml

security/vuxml: Document www/nginx DoS/RCE

PR:             295270
Security:       3414ac89-4f9f-11f1-a1c0-0050569f0b83
DeltaFile
+52-0security/vuxml/vuln/2026.xml
+52-01 files

FreeBSD/ports 09e01bbdevel/nextpnr-devel distinfo Makefile

devel/nextpnr-devel: Update to 2026-05-12
DeltaFile
+3-3devel/nextpnr-devel/distinfo
+2-2devel/nextpnr-devel/Makefile
+5-52 files

FreeBSD/ports e38a015lang/racket-minimal Makefile

lang/racket-minimal: Preserve .rackboot section when stripping gracket

PR:             291732
Submitted by:   Wes Frazier
DeltaFile
+6-0lang/racket-minimal/Makefile
+6-01 files

FreeBSD/src 4cdcacbsys/dev/usb usbdevs

usbdevs: Add TP-Link UB500 (RTL8761BUV) USB ID

This device is not yet supported.

Unfortunately some recently purchased UB400 dongles also contain this
Realtek IC.

Sponsored by:   The FreeBSD Foundation
DeltaFile
+1-0sys/dev/usb/usbdevs
+1-01 files

FreeBSD/ports d5ccef5devel/py-maturin distinfo Makefile.crates, devel/py-maturin/files patch-maturin-__init__.py

devel/py-maturin: Update to 1.13.3

* Rebase patch and add a boilerplate as well for future reference while
  I'm here.

Changelogs since 1.13.1:

https://github.com/PyO3/maturin/releases/tag/v1.13.3
https://github.com/PyO3/maturin/releases/tag/v1.13.2
DeltaFile
+319-289devel/py-maturin/distinfo
+158-143devel/py-maturin/Makefile.crates
+17-8devel/py-maturin/files/patch-maturin-__init__.py
+1-2devel/py-maturin/Makefile
+495-4424 files

FreeBSD/ports 01156d4textproc/py-zensical distinfo Makefile, textproc/py-zensical/files patch-pyproject.toml

textproc/py-zensical: Update to 0.0.41

* While I'm here, adjust the version requirements now that py-click has
  recently been updated.

Changelog:

https://github.com/zensical/zensical/releases/tag/v0.0.41
DeltaFile
+3-3textproc/py-zensical/distinfo
+2-4textproc/py-zensical/files/patch-pyproject.toml
+2-2textproc/py-zensical/Makefile
+7-93 files

FreeBSD/ports 31321eblang/racket Makefile

lang/racket: Preserve .rackboot section when stripping gracket

PR:             291732
Submitted by:   Wes Frazier
DeltaFile
+6-0lang/racket/Makefile
+6-01 files

FreeBSD/ports c0b7767security/vuxml/vuln 2026.xml

security/vuxml: Document new mail/mailpit vulnerabilities
DeltaFile
+43-0security/vuxml/vuln/2026.xml
+43-01 files

FreeBSD/ports 9c35881devel/gumbo Makefile distinfo

devel/gumbo: Update 0.13.0 => 0.13.2

Changelog:
https://codeberg.org/gumbo-parser/gumbo-parser/src/tag/0.13.2/CHANGES.md

Improve port:
- Switch from fork to upstream.
- Replace PORTVERSION with DISTVERSION.
- Sort USES.
- MV in post-extract with custom WRKSRC.
- Remove unnecessary STRIP_CMD - INSTALL_TARGET=install-strip is enough.

PR:             294862
Approved by:    bdrewery (maintainer, timeout 2 weeks)
Sponsored by:   UNIS Labs
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>
DeltaFile
+5-9devel/gumbo/Makefile
+3-3devel/gumbo/distinfo
+8-122 files

FreeBSD/ports 83ce0f3devel/onetbb/files patch-test_common_utils_concurrency_limit.h-affinity patch-test_common_memory_usage.h

devel/onetbb: Update to 2023.0.0

and fix building of two dependent ports [1].

Release notes:  https://github.com/uxlfoundation/oneTBB/blob/v2023.0.0/RELEASE_NOTES.md
Approved by:    blanket [1]
DeltaFile
+0-57devel/onetbb/files/patch-test_common_utils_concurrency_limit.h-affinity
+0-34devel/onetbb/files/patch-test_common_memory_usage.h
+0-26devel/onetbb/files/patch-include_oneapi_tbb_detail__exception.h
+0-24devel/onetbb/files/patch-test_common_utils_concurrency_limit.h
+0-24devel/onetbb/files/patch-test_CMakeLists.txt
+0-23devel/onetbb/files/patch-src_tbb_co_context.h
+0-1889 files not shown
+37-21515 files

FreeBSD/src aa92784lib/libc/gen timespec_getres.3 timespec_get.3

libc/timespec_get*.3: expose STANDARDS section

We now have .St -isoC-2023, so the STANDARDS section can go live.

Fixes:          9b5d724cad10087e34165199e55f15f2df744ed5
MFC after:      1 week
DeltaFile
+6-6lib/libc/gen/timespec_getres.3
+5-5lib/libc/gen/timespec_get.3
+11-112 files

FreeBSD/src 6825176lib/libc/stdtime ctime.3

libc/ctime.3: timegm() is in C23.

See also:       D53951, https://wiki.freebsd.org/C23
MFC after:      1 week
DeltaFile
+4-3lib/libc/stdtime/ctime.3
+4-31 files

FreeBSD/ports cc12f45security/vuxml/vuln 2026.xml

security/vuxml: Update entry for (py-)setuptools CVE-2025-47273

Expand this to our ancient ports to according to upstream report.
Affects devel/py-setuptools44 and devel/py-setuptools58
DeltaFile
+7-0security/vuxml/vuln/2026.xml
+7-01 files

FreeBSD/ports a6e4ca9www/reproxy distinfo Makefile

www/reproxy: the port had been updated to version 1.6.0

Unfortunately it now requires non-default Go[lang] 1.26.

Reported by:    portscout
DeltaFile
+3-3www/reproxy/distinfo
+2-3www/reproxy/Makefile
+5-62 files

FreeBSD/ports fca7f3eprint/pdfcpu distinfo Makefile

print/pdfcpu: Update to 0.12.1

Slight adjustment of version reporting in the compiled bianry

Changelog: https://github.com/pdfcpu/pdfcpu/releases/tag/v0.12.1
DeltaFile
+5-5print/pdfcpu/distinfo
+3-2print/pdfcpu/Makefile
+8-72 files