FreeBSD/ports 72c206cdevel/py-tzdata Makefile distinfo

devel/py-tzdata: Update to 2026.4

Approved by:    kai (maintainer via email)
DeltaFile
+3-3devel/py-tzdata/distinfo
+1-1devel/py-tzdata/Makefile
+4-42 files

FreeBSD/ports 61cd62atextproc/py-zensical Makefile distinfo

textproc/py-zensical: Update to 0.0.62

Approved by:    kai (maintainer via email)
DeltaFile
+3-3textproc/py-zensical/distinfo
+1-1textproc/py-zensical/Makefile
+4-42 files

FreeBSD/ports 0a61592security/vuxml/vuln 2026.xml

security/vuxml: Document multiple strongSwan vulnerabilities

PR:             298372
Sponsored by:   Rubicon Communications, LLC ("Netgate")
DeltaFile
+78-0security/vuxml/vuln/2026.xml
+78-01 files

FreeBSD/src 416611fsys/cam/nvme nvme_da.c, sys/dev/nvme nvme_ns.c

nvme: reject namespaces formatted with metadata

The active LBA format's MS field was never examined. I/O to a
metadata-formatted namespace carries neither interleaved metadata
nor MPTR, so every command is malformed, yet the namespace attaches
as a disk with the wrong sector size.

Reviewed by:    imp, adrian
Differential Revision:  https://reviews.freebsd.org/D59625
DeltaFile
+9-0sys/dev/nvme/nvme_ns.c
+9-0sys/cam/nvme/nvme_da.c
+18-02 files

FreeBSD/ports 57d4f61science/py-tensorflow distinfo Makefile, science/py-tensorflow/files bazelrc

science/py-tensorflow: Fix build

It was broken since with the last update of jsoncpp
its headers were pushed into include/jsoncpp.

Reported by:    fallout
DeltaFile
+9-5science/py-tensorflow/Makefile
+10-1science/py-tensorflow/files/freebsd/cc_toolchain_config.bzl
+2-0science/py-tensorflow/files/bazelrc
+0-1science/py-tensorflow/distinfo
+21-74 files

FreeBSD/ports 28b521dsecurity/strongswan Makefile pkg-plist, security/strongswan/files patch-conf_Makefile.in patch-src_libcharon_plugins_smp_smp.c

security/strongswan: Update 6.0.7 => 6.1.0

Changelog:
https://github.com/strongswan/strongswan/releases/tag/6.1.0

PR:             298372
MFH:            2026Q3
Security:       CVE-2026-78123
Security:       CVE-2026-78124
Security:       CVE-2026-78126
Security:       CVE-2026-78127
Security:       CVE-2026-78129
Security:       CVE-2026-78130
Security:       CVE-2026-78131
Security:       CVE-2026-78132
Security:       CVE-2026-78133
Security:       CVE-2026-78134
Security:       CVE-2026-78135
Sponsored by:   Rubicon Communications, LLC ("Netgate")

    [2 lines not shown]
DeltaFile
+0-23security/strongswan/files/patch-src_libcharon_plugins_smp_smp.c
+3-3security/strongswan/distinfo
+0-5security/strongswan/pkg-plist
+2-2security/strongswan/files/patch-conf_Makefile.in
+2-2security/strongswan/Makefile
+7-355 files

FreeBSD/ports 5a7f758security/strongswan pkg-plist Makefile, security/strongswan/files patch-conf_Makefile.in patch-src_libcharon_plugins_smp_smp.c

security/strongswan: Update 6.0.7 => 6.1.0

Changelog:
https://github.com/strongswan/strongswan/releases/tag/6.1.0

PR:             298372
MFH:            2026Q3
Security:       CVE-2026-78123
Security:       CVE-2026-78124
Security:       CVE-2026-78126
Security:       CVE-2026-78127
Security:       CVE-2026-78129
Security:       CVE-2026-78130
Security:       CVE-2026-78131
Security:       CVE-2026-78132
Security:       CVE-2026-78133
Security:       CVE-2026-78134
Security:       CVE-2026-78135
Sponsored by:   Rubicon Communications, LLC ("Netgate")
DeltaFile
+0-23security/strongswan/files/patch-src_libcharon_plugins_smp_smp.c
+3-3security/strongswan/distinfo
+0-5security/strongswan/pkg-plist
+2-3security/strongswan/Makefile
+2-2security/strongswan/files/patch-conf_Makefile.in
+7-365 files

FreeBSD/ports 2a88a73x11-fm/thunar Makefile distinfo

x11-fm/thunar: Update to 4.20.10
DeltaFile
+3-3x11-fm/thunar/distinfo
+1-1x11-fm/thunar/Makefile
+4-42 files

FreeBSD/src a22eb75sys/dev/tpm tpm_tis_core.c

tpm_tis: Quiesce interrupts before registering a handler

The current interrupt path uses the IRQ resource value directly as the
LPC SIRQ selector in TPM_INT_VECTOR and already restricts it to 1 through
15. This is a driver limitation: a parent interrupt number need not equal
an LPC SIRQ channel, and SPI TPMs can use a separate parallel interrupt.

On the reported system with ACPI IRQ 45, the existing range check runs
after handler registration and returns before disabling firmware interrupt
delivery. This can leave a polling device with a handler on an asserted
source.

Disable and verify interrupt delivery before registering a handler or
starting common TPM services. Preserve the existing range policy, using
polling without registering a handler for routes rejected by that check,
and release their IRQ resources. Keep a failed setup's potentially stale
output cookie out of the device state; the interrupt framework may
already have removed that handler.


    [19 lines not shown]
DeltaFile
+90-23sys/dev/tpm/tpm_tis_core.c
+90-231 files

FreeBSD/ports 44f8819graphics/shotwell distinfo pkg-plist, graphics/shotwell/files patch-meson.build

graphics/shotwell: update to 33.0

Release Notes:
  https://gitlab.gnome.org/GNOME/shotwell/-/blob/33.0/NEWS?ref_type=tags
DeltaFile
+12-12graphics/shotwell/Makefile
+20-0graphics/shotwell/files/patch-meson.build
+5-8graphics/shotwell/pkg-plist
+3-3graphics/shotwell/distinfo
+40-234 files

FreeBSD/src a6b40d7sys/compat/linuxkpi/common/include/linux scatterlist.h, sys/compat/linuxkpi/common/src linux_pci.c

LinuxKPI: Add dma_length field to struct scatterlist

On Linux `dma_length` field of `struct scatterlist` is present on the
arches where DMA mapping code is able to coalesce adjacent segments
of physical address space. It contains total length of coalesced
segments while `length` field contains non-coalesced length of each
segment. On other arches `dma_length` is aliased to `length` field with
`sg_dma_len` macro. As FreeBSD does not merge scatterlist segments it
do not have `dma_length` field. It is appered that at least i915kms
driver depends on existence of `dma_length` field.

Add the field and disable it by default. To enable add to Makefile

.if ${MACHINE_CPUARCH} == "i386" || ${MACHINE_CPUARCH} == "amd64" || \\
    ${MACHINE_CPUARCH} == "aarch64" || ${MACHINE_CPUARCH} == "powerpc"
CFLAGS+=        -DCONFIG_NEED_SG_DMA_LENGTH
.endif

Reported by:    Ryan Fahy

    [4 lines not shown]
DeltaFile
+17-9sys/compat/linuxkpi/common/include/linux/scatterlist.h
+1-0sys/compat/linuxkpi/common/src/linux_pci.c
+18-92 files

FreeBSD/ports c77b145science/ttk Makefile distinfo, science/ttk/files envs.sh patch-core_vtk_ttkWRLExporter_ttkWRLExporter.cpp

science/ttk: update 1.3.0 → 1.4.0
DeltaFile
+241-2science/ttk/pkg-plist
+0-57science/ttk/files/patch-core_vtk_ttkWRLExporter_ttkWRLExporter.cpp
+15-0science/ttk/pkg-message
+3-3science/ttk/distinfo
+3-2science/ttk/Makefile
+2-0science/ttk/files/envs.sh
+264-646 files

FreeBSD/ports fde655cwww/hedgedoc distinfo pkg-descr, www/hedgedoc/files pkg-message.in hedgedoc.in

www/hedgedoc: Add new port

The best platform to write and share markdown.

HedgeDoc (formerly known as CodiMD) is an open-source, web-based,
self-hosted, collaborative markdown editor.

You can use it to easily collaborate on notes, graphs and even
presentations in real-time. All you need to do is to share your
note-link to your co-workers and they're ready to go.

...

This brings back www/hedgedoc which was removed a while back because of
the node.js version on tree.
DeltaFile
+53,785-0www/hedgedoc/pkg-plist
+115-0www/hedgedoc/Makefile
+54-0www/hedgedoc/files/hedgedoc.in
+40-0www/hedgedoc/files/pkg-message.in
+8-0www/hedgedoc/pkg-descr
+5-0www/hedgedoc/distinfo
+54,007-02 files not shown
+54,008-18 files

FreeBSD/ports 87e2831net-im/signal-desktop get_deps.sh Makefile, net-im/signal-desktop/files patch-ts_components_Preferences.dom.tsx pnpm-lock.yaml

net-im/signal-desktop: Update to 8.27.0
DeltaFile
+1,078-659net-im/signal-desktop/files/pnpm-lock.yaml
+5-5net-im/signal-desktop/distinfo
+2-2net-im/signal-desktop/files/patch-ts_components_Preferences.dom.tsx
+1-2net-im/signal-desktop/Makefile
+1-1net-im/signal-desktop/get_deps.sh
+1,087-6695 files

FreeBSD/ports 817a69fsecurity/vuxml/vuln 2026.xml

security/vuxml: document irc/znc vulnerabilities
DeltaFile
+36-0security/vuxml/vuln/2026.xml
+36-01 files

FreeBSD/ports feb1e95mail/postfix-logwatch distinfo Makefile, mail/postfix-logwatch/files patch-postfix-logwatch

mail/postfix-logwatch: update to 1.40.07

Switch upstream to michael.orlitzky.com (SourceForge project abandoned).
Remove patch integrated upstream. Fix variable ordering per portclippy.
DeltaFile
+0-22mail/postfix-logwatch/files/patch-postfix-logwatch
+10-10mail/postfix-logwatch/Makefile
+3-2mail/postfix-logwatch/distinfo
+13-343 files

FreeBSD/ports 18b0af5devel/py-inotify-simple Makefile

devel/py-inotify-simple: Utilize USES=inotify

Suggested by:   makc
DeltaFile
+1-8devel/py-inotify-simple/Makefile
+1-81 files

FreeBSD/src f49dc19share/man/man4 tpm.4

tpm.4: Canonicalize SYNOPSIS and HARDWARE
DeltaFile
+13-19share/man/man4/tpm.4
+13-191 files

FreeBSD/src dc867c3share/man/man4 tslog.4

tslog.4: Canonicalize SYNOPSIS

Also, add the missing blank comment line at the top of the file.

Event:          EuroBSDcon 2026
MFC after:      3 days
DeltaFile
+2-5share/man/man4/tslog.4
+2-51 files

FreeBSD/src 7b70103share/man/man4 udl.4

udl.4: Canonicalize SYNOPSIS

Event:          EuroBSDcon 2026
MFC after:      3 days
DeltaFile
+4-12share/man/man4/udl.4
+4-121 files

FreeBSD/src bba2aebshare/man/man4 udbp.4

udbp.4: Canonicalize SYNOPSIS, structure, SPDX

Event:          EuroBSDcon 2026
MFC after:      3 days
DeltaFile
+33-61share/man/man4/udbp.4
+33-611 files

FreeBSD/src 6fe1d51share/man/man4 udav.4

udav.4: Canonicalize SYNOPSIS + "Fast" Ethernet

Event:          EuroBSDcon 2026
MFC after:      3 days
DeltaFile
+12-20share/man/man4/udav.4
+12-201 files

FreeBSD/src c64f613share/man/man4 ucycom.4

ucycom.4: Canonicalize SYNOPSIS

Event:          EuroBSDcon 2026
MFC after:      3 days
DeltaFile
+6-14share/man/man4/ucycom.4
+6-141 files

FreeBSD/src 08ab66bshare/man/man4 ucom.4

ucom.4: Canonicalize SYNOPSIS + tag SPDX

Event:          EuroBSDcon 2026
MFC after:      3 days
DeltaFile
+14-11share/man/man4/ucom.4
+14-111 files

FreeBSD/ports b36e54ewww/waterfox Makefile distinfo, www/waterfox/files patch-third__party_pipewire_spa_param_audio_layout-types.h

www/waterfox: Update 6.7.1.1 => 6.7.3

Release Notes:
https://www.waterfox.com/releases/6.7.2/
https://www.waterfox.com/releases/6.7.3/

Changelog:
https://github.com/BrowserWorks/waterfox/releases/tag/6.7.2
https://github.com/BrowserWorks/waterfox/releases/tag/6.7.3

PR:             298443
Approved by:    Martin Filla <freebsd at sysctl.cz> (maintainer)
Sponsored by:   UNIS Labs
MFH:            2026Q3

(cherry picked from commit a06489e807ece44cb89c2839c2acb2e8a5adbd0e)
DeltaFile
+29-0www/waterfox/files/patch-third__party_pipewire_spa_param_audio_layout-types.h
+5-5www/waterfox/distinfo
+2-2www/waterfox/Makefile
+36-73 files

FreeBSD/src 28bbe93share/man/man4 ubtbcmfw.4

ubtbcmfw.4: Canonicalize SYNOPSIS + tag SPDX

Event:          EuroBSDcon 2026
MFC after:      3 days
DeltaFile
+6-11share/man/man4/ubtbcmfw.4
+6-111 files

FreeBSD/ports 2cb2680textproc/jqp Makefile, textproc/sttr Makefile

various: Drop Go 1.24 version pin

This is a nop since 1.25 is the oldest supported version.

I thought I'd removed these already...
DeltaFile
+1-1www/zoraxy/Makefile
+1-1www/urlfinder/Makefile
+1-1www/miniflux/Makefile
+1-1www/katana/Makefile
+1-1textproc/sttr/Makefile
+1-1textproc/jqp/Makefile
+6-631 files not shown
+37-3737 files

FreeBSD/ports a06489ewww/waterfox Makefile distinfo, www/waterfox/files patch-third__party_pipewire_spa_param_audio_layout-types.h

www/waterfox: Update 6.7.1.1 => 6.7.3

Release Notes:
https://www.waterfox.com/releases/6.7.2/
https://www.waterfox.com/releases/6.7.3/

Changelog:
https://github.com/BrowserWorks/waterfox/releases/tag/6.7.2
https://github.com/BrowserWorks/waterfox/releases/tag/6.7.3

PR:             298443
Approved by:    Martin Filla <freebsd at sysctl.cz> (maintainer)
MFH:            2026Q3
DeltaFile
+29-0www/waterfox/files/patch-third__party_pipewire_spa_param_audio_layout-types.h
+5-5www/waterfox/distinfo
+2-3www/waterfox/Makefile
+36-83 files

FreeBSD/poudriere eedb18a. README.md

README: point the build badge at SourceHut

Cirrus CI stopped running jobs on 2026-06-01 when Cirrus Labs joined OpenAI,
so the badge no longer renders and its link is dead.  SourceHut has been
building poudriere since 2026-05-05 via .builds/freebsd.yml.

Fixes #1331
DeltaFile
+1-1README.md
+1-11 files

FreeBSD/ports ef78eb4multimedia/tsduck distinfo Makefile

multimedia/tsduck: Update 3.44 => 3.45

While here:
- Add LICENSE_FILE.
- Remove new line between *_DEPENDS (pet portlint).

Changelog:
https://github.com/tsduck/tsduck/blob/v3.45-4798/CHANGELOG.txt

PR:             298457
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q3

(cherry picked from commit dfaab63897358b72fa1f2de582feb0bb8cb3c8d9)
DeltaFile
+49-18multimedia/tsduck/pkg-plist
+3-3multimedia/tsduck/distinfo
+3-3multimedia/tsduck/Makefile
+55-243 files