FreeBSD/ports afd054daudio/ocp pkg-plist distinfo

audio/ocp: Update to 3.4.0
DeltaFile
+6-3audio/ocp/Makefile
+3-3audio/ocp/distinfo
+1-0audio/ocp/pkg-plist
+10-63 files

FreeBSD/ports 9b3e128games/anki Makefile Makefile.crates, games/anki/files patch-package.json

games/anki: Update to 26.08

* Switch to USES=npm and adjust/remove the relevant parts.

  Although Yarn v4 is already being used according to "package.json",
  stick with Yarn v1 for now to complete a 1:1 migration from the before
  to the after state with respect to the used tools during build.

Changelog:

https://github.com/ankitects/anki/releases/tag/26.08
DeltaFile
+5,001-0games/anki/files/packagejsons/yarn.lock
+105-443games/anki/distinfo
+48-217games/anki/Makefile.crates
+106-0games/anki/files/packagejsons/package.json
+10-21games/anki/Makefile
+0-21games/anki/files/patch-package.json
+5,270-7021 files not shown
+5,274-7027 files

FreeBSD/ports 8bd693b. UIDs GIDs, net/turnserver distinfo Makefile

net/turnserver: Update 4.14.0 => 4.16.0

Port changes:
- Run turnserver as non-root by default.
- Pet port(lint|fmt|clippy).

PR:             297251, 296810
Reported by:    Frank Wall <freebsd at moov.de>
Reported by     Zixu Wu <zx at bv3.dev>
Approved by:    Chris Hutchinson <portmaster at bsdforge.com> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
Co-authored-by: Frank Wall <freebsd at moov.de>
Co-authored-by: Zixu Wu <zx at bv3.dev>
Security:       GHSA-5538-7cxj-5jcc
MFH:            2026Q3

(cherry picked from commit 87d11fd7305cb245dff284e34be3a5c0c423aa60)
DeltaFile
+59-45net/turnserver/Makefile
+6-2net/turnserver/files/turnserver.in
+2-2net/turnserver/distinfo
+4-0net/turnserver/files/pkg-message.in
+1-1UIDs
+1-1GIDs
+73-516 files

FreeBSD/ports 87d11fd. UIDs GIDs, net/turnserver distinfo Makefile

net/turnserver: Update 4.14.0 => 4.16.0

Port changes:
- Run turnserver as non-root by default.
- Pet port(lint|fmt|clippy).

PR:             297251, 296810
Reported by:    Frank Wall <freebsd at moov.de>
Reported by     Zixu Wu <zx at bv3.dev>
Approved by:    Chris Hutchinson <portmaster at bsdforge.com> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
Co-authored-by: Frank Wall <freebsd at moov.de>
Co-authored-by: Zixu Wu <zx at bv3.dev>
Security:       GHSA-5538-7cxj-5jcc
MFH:            2026Q3
DeltaFile
+59-45net/turnserver/Makefile
+6-2net/turnserver/files/turnserver.in
+2-2net/turnserver/distinfo
+4-0net/turnserver/files/pkg-message.in
+1-1UIDs
+1-1GIDs
+73-516 files

FreeBSD/ports 6ed5a6csecurity/tailscale Makefile distinfo

security/tailscale: Update to 1.102.2

MFH:            2026Q3
(cherry picked from commit 32960df8d45683365cb0f8e26247e6f7ddd3aa8a)
DeltaFile
+5-5security/tailscale/distinfo
+1-1security/tailscale/Makefile
+6-62 files

FreeBSD/ports 32960dfsecurity/tailscale Makefile distinfo

security/tailscale: Update to 1.102.2

MFH:            2026Q3
DeltaFile
+5-5security/tailscale/distinfo
+1-1security/tailscale/Makefile
+6-62 files

FreeBSD/src 4ebcdb8sys/fs/pseudofs pseudofs.c

pseudofs: Don't purge the cache on shutdown

This is a waste of time and results in a use-after-free if linsysfs is
loaded and a USB network interface is in use, since USB devices are
disconnected at shutdown, which triggers a call into linsysfs, which
then tries to destroy a pseudofs node which has already been purged.

MFC after:      1 week
Reviewed by:    glebius
Differential Revision:  https://reviews.freebsd.org/D58359
DeltaFile
+0-1sys/fs/pseudofs/pseudofs.c
+0-11 files

FreeBSD/ports d8d81e0net Makefile, net/rdma-core pkg-descr distinfo

net/rdma-core: RDMA core userspace libraries and daemons

Reviewed by:    kib
Pull Request:   https://github.com/freebsd/freebsd-ports/pull/570
DeltaFile
+786-0net/rdma-core/pkg-plist
+68-0net/rdma-core/Makefile
+3-0net/rdma-core/pkg-descr
+3-0net/rdma-core/distinfo
+1-0net/Makefile
+861-05 files

FreeBSD/ports 7af3bb1lang/ldc distinfo Makefile, lang/ldc/files patch-gen_target.cpp patch-runtime_druntime_src_core_stdc_config.d

lang/ldc: add new bootstrap for powerpc64le after long double switch

Two new patches:
1. Don't use glibc's dual long double mechanism - we don't support
IBM long double.
2. Use proper mangling.
DeltaFile
+15-0lang/ldc/files/patch-runtime_druntime_src_core_stdc_config.d
+12-0lang/ldc/files/patch-gen_target.cpp
+4-0lang/ldc/Makefile
+2-0lang/ldc/distinfo
+33-04 files

FreeBSD/ports 8c2ac84www/freenginx/files extra-patch-ngnx-gridfs_ngx_http_gridfs_module.c extra-patch-nginx-gridfs_ngx_http_gridfs_module.c, www/nginx-devel/files extra-patch-ngnx-gridfs_ngx_http_gridfs_module.c extra-patch-nginx-gridfs_ngx_http_gridfs_module.c

www/{nginx,nginx-devel,freenginx}: 3rd-pary modules managemeht

Fix build and loading of the 3rd party gridfs module after the
devel/mongo-c-driver 2.x update.

The module config now obtains include and linker flags from
pkg-config instead of deriving them from the ports tree's
DISTVERSION.  The previous approach ran a recursive make into
devel/mongo-c-driver on every make invocation, even with GRIDFS
unset, and derived the libbson include path from the mongo-c-driver
version although devel/libbson is a separate port with its own
DISTVERSION.  Both directories happen to carry the same version
today, so the mismatch was not visible yet.

While here, add the missing assert.h include.  The module calls
assert() without declaring it, which left an unresolvable symbol
"assert" in the shared object -- libc only exports __assert.  Since
nginx dlopen()s modules with RTLD_NOW, load_module refused to load
the module at runtime.

    [5 lines not shown]
DeltaFile
+21-0www/nginx/files/extra-patch-nginx-gridfs_ngx_http_gridfs_module.c
+21-0www/nginx-devel/files/extra-patch-nginx-gridfs_ngx_http_gridfs_module.c
+21-0www/freenginx/files/extra-patch-nginx-gridfs_ngx_http_gridfs_module.c
+0-20www/nginx/files/extra-patch-ngnx-gridfs_ngx_http_gridfs_module.c
+0-20www/nginx-devel/files/extra-patch-ngnx-gridfs_ngx_http_gridfs_module.c
+0-20www/freenginx/files/extra-patch-ngnx-gridfs_ngx_http_gridfs_module.c
+63-609 files not shown
+78-9015 files

FreeBSD/ports 4e5730eprint/lyx Makefile distinfo, print/lyx/files patch-configure.ac

print/lyx: Update to 2.5.1
DeltaFile
+21-2print/lyx/pkg-plist
+3-4print/lyx/files/patch-configure.ac
+3-3print/lyx/distinfo
+2-2print/lyx/Makefile
+29-114 files

FreeBSD/src 3b0a51csys/kern imgact_elf.c

ptrace: Propagate errors from set_fpregs()

(cherry picked from commit 1932bd20ed53f2e695a576cffd183937ed25de3f)
DeltaFile
+4-4sys/kern/imgact_elf.c
+4-41 files

FreeBSD/src 2f9a488sys/amd64/amd64 exec_machdep.c

amd64: do not allow to set reserved bits in MXCSR for ptrace(PT_SETFPREGS)

(cherry picked from commit cef05c5a62ba63eda222eed083972bfaa1449ac2)
DeltaFile
+12-5sys/amd64/amd64/exec_machdep.c
+12-51 files

FreeBSD/src 838878fsys/kern kern_prot.c

getpgrp(2), getsid(2): allow to call on zombies

(cherry picked from commit 8f320c2bc473a775ea9a55d17fa61f729e593867)
DeltaFile
+8-4sys/kern/kern_prot.c
+8-41 files

FreeBSD/src 5adc7b1sys/kern vfs_subr.c, sys/sys mount.h

vfs_busy(): add MBF_PCATCH flag to allow interrupting the sleep

(cherry picked from commit fb4d7bd4b7676963f9f37ff47f315f8c3652538b)
DeltaFile
+16-1sys/kern/vfs_subr.c
+2-1sys/sys/mount.h
+18-22 files

FreeBSD/src abe9c47sys/kern vfs_syscalls.c

statfs(2): allow to interrupt busying

(cherry picked from commit b72f9bfc4513e3e286fb3fc2d07ebdd94ed7ac57)
DeltaFile
+1-1sys/kern/vfs_syscalls.c
+1-11 files

FreeBSD/src 5bdb00blib/libsys stat.2

stat.2: enhance the description of st_blocks

(cherry picked from commit 4c58eef12d30ec699c86d9ab8939253adbf35e79)
DeltaFile
+11-1lib/libsys/stat.2
+11-11 files

FreeBSD/src 8b62109sys/kern imgact_elf.c

ptrace: Propagate errors from set_fpregs()

(cherry picked from commit 1932bd20ed53f2e695a576cffd183937ed25de3f)
DeltaFile
+4-4sys/kern/imgact_elf.c
+4-41 files

FreeBSD/src aea04a8sys/amd64/amd64 exec_machdep.c

amd64: do not allow to set reserved bits in MXCSR for ptrace(PT_SETFPREGS)

(cherry picked from commit cef05c5a62ba63eda222eed083972bfaa1449ac2)
DeltaFile
+12-5sys/amd64/amd64/exec_machdep.c
+12-51 files

FreeBSD/ports d2b0a8dwww/homepage distinfo Makefile

www/homepage: Update to 1.13.2

* Pin nodejs to 22.
* Use @sample in .env file.
* Set .next/ directory and its files to %%USER%%/%%GROUP%% like
  upstream (OCI image of Homepage).

ChangeLogs:

- https://github.com/gethomepage/homepage/releases/tag/v1.12.3
- https://github.com/gethomepage/homepage/releases/tag/v1.13.0
- https://github.com/gethomepage/homepage/releases/tag/v1.13.1
- https://github.com/gethomepage/homepage/releases/tag/v1.13.2
DeltaFile
+2,781-2,980www/homepage/pkg-plist
+3-3www/homepage/distinfo
+3-3www/homepage/Makefile
+2,787-2,9863 files

FreeBSD/ports 4e1f388dns/powerdns-recursor Makefile distinfo

dns/powerdns-recursor: Update to 5.4.4

PR:             296983
Security:       575ddefc-9085-11f1-b295-98b78501ef2a
Security:       CVE-2026-52686
Security:       CVE-2026-52688

(cherry picked from commit 51339cf9613a8e98ba328463eb38e430bdf74ca8)
DeltaFile
+3-3dns/powerdns-recursor/distinfo
+1-1dns/powerdns-recursor/Makefile
+4-42 files

FreeBSD/ports 6106ff6databases/timescaledb pkg-plist Makefile

databases/timescaledb: Update to 2.29.1
DeltaFile
+3-3databases/timescaledb/distinfo
+1-1databases/timescaledb/Makefile
+1-0databases/timescaledb/pkg-plist
+5-43 files

FreeBSD/ports 1aba68asecurity/vuxml/vuln 2026.xml

security/vuxml: Document dns/powerdns-recursor vulnerabilities

PR:             296983
DeltaFile
+31-0security/vuxml/vuln/2026.xml
+31-01 files

FreeBSD/ports 51339cfdns/powerdns-recursor Makefile distinfo

dns/powerdns-recursor: Update to 5.4.4

PR:             296983
Security:       575ddefc-9085-11f1-b295-98b78501ef2a
Security:       CVE-2026-52686
Security:       CVE-2026-52688
DeltaFile
+3-3dns/powerdns-recursor/distinfo
+1-2dns/powerdns-recursor/Makefile
+4-52 files

FreeBSD/src 30ccf2fsys/dev/igc if_igc.c

igc: defer sysctl-driven reinit to the admin task

igc_sysctl_eee() and igc_sysctl_dmac() called igc_if_init() directly.

Request the reset through iflib instead, and skipping while the interface
is down; the new value is picked up by the next init.

Unlike e1000, igc has no ASSERT_CTX_LOCK_HELD and no acquire_swflag
path, so the defect is silent here rather than an assertion failure.

While here also remove unnecessary igc_if_init uses:
iflib_if_init_locked() already runs after IFDI_RESUME and
IFDI_MEDIA_CHANGE, so the trailing *_if_init() only added an unstopped
IFDI_INIT that the following iflib_stop() undoes.

MFC after:      1 week
Differential Revision:  https://reviews.freebsd.org/D58629
DeltaFile
+12-6sys/dev/igc/if_igc.c
+12-61 files

FreeBSD/src abdde8bsys/dev/e1000 if_em.c

e1000: defer sysctl-driven reinit to the admin task

Request the reset through iflib and let the admin task perform the
stop/init under the context lock, matching what the VF and SR-IOV paths
already do.

The assertion is compiled out without INVARIANTS, where the same write
instead resets the MAC and takes the ICH software flag while the queues
stay live and an ioctl or the admin task may be running.

While here also remove unnecessary em_if_init uses:
iflib_if_init_locked() already runs after IFDI_RESUME and
IFDI_MEDIA_CHANGE, so the trailing *_if_init() only added an unstopped
IFDI_INIT that the following iflib_stop() undoes.

MFC after:      1 week
Differential Revision:  https://reviews.freebsd.org/D58628
DeltaFile
+12-6sys/dev/e1000/if_em.c
+12-61 files

FreeBSD/ports 4aaa28bgames/mahjong Makefile

games/mahjong: Add missing RUN_DEPENDS

PR:             295245
Reported by:    l_m at disroot.org
DeltaFile
+3-0games/mahjong/Makefile
+3-01 files

FreeBSD/src bdf9027sys/fs/fuse fuse_vnops.c, tests/sys/fs/fusefs default_permissions.cc

fusefs: fix error handling when reading a directory's sticky bit

When trying to delete or rename a file, fuse_vnop_lookup must check
whether its parent directory's sticky bit is set.  Realistically, the
parent directory's attributes will almost always be cached.  But it's
possible that they won't be, and in that case we must send a new
FUSE_GETATTR request to the server.  If that request fails for some
reason, then we must fail the lookup.  Prior to this change fusefs would
ignore failure of that request.

Reported by:    Yuxiang Yang, Yizhou Zhao, Ao Wang, Xuewei Feng, Qi Li,
                and Ke Xu of Tsinghua University
Reviewed by:    markj
Differential Revision: https://reviews.freebsd.org/D57588

(cherry picked from commit b4af6a4cccc3b4b0ea461463196c258eb92ad2e5)
DeltaFile
+53-0tests/sys/fs/fusefs/default_permissions.cc
+6-4sys/fs/fuse/fuse_vnops.c
+59-42 files

FreeBSD/ports 941a70fsecurity/vuxml/vuln 2026.xml

security/vuxml: Fix affected port version of mail/thunderbird by CVE-2026-6778

Although mail/thunderbird does not actually have PORTEPOCH, one is included in vuxml.
As a result, even fixed versions were still incorrectly reported as vulnerable.

The incorrect report was as follows:

===>  thunderbird-153.0.2 has known vulnerabilities:
thunderbird-153.0.2 is vulnerable:
  Mozilla -- Invalid pointer
  CVE: CVE-2026-6778
  WWW: https://vuxml.FreeBSD.org/freebsd/5124ce36-430a-11f1-a627-b42e991fc52e.html
DeltaFile
+1-1security/vuxml/vuln/2026.xml
+1-11 files

FreeBSD/ports b748a0anet/cloudflare-speed-cli Makefile distinfo

net/cloudflare-speed-cli: Update to 1.0.8
DeltaFile
+3-3net/cloudflare-speed-cli/distinfo
+1-2net/cloudflare-speed-cli/Makefile
+4-52 files