FreeBSD/ports 440a623 — security/vuxml/vuln 2026.xml

security/vuxml: Document DSA sig vuln in pycryptodome(x) < 3.24.1

Sponsored by: Saltant Solutions LLC
DeltaFile
+49-0security/vuxml/vuln/2026.xml
+49-01 files

FreeBSD/ports 1527e33 — net/freerdp3 pkg-plist distinfo

net/freerdp3: Update 3.32.1 => 3.32.2

Changelog:
https://github.com/FreeRDP/FreeRDP/releases/tag/3.32.2
https://github.com/FreeRDP/FreeRDP/blob/3.32.2/ChangeLog

Security:       GHSA-4g67-jhpc-q5xp
Security:       GHSA-799q-hjgw-g55g
Security:       GHSA-cg4f-57hc-v7w7
Security:       GHSA-rrp5-666j-g6gp
Security:       GHSA-wg7g-gx9g-r96c
Security:       GHSA-f53w-3364-jr35
Security:       GHSA-66mr-7wc7-23vc
Security:       GHSA-hqf8-95c7-6r92
Security:       GHSA-8g9g-hqqp-fw69
Security:       GHSA-jq25-3374-4262
Security:       GHSA-7qw2-8h66-pvpw
Security:       GHSA-5j39-x36c-x9pm
Security:       GHSA-6p3w-fv52-cf24

    [36 lines not shown]
DeltaFile
+14-18net/freerdp3/Makefile
+3-11net/freerdp3/distinfo
+2-0net/freerdp3/pkg-plist
+19-293 files

FreeBSD/ports 3a3ea9a — net/freerdp3 pkg-plist distinfo

net/freerdp3: Update 3.32.1 => 3.32.2

Changelog:
https://github.com/FreeRDP/FreeRDP/releases/tag/3.32.2
https://github.com/FreeRDP/FreeRDP/blob/3.32.2/ChangeLog

Security:       GHSA-4g67-jhpc-q5xp
Security:       GHSA-799q-hjgw-g55g
Security:       GHSA-cg4f-57hc-v7w7
Security:       GHSA-rrp5-666j-g6gp
Security:       GHSA-wg7g-gx9g-r96c
Security:       GHSA-f53w-3364-jr35
Security:       GHSA-66mr-7wc7-23vc
Security:       GHSA-hqf8-95c7-6r92
Security:       GHSA-8g9g-hqqp-fw69
Security:       GHSA-jq25-3374-4262
Security:       GHSA-7qw2-8h66-pvpw
Security:       GHSA-5j39-x36c-x9pm
Security:       GHSA-6p3w-fv52-cf24

    [34 lines not shown]
DeltaFile
+14-18net/freerdp3/Makefile
+3-11net/freerdp3/distinfo
+2-0net/freerdp3/pkg-plist
+19-293 files

FreeBSD/src 1ca7f66 — usr.bin/ncal ncal.c, usr.bin/ncal/tests regress.se-r-jd-171202-nhl.out regress.se-r-jd-170003-nhl.out

ncal(1): handle Sweden's transitional calendar (1700-1712)

Sweden used a unique intermediate calendar during 1700-1712.  In 1700,
Sweden omitted the Julian leap day (Feb 29, 1700) to begin a gradual
transition to the Gregorian calendar.  The transition was abandoned
mid-way due to the Great Northern War; to revert to the Julian calendar,
an extra day "Feb 30, 1712" was added.  Sweden finally adopted the
Gregorian calendar in 1753 (already handled correctly by ncal).

ncal previously displayed Feb 1700 as a 29-day month and Feb 1712 as a
29-day month, both incorrect for the Swedish (-s SE) calendar mode.

Add flag_sweden, which is set when the SE country code is selected (via
-s SE or the locale) and cleared by -J, since -J selects the plain
Julian calendar.  When active, sndaysr() and sdater() apply the one-day
offset that characterised the Swedish transitional calendar:

  - Feb 1700: displayed with 28 days (no leap day)
  - 1700-03-01 to 1712-02-30: dates run one day ahead of Julian, so

    [15 lines not shown]
DeltaFile
+36-0usr.bin/ncal/tests/ncal_test.sh
+24-0usr.bin/ncal/ncal.c
+8-0usr.bin/ncal/tests/regress.se-r-jd-171202-nhl.out
+8-0usr.bin/ncal/tests/regress.se-r-jd-170003-nhl.out
+8-0usr.bin/ncal/tests/regress.se-r-3-1712-nhl.out
+8-0usr.bin/ncal/tests/regress.se-r-3-1700-nhl.out
+92-02 files not shown
+105-08 files

FreeBSD/ports 25cd6b3 — net/norm distinfo Makefile

net/norm: use upstream divert(4) patch to make it working on modern FreeBSD

This was accepted upstream to the protolib and added to the port in
ab6be4dbf3bb.  Recently the patching was silently deleted in 5963119a132c.
The update of norm to 1.5.9 did not update the bundled dependency protolib
to a version that includes ba9ca1ca7d73592268ebfd5a43271303e76f461e,
instead it tied protolib to an older version.

Fixes:  5963119a132cd71510998f9173c54522a8e56678
DeltaFile
+4-0net/norm/Makefile
+2-0net/norm/distinfo
+6-02 files

FreeBSD/ports e35b01d — sysutils/acpica-tools Makefile distinfo

sysutils/acpica-tools: Update to 20260930
DeltaFile
+3-3sysutils/acpica-tools/distinfo
+1-1sysutils/acpica-tools/Makefile
+4-42 files

FreeBSD/src 398254f — sys/sys mbuf.h

mbuf: simplify m_free

The check for  (M_PKTHDR|M_NOFREE) was added by np@ in
"91d1b03d3617 Merge r254736 from user/np/cxl_tuning."
in order to support a clever rx mode optimization used
by cxgbe at the time.  That optimization was removed in
46e1e307edb6 several years ago.  This check is otherwise
unneeded and adds an extraneous test to every mbuf free,
so let's remove it.

Reviewed by: glebius, np
Differential Revision: https://reviews.freebsd.org/D60686
Sponsored by: Netflix
DeltaFile
+0-2sys/sys/mbuf.h
+0-21 files

FreeBSD/ports d87fa4d — devel/laminar pkg-plist distinfo

devel/laminar: Update 1.3 => 1.4

While here:
- Apply upstream fixes d25b7a4 and e62148b.
- Fix pkg-plist for shell completions.
- Unmark BROKEN since it compiles with recent Boost fine.

Changelog:
https://github.com/ohwgiles/laminar/releases/tag/1.4

PR:             299211
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q4

(cherry picked from commit 727c80a7a9ae523f7449353925e8bc082e73fcb4)
DeltaFile
+17-7devel/laminar/Makefile
+9-5devel/laminar/distinfo
+2-2devel/laminar/pkg-plist
+28-143 files

FreeBSD/ports 727c80a — devel/laminar pkg-plist distinfo

devel/laminar: Update 1.3 => 1.4

While here:
- Apply upstream fixes d25b7a4 and e62148b.
- Fix pkg-plist for shell completions.
- Unmark BROKEN since it compiles with recent Boost fine.

Changelog:
https://github.com/ohwgiles/laminar/releases/tag/1.4

PR:             299211
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q4
DeltaFile
+17-7devel/laminar/Makefile
+9-5devel/laminar/distinfo
+2-2devel/laminar/pkg-plist
+28-143 files

FreeBSD/ports fe7bcd9 — databases/libnusqlite3 Makefile distinfo

databases/libnusqlite3: Update to 1.18

Adds unicode 18.0.0 character set support.

Changelog:      https://bitbucket.org/alekseyt/nunicode/src/1.18/CHANGELOG

Approved by:    dtxdf (mentor)
Differential Revision:  https://reviews.freebsd.org/D60641
DeltaFile
+8-4databases/libnusqlite3/pkg-descr
+3-3databases/libnusqlite3/distinfo
+2-2databases/libnusqlite3/Makefile
+13-93 files

FreeBSD/ports 41c2b05 — databases/libnusqlite3 Makefile, multimedia/jellyfin-ffmpeg Makefile

*/*: Change maintainer address to my @FreeBSD.org email

Approved by:    dtxdf (mentor)
Differential Revision:  https://reviews.freebsd.org/D60637
DeltaFile
+1-1sysutils/fjord/Makefile
+1-1multimedia/jellyfin-ffmpeg7/Makefile
+1-1multimedia/jellyfin-ffmpeg/Makefile
+1-1databases/libnusqlite3/Makefile
+4-44 files

FreeBSD/src cdd9503 — sys/net iflib.c

iflib: unify prefetching

This change makes all prefetching use the iflib prefetch wrappers, rather
than using prefetch() in some places and __builtin_prefetch() in others.

Note that __builtin_prefetch() does not work in the kernel on amd64 as clang
disables it when -mnosse is specified, so we must use the asm directives there,
and builtin_prefetch() elsewhere.

This change enables prefetching on non-x86 (notably arm64), and it enables
prefetching in netmap that has been there since day one, but which has never worked.

This is a no-op on non-netmap amd64 and i386

Differential Revision: https://reviews.freebsd.org/D60602
Reviewed by: glebius, kbowling
Sponsored by: Netflix
DeltaFile
+25-33sys/net/iflib.c
+25-331 files

FreeBSD/ports 9ef51b3 — games/vkquake Makefile distinfo, games/vkquake/files patch-Quake_common.c

games/vkquake: Update to 1.37.0

Notable changes:
+ autosaves in single-player!
+ added player speed display!
+ added ambient occlusion
+ improved performance and bugfixes

MFH:            2026Q3
Changes:        https://github.com/Novum/vkQuake/releases/tag/1.37.0
(cherry picked from commit 0c610d8eab1ce04779e3e6f2c7693f95faafdea8)
DeltaFile
+3-3games/vkquake/files/patch-Quake_common.c
+3-3games/vkquake/distinfo
+1-1games/vkquake/Makefile
+7-73 files

FreeBSD/ports 9a39292 — games/vkquake Makefile distinfo

games/vkquake: Update to 1.36.0 + take maintainer

Notable changes:
+ Support for 30th anniversary remaster
+ New level select menu
+ 5 new selectable crosshairs
+ more UI graphics filtering options
+ quake console seriously improved
+ multiplayer menu enhanced
+ lots of performance fixes, which were noticable on my laptop

PR:             298434
Approved by:    Amelia Marsh <seafork at disroot.org> (maintainer timeout)

(cherry picked from commit 058caa7c245ccafcd5105d8afad84a1a91fbafed)
DeltaFile
+3-3games/vkquake/distinfo
+2-2games/vkquake/Makefile
+5-52 files

FreeBSD/ports 0c610d8 — games/vkquake Makefile distinfo, games/vkquake/files patch-Quake_common.c

games/vkquake: Update to 1.37.0

Notable changes:
+ autosaves in single-player!
+ added player speed display!
+ added ambient occlusion
+ improved performance and bugfixes

MFH:            2026Q3
Changes:        https://github.com/Novum/vkQuake/releases/tag/1.37.0
DeltaFile
+3-3games/vkquake/files/patch-Quake_common.c
+3-3games/vkquake/distinfo
+1-1games/vkquake/Makefile
+7-73 files

FreeBSD/ports ea8f620 — www/freenginx Makefile, www/nginx Makefile

www/{nginx,nginx-devel,freenginx}: 3rd-party modules management

- Announce the removal of the HTTP_NOTICE option after 2026-12-31.
  nginx can return a fixed body itself.
- Announce the removal of the HTTP_UPSTREAM_STICKY option after
  2026-12-31 in nginx and nginx-devel. nginx has its own sticky
  directive since 1.29.6, freenginx does not.

Sponsored by:   Netzkommune GmbH
DeltaFile
+12-0www/nginx/Makefile
+12-0www/nginx-devel/Makefile
+6-0www/freenginx/Makefile
+30-03 files

FreeBSD/src 2b911d9 — sys/kern kern_rmlock.c

rms: Order a writer's stores before its readers see it leave

Readers check rms->writers without a fence, and rms_wunlock() drops
it with a plain store.  rms_wlock() interrupts every CPU before the
first writer blocks readers, but nothing orders them when the last
writer leaves: on a weakly ordered CPU a reader can see the count
reach zero and still read what the writer replaced, such as callbacks
of a module unloaded under the lock.

Fence every CPU before the last writer drops the count: rename
rms_wlock_switch() to rms_block_readers() and add
rms_unblock_readers(), a wrapper for cpus_fence_seq_cst().  Readers
stay fence-free; the cost lands on the rare unlock.

Reviewed by:            mjg
Discussed with:         kib
Fixes:                  1f162fef76a0 ("Add read-mostly sleepable locks")
MFC after:              2 weeks
Sponsored by:           Rubicon Communications, LLC ("Netgate")
Differential Revision:  https://reviews.freebsd.org/D60658
DeltaFile
+20-3sys/kern/kern_rmlock.c
+20-31 files

FreeBSD/ports 5393755 — www/fmd-server Makefile distinfo

www/fmd-server: update to 0.17.0

Release notes: https://gitlab.com/fmd-foss/fmd-server/-/releases/v0.17.0
DeltaFile
+77-87www/fmd-server/distinfo
+15-23www/fmd-server/Makefile
+92-1102 files

FreeBSD/ports 83997ec — graphics/feh Makefile, graphics/feh/files patch-config.mk

graphics/feh: Fix build with DOCS or EXAMPLES off

Upstream 3.13 moved the list of install targets from the Makefile to
INSTALL_TARGETS in config.mk.  This meant the
install-doc/install-examples substitutions only deleted the rules and
left the upstream Makefile dependencies in place.

Edit INSTALL_TARGETS instead, and replace the config.mk patch with
example_dir passed via MAKE_ARGS.

Reported by:    Dan Allen <danallen46 at gmail.com>
Sponsored by:   The FreeBSD Foundation
DeltaFile
+0-11graphics/feh/files/patch-config.mk
+5-4graphics/feh/Makefile
+5-152 files

FreeBSD/ports 23b4c6b — www/phpmyfaq Makefile distinfo

www/phpmyfaq: Update to 4.1.10

(cherry picked from commit f97281784b9d5a53830e3eee3a0a785c06d94127)
DeltaFile
+72-8www/phpmyfaq/pkg-plist
+3-3www/phpmyfaq/distinfo
+1-1www/phpmyfaq/Makefile
+76-123 files

FreeBSD/ports dc89908 — net-mgmt/icingaweb2-module-director Makefile distinfo

net-mgmt/icingaweb2-module-director: Update to 1.12.1
DeltaFile
+105-24net-mgmt/icingaweb2-module-director/pkg-plist
+3-3net-mgmt/icingaweb2-module-director/distinfo
+2-2net-mgmt/icingaweb2-module-director/Makefile
+110-293 files

FreeBSD/ports f972817 — www/phpmyfaq Makefile distinfo

www/phpmyfaq: Update to 4.1.10
DeltaFile
+72-8www/phpmyfaq/pkg-plist
+3-3www/phpmyfaq/distinfo
+1-1www/phpmyfaq/Makefile
+76-123 files

FreeBSD/ports a4f5427 — www/limesurvey Makefile distinfo

www/limesurvey: Update to 7.5.1
DeltaFile
+3-3www/limesurvey/distinfo
+2-2www/limesurvey/Makefile
+5-52 files

FreeBSD/ports 45ad57f — textproc/p5-XML-Feed Makefile distinfo

textproc/p5-XML-Feed: update 1.0.0 -> 1.0.2

Changelog: https://metacpan.org/dist/XML-Feed/changes
DeltaFile
+3-3textproc/p5-XML-Feed/distinfo
+1-1textproc/p5-XML-Feed/Makefile
+4-42 files

FreeBSD/ports 0282721 — net Makefile, net/libmodbus distinfo pkg-plist

Revert "net/libmodbus: [NEW PORT] Modbus TCP/RTU library for industrial communications"

* This is the duplicate of comms/libmodbus

This reverts commit 6479175b5c5c80fd1b9912cc30d925ec16b76af7.

PR:          299193
DeltaFile
+0-28net/libmodbus/Makefile
+0-10net/libmodbus/pkg-descr
+0-8net/libmodbus/pkg-plist
+0-3net/libmodbus/distinfo
+0-1net/Makefile
+0-505 files

FreeBSD/ports 7197a9c — databases/mysql267-server Makefile pkg-plist, databases/mysql267-server/files mysqlrouter.in patch-cmake_install__layout.cmake

databases/mysql267-{server|client}: Add New Port

Welcome MySQL 26.7

MySQL switched to calendar versioning (YY.M) after the 9.7 LTS series,
so 26.7.0 is the first Innovation release after 9.7; there is no 9.8.

What is new in MySQL 26.7:
https://dev.mysql.com/doc/relnotes/mysql/26.7/en/news-26-7-0.html

Compared to mysql97:
- Drop patches for backup_page_tracker.cc and stdx/filesystem.cc,
  merged upstream
- Add a missing <time.h> include to mgmapi.h, needed for the new
  time_t member of ndb_mgm_cert_table
- Build as C++23 like upstream and drop USE_CXXSTD=c++20
- Drop -malign-double, an i386 workaround while i386 is excluded
- Drop WITH_BOOST, boost is bundled under extra/boost now
- Drop -DWITH_xxx=system already covered by WITH_SYSTEM_LIBS

    [6 lines not shown]
DeltaFile
+327-0databases/mysql267-server/pkg-plist
+157-0databases/mysql267-server/Makefile
+151-0databases/mysql267-server/files/patch-storage_innobase_ut_crc32.cc
+134-0databases/mysql267-server/files/patch-sql_rpl__log__encryption.cc
+95-0databases/mysql267-server/files/patch-cmake_install__layout.cmake
+93-0databases/mysql267-server/files/mysqlrouter.in
+957-060 files not shown
+2,554-166 files

FreeBSD/doc 3a7bb1e — website/content/en/status/report-2026-07-2026-09 truss.adoc

Status/2026Q3/truss.adoc: Add report

Approved by:    salvadore
Reviewed by:    salvadore
Differential Revision:  https://reviews.freebsd.org/D59318
DeltaFile
+48-0website/content/en/status/report-2026-07-2026-09/truss.adoc
+48-01 files

FreeBSD/ports 04cf9f7 — x11 Makefile, x11/framework-laptop12 distinfo pkg-descr

x11/framework-laptop12: New port

Meta-port for the Framework Laptop 12 on FreeBSD X11

Reviewed by:    jrm
Differential Revision:  https://reviews.freebsd.org/D60627
DeltaFile
+22-0x11/framework-laptop12/Makefile
+13-0x11/framework-laptop12/pkg-descr
+3-0x11/framework-laptop12/distinfo
+1-0x11/Makefile
+39-04 files

FreeBSD/ports 8292519 — x11 Makefile, x11/framework-keyboard distinfo pkg-descr

x11/framework-keyboard: New port

Meta-port for the Framework laptop Fn row and media keys.

Reviewed by:    jrm
Differential Revision:  https://reviews.freebsd.org/D60618
DeltaFile
+27-0x11/framework-keyboard/Makefile
+9-0x11/framework-keyboard/pkg-descr
+3-0x11/framework-keyboard/distinfo
+1-0x11/Makefile
+40-04 files

FreeBSD/src 39d6e22 — sys/arm64/arm64 identcpu.c pmap.c, sys/arm64/include cpu.h

arm64: Fix and rename midr_check_var_part_range()

At the lowest and highest variants in the specified range,
midr_check_var_part_range() was comparing the part number, rather than
the revision, against the bounds.  In other words, the "Y" in "rXpY"
should be compared to CPU_REV() instead of CPU_PART().  Apply this
correction, and rename the function to midr_check_var_rev_range() to
better reflect the field that we are checking.

Reported by:    Claude Code (Opus 5.5)
Reviewed by:    andrew
MFC after:      1 week
Differential Revision:  https://reviews.freebsd.org/D60624
DeltaFile
+11-6sys/arm64/include/cpu.h
+2-2sys/arm64/arm64/pmap.c
+1-1sys/arm64/arm64/identcpu.c
+14-93 files