BSD Commit Log Search

www/bunkerweb: Update to 1.6.15

Fixes an unauthenticated RCE in the worker API (GHSA-xcv3-gjwr-rwxw),
a WAF filename bypass via RFC 2231 encoding (GHSA-cvfx-2ffg-cqmj) and
three API permission flaws.

1.6.15 imports Configurator in the scheduler and the web UI, so add
common/gen to their PYTHONPATH. Run the Alembic migration before the
scheduler starts, upstream does this in its systemd wrapper, without
it the scheduler dies on the new is_draft column.

Ship a sample api.yml, the API refused to start without that file, and
bind it to localhost by default. Drop the ModSecurity directives from
the reverse proxy and web UI templates too, OpenResty has no such
module.

Changelog: https://github.com/bunkerity/bunkerweb/releases/tag/v1.6.15

Sponsored by:   Netzkommune GmbH

science/neko: update 1.0.3 → 1.1.2

(cherry picked from commit b859fb91a873b7fd7be395db532650e98ccc593e)

math/cvc5: update test results

All tests pass after the latest update of math/symfpu.
The older version caused test failures.

textproc/kibana93: Update 9.3.4 => 9.3.8

Changelogs:
https://www.elastic.co/docs/release-notes/kibana#kibana-9.3.8-release-notes
https://github.com/nodejs/nan/blob/v2.29.0/CHANGELOG.md
https://github.com/uhop/node-re2/compare/1.24.1...1.26.1

PR:             297679
Approved by:    elastic (implicit, inactive for several months again)
Sponsored by:   UNIS Labs

sysutils/logstash93: Update 9.3.4 => 9.3.8

Changelog:
https://www.elastic.co/docs/release-notes/logstash#logstash-9.3.8-release-notes

PR:             297679
Approved by:    elastic (implicit, inactive for several months again)
Sponsored by:   UNIS Labs

sysutils/beats93: Update 9.3.4 => 9.3.8

Changelog:
https://www.elastic.co/docs/release-notes/beats#beats-release-notes-9.3.8

PR:             297679
Approved by:    elastic (implicit, inactive for several months again)
Sponsored by:   UNIS Labs

textproc/kibana8: Update 8.19.15 => 8.19.21

Changelogs:
https://www.elastic.co/guide/en/kibana/8.19/release-notes-8.19.16.html
https://www.elastic.co/guide/en/kibana/8.19/release-notes-8.19.17.html
https://www.elastic.co/guide/en/kibana/8.19/release-notes-8.19.18.html
https://www.elastic.co/guide/en/kibana/8.19/release-notes-8.19.19.html
https://www.elastic.co/guide/en/kibana/8.19/release-notes-8.19.20.html
https://www.elastic.co/guide/en/kibana/8.19/release-notes-8.19.21.html

https://github.com/nodejs/nan/blob/v2.29.0/CHANGELOG.md
https://github.com/uhop/node-re2/compare/1.24.1...1.26.1

PR:             297679
Approved by:    elastic (implicit, inactive for several months again)
Sponsored by:   UNIS Labs

sysutils/beats8: Update 8.19.15 => 8.19.21

Changelogs:
https://www.elastic.co/guide/en/beats/libbeat/current/release-notes-8.19.16.html
https://www.elastic.co/guide/en/beats/libbeat/current/release-notes-8.19.17.html
https://www.elastic.co/guide/en/beats/libbeat/current/release-notes-8.19.18.html
https://www.elastic.co/guide/en/beats/libbeat/current/release-notes-8.19.19.html
https://www.elastic.co/guide/en/beats/libbeat/current/release-notes-8.19.20.html
https://www.elastic.co/guide/en/beats/libbeat/current/release-notes-8.19.21.html

PR:             297679
Approved by:    elastic (implicit, inactive for several months again)
Sponsored by:   UNIS Labs

sysutils/logstash8: Update 8.19.15 => 8.19.21

Changelogs:
https://www.elastic.co/guide/en/logstash/8.19/logstash-8-19-16.html
https://www.elastic.co/guide/en/logstash/8.19/logstash-8-19-17.html
https://www.elastic.co/guide/en/logstash/8.19/logstash-8-19-18.html
https://www.elastic.co/guide/en/logstash/8.19/logstash-8-19-19.html
https://www.elastic.co/guide/en/logstash/8.19/logstash-8-19-20.html
https://www.elastic.co/guide/en/logstash/8.19/logstash-8-19-21.html

PR:             297679
Approved by:    elastic (implicit, inactive for several months again)
Sponsored by:   UNIS Labs

misc/py-pytorch: fix unknown symbol on aarch64; add pkg-message

Add cpuinfo patch to support aarch64 for this.

science/neko: update 1.0.3 → 1.1.2

science/ttk: add missing optional dependencies

PR:             297890
Reported by:    Thierry Thomas <thierry at FreeBSD.org>

misc/lbann: remove gcc dependency to fix build on arm64; broken on i386

databases/py-pylance: broken on arm64

Reported by:    fallout

net/linphone: Restore PORTEPOCH

Restore accidentaly removed PORTEPOCH in the previously submitted patch.

PR:             298735
Sponsored by:   UNIS Labs (vvd, commit patch)

net-p2p/amule: Update to 3.1.0

- Remove WEBSERVER_USES=readline option as it is defined in global USES
- Apply upstream tests fix patch

ChangeLog: https://github.com/amule-org/amule/releases/tag/3.1.0

graphics/py-mayavi: update 4.8.2 → 4.9.0

misc/lean-ctx: update 3.8.11 → 3.10.2

math/py-iminuit: Broken on i386

Reported by:    fallout

devel/py-pyrefly: broken on i386

Reported by:    fallout

x11/nvidia-driver*: Drop pkg-message

All contents of pkg-message are applicable for kmods part
(x11/nvidia-kmod*) only.

This was the remnant when kmods part were splitted out from
x11/nvidia-driver* at commit ports f4e907a49258.

PR:             298709
Differential Revision:  https://reviews.freebsd.org/D59864

audio/waves: Update to 0.1.50

ChangeLog:

1. https://github.com/llehouerou/waves/releases/tag/v0.1.50

Reported by:    "github-actions[bot]" <notifications at github.com>

filesystems/ntfs2btrfs: update the port to version 20260810

- Due to use of C++ modules now demands LLVM 17+ from ports
- Drop dependency on `devel/libfmt' in favor of std::format

Reported by:    portscout

devel/immanent-checker: Upgrade from 0.42 to 0.50

  Add classification support for each check, which improves the performance fixing of checks massively

Sponsored by:   OTTRIA

security/certspotter: Update to 0.25.0

security/amavisd-new: Update to 2.15.0

net-mgmt/icinga-php-thirdparty: Update to 1.0.1

net-mgmt/icinga-php-library: Update to 1.0.1

mail/pflogsumm: Update to 1.3.0

audio/alacenc: the port had been updated to version 0.4.2

While currently unnecessary, tighten CMake version regexp
to prepare for the grim future.

Reported by:    portscout