security/vuxml: Fill in missing blockquote cite URLs
Six entries kept the "INSERT URL HERE" placeholder that newentry.sh puts
into the cite attribute, which ends up verbatim in the generated pages.
Each of them quotes a source that is already linked in its own references
block, so use that URL.
PR: 300379
Reported by: dvl
Sponsored by: Netzkommune GmbH
deskutils/merkuro: add missed dependency (+)
Declare implicit (previously hidden by dependencies) requirement on libplasma
Bump PORTREVISION
CMake Warning at src/contacts/applet/CMakeLists.txt:4 (find_package):
By not providing "FindPlasma.cmake" in CMAKE_MODULE_PATH this project has
asked CMake to find a package configuration file provided by "Plasma", but
CMake did not find one.
Could not find a package configuration file provided by "Plasma" with any
of the following names:
PlasmaConfig.cmake
plasma-config.cmake
[skip]
Reported by: bulk -t
Approved by: makc
multimedia/tvheadend: Update to 4.3.0.20261028 and various fixes
The various fixes are:
- fix iconv issue at startup (fix provided by Martin Rehak <rehak at tekkirk.org)
- add new DBUS option (patch provided by Martin Rehak <rehak at tekkirk.org)
- add dependency for pcre2 (patch provided by Martin Rehak <rehak at tekkirk.org)
- remove unused dependency on libcurl
- replace dependency on gettext with gettext-tools
- fix avahi option to properly disable it
PR: 299440
mail/mlmmj: update to 2.2.3
Changes:
- Security: do not expand $variables$ or %directives% in substituted
values or formatted sources; a crafted Subject: or subscriber address
could leak control files into notices, digests and +list replies, or
loop forever.
- Security: strip CR, LF and NUL from decoded headers to block header
injection (e.g. Bcc:).
- Security: refuse bouncing addresses containing '/', which could
delete or append to files outside bounce/, subconf/ and unsubconf/.
- Security: fix a heap overflow with a wide prefix before an included
source (e.g. "- %listsubs%").
- Bounces: where FD_RESOLVE_BENEATH is available, confine lookups
relative to bounce/, subconf/, unsubconf/ and the queue to those
directories.
- control/access: a deny-<qualifier> rule reports its listtext only
when it matches; a bare deny-<qualifier> rule matches every mail.
- Moderation: no control/moderators is no longer fatal; the post is
[15 lines not shown]
devel/{,java-,ruby-}subversion{,-lts}: drop compiler-specific flags
Remove every compiler-conditional/workaround flag from this port
family, relying on stock Clang/libc++ behavior instead:
- devel/subversion, devel/subversion-lts: drop the amd64-only
CFLAGS+=-fpic -DPIC block and USES=compiler. Add files/patch-configure:
configure's "additional flags to link C++ libraries" check only
special-cases *freebsd10* as needing no extra -lstdc++; every later
FreeBSD release falls through to the default case and gets -lstdc++
added, which fails to link since FreeBSD has shipped Clang/libc++
(no libstdc++.so) since 10.0. Broaden the match to *freebsd*.
- devel/java-subversion: drop the post-configure block that blanked
out LT_CXX_LIBADD by hand when COMPILER_TYPE == clang, superseded
by the configure-level fix above; drop the now-unused
USES=compiler. Also drop JAVA_OS=native, matching www/tomcat-native
(another native-JNI port with --with-java-home=${JAVA_HOME}), which
carries no such restriction either.
- devel/ruby-subversion: drop CFLAGS+=-fdeclspec and the
[6 lines not shown]
security/vuxml: Fix whitespace issues breaking the validate target
Drop a whitespace-only line before the amule entry and replace space
indentation with a tab in the uriparser entry.
PR: 300377
Sponsored by: Netzkommune GmbH
security/vuxml: Fix invalid range in py-setuptools entry
A stray greater-than sign in front of the lt element made the range
invalid against the DTD, which broke the validate target for everyone.
PR: 300377
Sponsored by: Netzkommune GmbH
net-p2p/amule: Update to 3.2.0
This is a security release fixing 15 vulnerabilities reported through
GitHub Security Advisories, affecting all previous 3.x releases.
Some defaults changed for safety and may affect users of amuled,
amulegui, amulecmd or amuleweb:
- Remote clients can only set download and shared folders listed in
allowed-remote-dirs.dat (empty by default).
- amuleweb guest access must be enabled explicitly (--allow-guest).
- amuled now enforces the chat spam filter and CAPTCHA.
Changelog: https://github.com/amule-org/amule/releases/tag/3.2.0
MFH: 2026Q4
Security: ac97113e-d514-11f1-b2f0-002b67dfc673
net/java-beepcore: Remove expired port
2026-10-31 net/java-beepcore: Unmaintained, unused, upstream is dormant for 10+ years. The repo is still in CVS format.
