BSD Commit Log Search

java/openjdk21: Version 21.0.13.0.3 more cert fixes

Update to latest upstream patch version to address more issues with the
eMudhra certificate incident.

See also: https://openjdk.org/emudhra

MFH:            2026Q4
Security:       CVE 2026-114820
Security:       JDK-8395690
Sponsored by:   The FreeBSD Foundation

mail/nextcloud-mail: Update to 5.12.6

java/openjdk25: Version 25.0.5.0.3 more cert fixes

Update to latest upstream patch version to address more issues with the
eMudhra certificate incident.

See also: https://openjdk.org/emudhra

MFH:            2026Q4
Security:       CVE 2026-114820
Security:       JDK-8395690
Sponsored by:   The FreeBSD Foundation

(cherry picked from commit 82145c8e18fa5d657233f3c7c5f5c85711a656b8)

java/openjdk25: Version 25.0.5.0.3 more cert fixes

Update to latest upstream patch version to address more issues with the
eMudhra certificate incident.

See also: https://openjdk.org/emudhra

MFH:            2026Q4
Security:       CVE 2026-114820
Security:       JDK-8395690
Sponsored by:   The FreeBSD Foundation

net-im/linux-discord: Update to 1.0.160

- Pass maintainership to submitter

mail/roundcube-larry: No CPE in Mitre dictionary for the theme

mail/roundcube-classic: No CPE in Mitre dictionary for the theme

security/tailscale: Update to 1.104.4

MFH:            2026Q4
(cherry picked from commit a21981a86a420e02f621461b6ff2b96c97ee02b0)

security/tailscale: Update to 1.104.4

MFH:            2026Q4

security/vuxml: Document Pillow vulnerabilities

PR:             300087
Sponsored by:   Netzkommune GmbH

www/trafficserver: Update to 10.1.5

traffic_manager is gone since 10.0, the rc.d script now starts
traffic_server. Runtime, log and cache directories are compiled to the
/var paths the package creates; before, traffic_server looked for them
under ${PREFIX}/var and did not start.

Changelog:      https://github.com/apache/trafficserver/blob/10.1.5/CHANGELOG-10.1.5

PR:             292748
Approved by:    gaod at hychen.org (maintainer timeout)
Security:       3caa3b4b-d2ab-11f1-bae2-3497f65b111b
With hat:       ports-secteam
Sponsored by:   Netzkommune GmbH

(cherry picked from commit 438e566afbe9551213d43f47a78a245a5f36fe02)

security/vuxml: Document trafficserver vulnerabilities

Sponsored by:   Netzkommune GmbH

www/trafficserver: Update to 10.1.5

traffic_manager is gone since 10.0, the rc.d script now starts
traffic_server. Runtime, log and cache directories are compiled to the
/var paths the package creates; before, traffic_server looked for them
under ${PREFIX}/var and did not start.

Changelog:      https://github.com/apache/trafficserver/blob/10.1.5/CHANGELOG-10.1.5

PR:             292748
Approved by:    gaod at hychen.org (maintainer timeout)
Security:       3caa3b4b-d2ab-11f1-bae2-3497f65b111b
With hat:       ports-secteam
Sponsored by:   Netzkommune GmbH

misc/mbuffer: Mark FORTIFY_UNSAFE

cc -isystem /usr/local/include -O2 -pipe  -D_FORTIFY_SOURCE=2 -fstack-protector-strong -isystem /usr/local/include -fno-strict-aliasing  -Wno-unused-result -DHAVE_CONFIG_H -DPREFIX=\"/usr/local\" -DSYSCONFDIR=\"/usr/local/etc\" -I. -I.  -shared -fPIC tapetest.c -o tapetest.so -lcrypto -lmd -lm -lpthread -L/usr/local/lib
idev.c:113:9: error: redefinition of 'read'
  113 | ssize_t LIBC_READ(int fd, void *buf, size_t s)
      |         ^
./config.h:78:19: note: expanded from macro 'LIBC_READ'
   78 | #define LIBC_READ read
      |                   ^
/usr/include/ssp/unistd.h:67:25: note: previous definition is here
   67 | __ssp_redirect(ssize_t, _FORTIFY_SOURCE_read, (int __fd, void *__buf,
      |                         ^
/usr/include/ssp/unistd.h:43:30: note: expanded from macro
      '_FORTIFY_SOURCE_read'
   43 | #define _FORTIFY_SOURCE_read    read
      |                                 ^
1 error generated.

PR:             300086
Submitted by:   Pascal Ernster <bugs.freebsd.org at hardfalcon.net>

audio/cmt: update to 1.18

Changelog: https://www.ladspa.org/cmt/changes.html

take maintainership

Event: Works Must Run
(cherry picked from commit 8f7115603814403601b753ef26bd690d86f6fd60)

audio/caps-plugins: update to 0.9.26

Changelog: http://quitte.de/dsp/caps.html#CHANGES

take maintainership

Event: Works Must Run
(cherry picked from commit 978b455e60d0866d8c859cde22611716afbdca4c)

audio/suil: update to 0.10.26

Changelog: https://gitlab.com/lv2/suil/-/blob/v0.10.26/NEWS

take maintainership

(cherry picked from commit b4b55d20b9ab545d82dc2ab712138c92a534b987)

www/forgejo16: Update to 16.0.7

Changelog:
* https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/16.0.7.md

MFH:            2026Q4
(cherry picked from commit c8f21f7889369f6e1983c138e7a54d166ddaa389)

www/forgejo15: Update to 15.0.11

Changelog:
* https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/15.0.11.md

MFH:            2026Q4
(cherry picked from commit 8611e93a44cbb1612b5f4f5a880744acdbe210e7)

www/forgejo: Update to Forgejo 17

www/forgejo17: Update to 17.0.1

Changelog:
* https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/17.0.1.md

www/forgejo16: Update to 16.0.7

Changelog:
* https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/16.0.7.md

MFH:            2026Q4

www/forgejo15: Update to 15.0.11

Changelog:
* https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/15.0.11.md

MFH:            2026Q4

lang/tcl90: fix USE_LDCONFIG to reflect actual shlib location

PR: 300181
Approved by: gahr (tcltk, maintainer)
Event: Works Must Run

(cherry picked from commit 1eeb65607ee2919b35648c923362a88520806654)

lang/tcl90: fix USE_LDCONFIG to reflect actual shlib location

PR: 300181
Approved by: gahr (tcltk, maintainer)
Event: Works Must Run

audio/lmms: resurrect, update to 1.3.0-alpha.2

Changelog:      https://github.com/LMMS/lmms/releases/tag/v1.3.0-alpha.2
                https://github.com/LMMS/lmms/releases/tag/v1.3.0-alpha.1

While an alpha release, this is the first series to support qt6
amongst other modern features.

Event:  Works Must Run

audio/cmt: update to 1.18

Changelog: https://www.ladspa.org/cmt/changes.html

take maintainership

Event: Works Must Run

databases/openvoxdb8: Update to 8.17.0

ChangeLog:
https://github.com/OpenVoxProject/openvoxdb/blob/8.x/CHANGELOG.md#8170-2026-10-07

With hat:       puppet

(cherry picked from commit 6a112662a4e131c8411c97c83d15bd703d2887d9)

sysutils/openvox-server8: Update to 8.17.0

ChangeLog:
https://github.com/OpenVoxProject/openvox-server/blob/8.x/CHANGELOG.md#8170-2026-10-07

Bundle the java flavor of the latest json-2.x gem to avoid startup
issues when a newer version of the json ruby gem is installed.

With hat:       puppet

(cherry picked from commit 24c95bcade94bcf26152055a842dd5b2b6f96c5c)

sysutils/openvox-agent8: Update to 8.31.1

ChangeLog:
https://github.com/OpenVoxProject/openvox/blob/8.x/CHANGELOG.md#8311-2026-10-21

With hat:       puppet

(cherry picked from commit ed2779bbd4ae80d431fdcae3a8f69a2ca31b65be)