multimedia/butt: update 1.45.0 -> 1.47.0, pet repology
- Fix possible corruption when recording .wav files
- When using Vorbis in VBR mode the min bitrate was
set for the upper limit instead of the max bitrate
Changes: https://danielnoethen.de/butt/Changelog.html
dns/adns: update 1.6.0 -> 1.6.2, pet repology
- Disable debugging output to stderr from adns_addr2text and
adns_text2addr, when used with exciting values (eg scoped addresses)
- Suppress warning about `trust-ad` in resolv.conf
sysutils/terraform: Update to 1.15.9, fix LICENSE
Update from 1.15.3 to 1.15.9. 1.15.9 updates go-slug to v0.18.3,
addressing CVE-2026-14978, an exclusion bypass in .terraformignore
handling. The version proposed in the PR, 1.15.8, still carries the
affected go-slug v0.18.1, hence the jump to 1.15.9.
The remaining changes are bugfixes: crashes in init and console,
wrong exit codes for variable errors in plan, query and refresh,
child module and submodule validation, several module installation
edge cases, and concurrency safety in the config parsers.
PR: 297296
Security: CVE-2026-14978
Approved by: maintainer timeout (dutra)
Sponsored by: Netzkommune GmbH
(cherry picked from commit 470005eb0237802792ed6d527374f0f1301e1967)
security/vuxml: Document terraform exclusion bypass
go-slug before v0.18.3, bundled in terraform, does not consistently
match .terraformignore rules against canonically equivalent Unicode
filenames, so files meant to be excluded can end up in uploads to
HCP Terraform or Terraform Enterprise. Fixed in terraform 1.15.9.
Security: CVE-2026-14978
Sponsored by: Netzkommune GmbH
sysutils/terraform: Update to 1.15.9, fix LICENSE
Update from 1.15.3 to 1.15.9. 1.15.9 updates go-slug to v0.18.3,
addressing CVE-2026-14978, an exclusion bypass in .terraformignore
handling. The version proposed in the PR, 1.15.8, still carries the
affected go-slug v0.18.1, hence the jump to 1.15.9.
The remaining changes are bugfixes: crashes in init and console,
wrong exit codes for variable errors in plan, query and refresh,
child module and submodule validation, several module installation
edge cases, and concurrency safety in the config parsers.
PR: 297296
Security: CVE-2026-14978
Approved by: maintainer timeout (dutra)
Sponsored by: Netzkommune GmbH
security/certmonger: Fix hardcoded paths
The location of the IPA configuration is hardcoded in three source
files, so on FreeBSD certmonger never finds it and every certificate
request fails with "Unable to determine location of IPA LDAP server".
Renewal is affected too, dogtag-ipa-renew-agent-submit carries the same
paths.
PR: 297709
Approved by: crees (maintainer)
Sponsored by: Netzkommune GmbH
(cherry picked from commit 2a0a6d9d4d7e21058908377aff9d6ec101ff3993)
security/certmonger: Fix hardcoded paths
The location of the IPA configuration is hardcoded in three source
files, so on FreeBSD certmonger never finds it and every certificate
request fails with "Unable to determine location of IPA LDAP server".
Renewal is affected too, dogtag-ipa-renew-agent-submit carries the same
paths.
PR: 297709
Approved by: crees (maintainer)
Sponsored by: Netzkommune GmbH
devel/py-backports.*: resolve conflicts with devel/py-backports
devel/py-backports does basically nothing except to install the
/usr/local/lib/python3.*/site-packages/backports/__init__.py file.
Several other py-backports.* ports also installed the same file, with
identical contents. That created runtime conflicts that prevented
certain ports from being installed, including sysutils/py-salt.
Fix the conflicts by patching the offending ports to stop installing
that file, and instead depend on devel/py-backports.
PR: 297696
PR: 297697
Reviewed by: krion
Sponsored by: ConnectWise
Inspired by: 56a719e6b67 (svn r492366)
