BSD Commit Log Search

devel/qt6-tools: Backport upstream patch to support LLVM 22

PR:             295535

www/{pomerium-envoy-custom,pomerium}: update to 1.36.8-p1 / 0.32.9

security/vuxml: Document net/rclone vulnerability

PR:             296192
Approved by:    osa, vvd (Mentors, implicit)

net/rclone: Security update 1.74.2 => 1.74.3

Changelog:
https://rclone.org/changelog/#v1-74-3-2026-06-05

PR:             296192
Reported by:    Herbert J. Skuhra <herbert at gojira.at>
Approved by:    Ralf van der Enden <tremere at cainites.net> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
Tested by:      Vladimir Druzenko <vvd at FreeBSD.org>
MFH:            2026Q2
Security:       CVE-2026-49980

(cherry picked from commit 6064d1dd6addbc89d9ac2c6c5df7494b6c7f6cee)

net/rclone: Security update 1.74.2 => 1.74.3

Changelog:
https://rclone.org/changelog/#v1-74-3-2026-06-05

PR:             296192
Reported by:    Herbert J. Skuhra <herbert at gojira.at>
Approved by:    Ralf van der Enden <tremere at cainites.net> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
Tested by:      Vladimir Druzenko <vvd at FreeBSD.org>
MFH:            2026Q2
Security:       CVE-2026-49980

x11-fonts/xfontsel: update from 1.1.1 to 1.1.2

PR:             296370
Approved by:    x11 (arrowd, maintainer)

Sponsored by:   tipi.work

x11/xedit: update to 1.2.5

PR:             296371
Approved by:    x11 (arrowd, maintainer)
Sponsored by:   tipi.work

security/vuxml: Document dns/powerdns vulnerabilities

PR:             296312
Approved by:    osa, vvd (Mentors, implicit)

dns/powerdns: Security update 5.0.5 => 5.1.2

Port changes:
- Switch from Autotools to Meson.
- Add new GNUTLS option.
- Fix build with OPENLDAP option by adding dependency on security/krb5.

Upgrade Notes (from 5.0.0 to 5.1.0):
- https://doc.powerdns.com/authoritative/upgrading.html#to-5-1-0
Changelogs:
- https://doc.powerdns.com/authoritative/changelog/5.0.html#change-5.0.6
- https://doc.powerdns.com/authoritative/changelog/5.1.html#change-5.1.2
Security Advisories:
- https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2026-05.html
- https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2026-07.html

PR:             296312
Reported by:    Jordan Ostreff <jordan at ostreff.info>
Approved by:    osa, vvd (Mentors, implicit)

    [10 lines not shown]

dns/powerdns: Security update 5.0.5 => 5.1.2

Port changes:
- Switch from Autotools to Meson.
- Add new GNUTLS option.
- Fix build with OPENLDAP option by adding dependency on security/krb5.

Upgrade Notes (from 5.0.0 to 5.1.0):
- https://doc.powerdns.com/authoritative/upgrading.html#to-5-1-0
Changelogs:
- https://doc.powerdns.com/authoritative/changelog/5.0.html#change-5.0.6
- https://doc.powerdns.com/authoritative/changelog/5.1.html#change-5.1.2
Security Advisories:
- https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2026-05.html
- https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2026-07.html

PR:             296312
Reported by:    Jordan Ostreff <jordan at ostreff.info>
Approved by:    osa, vvd (Mentors, implicit)

    [8 lines not shown]

devel/py-memory-allocator: chase cython-3.12

security/infisical-cli: update to 0.43.99 release.

math/py-cypari2: chase cython-3.12

devel/py-cysignals: upgrade to 1.12.6

Release notes at https://github.com/sagemath/cysignals/releases/tag/1.12.6

math/py-primecountpy: chase cython-3.12

security/vuxml: Document dns/powerdns-recursor vulnerabilities

PR:             296313
Approved by:    osa, vvd (Mentors, implicit)

dns/powerdns-recursor: Security update 5.4.2 => 5.4.3

Port changes:
- Add NOD option for upstream new feature support
- Set C++17 standard
- Use '+=' instead of '=' for DISTFILES to reduce portlint warnings

Changelog:
https://doc.powerdns.com/recursor/changelog/5.4.html#change-5.4.3
Security Advisory:
https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2026-08.html

PR:             296313
Reported by:    Jordan Ostreff <jordan at ostreff.info>
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q2
Security:       CVE-2026-3361
Security:       CVE-2026-40012
Security:       CVE-2026-42005

    [7 lines not shown]

dns/powerdns-recursor: Update to 5.4.2

Changelog: https://doc.powerdns.com/recursor/changelog/5.4.html#change-5.4.2

PR:             295881
Reported by:    Jordan Ostreff <jordan at ostreff.info>
Approved by:    Ralf van der Enden <tremere at cainites.net> (maintainer)

(cherry picked from commit 1364a0ca4113da56399c94a9b6adc5ac6fd5545e)

dns/powerdns-recursor: Security update 5.4.2 => 5.4.3

Port changes:
- Add NOD option for upstream new feature support
- Set C++17 standard
- Use '+=' instead of '=' for DISTFILES to reduce portlint warnings

Changelog:
https://doc.powerdns.com/recursor/changelog/5.4.html#change-5.4.3
Security Advisory:
https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2026-08.html

PR:             296313
Reported by:    Jordan Ostreff <jordan at ostreff.info>
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q2
Security:       CVE-2026-3361
Security:       CVE-2026-40012
Security:       CVE-2026-42005

    [5 lines not shown]

www/authelia: enable secret mode to fetch secrets from files

Authelia provides the functionality using go templates so screts must
not be part of the config file, but can be read from external files.

That makes handling of keys more more convinient, like:
```
identity_providers:
  oidc:
    jwks:
      - key: {{ secret "/usr/local/etc/authelia/private_ecdsa.pem" | mindent 10 "|" | msquote }}
      - key: {{ secret "/usr/local/etc/authelia/private_rsa.pem" | mindent 10 "|" | msquote }}
```

Authelia must be started for this with the template filter which that commit
adds.

PR:             295354
Approved by:    yuri (maintainer, timeout)

dns/dnsdist: Security update 2.0.6 => 2.0.7

While here, pet portfmt.

Changelog:
https://www.dnsdist.org/changelog.html#change-2.0.7
Security Advisory:
https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.html

PR:             296314
Reported by:    Jordan Ostreff <jordan at ostreff.info>
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q2
Security:       CVE-2026-40011
Security:       CVE-2026-42004
Security:       CVE-2026-42005
Security:       CVE-2026-40208
Security:       CVE-2026-40209
Security:       CVE-2026-40210

    [3 lines not shown]

dns/dnsdist: update to v2.0.6

PR:     295515
Reported by:    Jordan Ostreff <jordan at ostreff.info>
Approved by:    tremere at cainites.net (maintainer)

(cherry picked from commit 9df447a2af2400984d1f068c7d3bed36da348e55)

dns/dnsdist: Security update 2.0.6 => 2.0.7

While here, pet portfmt.

Changelog:
https://www.dnsdist.org/changelog.html#change-2.0.7
Security Advisory:
https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.html

PR:             296314
Reported by:    Jordan Ostreff <jordan at ostreff.info>
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q2
Security:       CVE-2026-40011
Security:       CVE-2026-42004
Security:       CVE-2026-42005
Security:       CVE-2026-40208
Security:       CVE-2026-40209
Security:       CVE-2026-40210
Security:       CVE-2026-40211

archivers/plakar: update to 1.1.3

Changes:        https://github.com/PlakarKorp/plakar/releases
PR:             296059
Approved by:    maintainer (timeout)

security/vuxml: Document dns/dnsdist vulnerabilities

PR:             296314
Approved by:    osa, vvd (Mentors, implicit)

sysutils/gitlab-registry: update to 4.40.2

Changes:        https://gitlab.com/gitlab-org/container-registry/-/releases

www/evcc: update to 0.310.1

Changes:        https://github.com/evcc-io/evcc/releases

security/boringssl: update CONFLICTS

Bump PORTREVISION.

Sponsored by:   tipi.work

security/py-python-nss: Fix build with Python 3.12

src/py_nspr_error.c:189:23: error: too few arguments provided to function-like macro invocation
  189 |         va_start(vargs);
      |                       ^
/usr/include/sys/_stdarg.h:41:9: note: macro 'va_start' defined here
   41 | #define va_start(ap, last)      __builtin_va_start((ap), (last))
      |         ^

Reported by:    pkg-fallout

www/tt-rss: Update g20260501 => g20260622

Commit log:
https://github.com/tt-rss/tt-rss/compare/f88091ccc0f3d...87b42eb3db253

PR:             296359
Approved by:    osa, vvd (Mentors, implicit)