www/zoraxy: Fix build on non-amd64
sshprox declares UseWinTTY and gotty only for freebsd/amd64, which
breaks the build on all other architectures. amd64 embeds no gotty
binary anyway, so extend the build constraint to all of FreeBSD.
Sponsored by: Netzkommune GmbH
(cherry picked from commit 2ea38e53e6a3434d2cf581813ba80592681c811c)
www/zoraxy: Fix build on non-amd64
sshprox declares UseWinTTY and gotty only for freebsd/amd64, which
breaks the build on all other architectures. amd64 embeds no gotty
binary anyway, so extend the build constraint to all of FreeBSD.
Sponsored by: Netzkommune GmbH
x11-wm/dwm: Add a RUNTIMEKEYS option
dwm reads key bindings from the root-window property
_DWM_KEYS while it is running. The option is off by default.
Reviewed by: fuz
Differential Revision: https://reviews.freebsd.org/D60933
devel/go-wire: Update 1.3.0 => 1.3.1
Changelog:
https://github.com/goforj/wire/releases/tag/v1.3.1
Port changes:
- Add pkg-message to inform that it requires a symlink to Go
to be able to launch go-wire which can be solved by installing
the lang/go package.
- Also require Go for runtime via USES.
PR: 299684
Approved by: osa, vvd (Mentors, implicit)
MFH: 2026Q4
(cherry picked from commit 87202e4f2cc1d0c24a8a7bfb9d938d245dff8c5b)
devel/go-wire: Update 1.3.0 => 1.3.1
Changelog:
https://github.com/goforj/wire/releases/tag/v1.3.1
Port changes:
- Add pkg-message to inform that it requires a symlink to Go
to be able to launch go-wire which can be solved by installing
the lang/go package.
- Also require Go for runtime via USES.
PR: 299684
Approved by: osa, vvd (Mentors, implicit)
MFH: 2026Q4
lang/php85: Disable session upload progress in shipped php.ini templates
Set session.upload_progress.enabled = 0 in php.ini-production and
php.ini-development as a temporary mitigation for CVE-2026-115560, until
the next regular upstream bugfix release. The issue requires an
application to set session.serialize_handler to php_binary or
php_serialize and switch it to php at runtime via ini_set() before
session_start(), with upload progress still enabled.
The templates only affect new installs and users who copy them to
php.ini; existing php.ini files are untouched. Add a pkg-message
describing the change and how to check the effective configuration.
Security: CVE-2026-115560
(cherry picked from commit d7972094ad2638a4d7cd59da1ae812b8b5f419d1)
lang/php84: Disable session upload progress in shipped php.ini templates
Set session.upload_progress.enabled = 0 in php.ini-production and
php.ini-development as a temporary mitigation for CVE-2026-115560, until
the next regular upstream bugfix release. The issue requires an
application to set session.serialize_handler to php_binary or
php_serialize and switch it to php at runtime via ini_set() before
session_start(), with upload progress still enabled.
The templates only affect new installs and users who copy them to
php.ini; existing php.ini files are untouched. Add a pkg-message
describing the change and how to check the effective configuration.
Security: CVE-2026-115560
(cherry picked from commit 1a235373d2661c911465f1ad1f50b5f0e2a1ba42)
lang/php83: Disable session upload progress in shipped php.ini templates
Set session.upload_progress.enabled = 0 in php.ini-production and
php.ini-development as a temporary mitigation for CVE-2026-115560, until
the next regular upstream bugfix release. The issue requires an
application to set session.serialize_handler to php_binary or
php_serialize and switch it to php at runtime via ini_set() before
session_start(), with upload progress still enabled.
The templates only affect new installs and users who copy them to
php.ini; existing php.ini files are untouched. Add a pkg-message
describing the change and how to check the effective configuration.
Security: CVE-2026-115560
(cherry picked from commit eb0100f974b604825fd8aee7656233586e1f3827)
lang/php82: Disable session upload progress in shipped php.ini templates
Set session.upload_progress.enabled = 0 in php.ini-production and
php.ini-development as a temporary mitigation for CVE-2026-115560, until
the next regular upstream bugfix release. The issue requires an
application to set session.serialize_handler to php_binary or
php_serialize and switch it to php at runtime via ini_set() before
session_start(), with upload progress still enabled.
The templates only affect new installs and users who copy them to
php.ini; existing php.ini files are untouched. Add a pkg-message
describing the change and how to check the effective configuration.
Security: CVE-2026-115560
Changelog: https://www.php.net/ChangeLog-8.php#${NEW_VERSION}
(cherry picked from commit 438e512499a99559cf18ba9119dc3a534af3b2a4)
