FreeBSD/ports 8d731c8security/vuxml/vuln 2026.xml

security/vuxml: Document remaining Erlang/OTP vulnerabilities

Upstream published 16 advisories alongside OTP 29.0.6, 28.5.0.6 and
27.3.4.17. CVE-2026-75538 already had an entry; add a combined one for
the other 15, which share the same affected packages and fixed versions.
Most are in the inets httpd and httpc implementations: HTTP request
smuggling, two mod_auth authentication bypasses and several denial of
service issues, plus unbounded integer conversion in stdlib, snmp and
eldap.

Also add the now-published GHSA reference to the CVE-2026-75538 entry.
DeltaFile
+86-0security/vuxml/vuln/2026.xml
+86-01 files

FreeBSD/ports 67de2b9databases/couchdb3 Makefile

databases/couchdb3: Bump PORTREVISION after erlang-runtime28 update

(cherry picked from commit ee1a7d634d3872a322d40e1981c73fac6ed25f07)
DeltaFile
+1-1databases/couchdb3/Makefile
+1-11 files

FreeBSD/ports ee1a7d6databases/couchdb3 Makefile

databases/couchdb3: Bump PORTREVISION after erlang-runtime28 update
DeltaFile
+1-1databases/couchdb3/Makefile
+1-11 files

FreeBSD/ports b8ecea7databases/couchdb3 Makefile pkg-plist

databases/couchdb3: Resolve bundled OTP versions dynamically in PLIST_SUB

The release bundles erts and 13 OTP applications from
lang/erlang-runtime28, and pkg-plist pinned each of their versioned
directory names. Six of the last eight plist commits were pure OTP
rename churn, the largest touching 610 lines, while the 3.5.2 update
itself touched 23.

Derive the versions from the installed runtime at plist-generation time
instead. The package file list is unchanged: resolving the tokenized
plist with the versions this build staged reproduces the previous
pkg-plist byte for byte, so no PORTREVISION bump is needed.

An erlang-runtime28 update now needs only a PORTREVISION bump. Note
this reads ${LOCALBASE}/lib/erlang28 rather than the staged release,
because generate-plist runs before do-install; it holds as long as the
release copies erts and the OTP applications unmodified.

CouchDB's own rebar dependencies stay pinned deliberately - they move

    [6 lines not shown]
DeltaFile
+622-622databases/couchdb3/pkg-plist
+14-1databases/couchdb3/Makefile
+636-6232 files

FreeBSD/ports 6d0d5afcad/cura Makefile

cad/cura: chase py-numpy_stl

Approved by:    blanket (fix)
DeltaFile
+2-2cad/cura/Makefile
+2-21 files

FreeBSD/ports 648e90atextproc/py-jinjanator/files patch-pyproject.toml

textproc/py-jinjanator: Chase hatchling update

Reported by:    pkg-fallout
DeltaFile
+1-1textproc/py-jinjanator/files/patch-pyproject.toml
+1-11 files

FreeBSD/ports 97af03elang/erlang-runtime28 Makefile distinfo

lang/erlang-runtime28: Update to 28.5.0.6

(cherry picked from commit 5bb61e54c7d1405443767cb988385dda73c336f6)
DeltaFile
+3-3lang/erlang-runtime28/distinfo
+1-1lang/erlang-runtime28/Makefile
+4-42 files

FreeBSD/ports 6221814lang/erlang-man Makefile distinfo

lang/erlang-man: Update to 28.5.0.6

(cherry picked from commit b1969d7c8189fbc8149146d1807500ac6d52ab17)
DeltaFile
+3-3lang/erlang-man/distinfo
+1-1lang/erlang-man/Makefile
+4-42 files

FreeBSD/ports 4c1da4flang/erlang-runtime27 Makefile distinfo

lang/erlang-runtime27: Update to 27.3.4.17

(cherry picked from commit b4373b83e3d88660fff96c2b8190f69e27754b70)
DeltaFile
+3-3lang/erlang-runtime27/distinfo
+1-1lang/erlang-runtime27/Makefile
+4-42 files

FreeBSD/ports 775c904lang/erlang-runtime29 Makefile distinfo

lang/erlang-runtime29: Update to 29.0.6

(cherry picked from commit e4ebe0f4ae3484608c0066f7138b3c4899aa4398)
DeltaFile
+3-3lang/erlang-runtime29/distinfo
+1-1lang/erlang-runtime29/Makefile
+4-42 files

FreeBSD/ports 91d48dclang/erlang-doc Makefile distinfo

lang/erlang-doc: Update to 28.5.0.6

(cherry picked from commit e50d8aab4c27e1208e88176c94bce91048fe7e35)
DeltaFile
+3-3lang/erlang-doc/distinfo
+1-1lang/erlang-doc/Makefile
+4-42 files

FreeBSD/ports ada85eelang/erlang distinfo Makefile

lang/erlang: Update to 28.5.0.6

(cherry picked from commit ceab5f12b5c54bce7e3b294f7ad1b97e620eefa7)
DeltaFile
+4-4lang/erlang/Makefile
+3-3lang/erlang/distinfo
+7-72 files

FreeBSD/ports 0e62b71lang/erlang-wx Makefile distinfo

lang/erlang-wx: Update to 28.5.0.6

(cherry picked from commit c860bcad8e6f08a911d7470ec20291340391d3f6)
DeltaFile
+3-3lang/erlang-wx/distinfo
+1-1lang/erlang-wx/Makefile
+4-42 files

FreeBSD/ports f56e784lang/erlang-java Makefile distinfo

lang/erlang-java: Update to 28.5.0.6

(cherry picked from commit 60d21dcf39a6b770e09dd7043189c57dc3f01b47)
DeltaFile
+3-3lang/erlang-java/distinfo
+1-1lang/erlang-java/Makefile
+4-42 files

FreeBSD/ports b1969d7lang/erlang-man Makefile distinfo

lang/erlang-man: Update to 28.5.0.6
DeltaFile
+3-3lang/erlang-man/distinfo
+1-1lang/erlang-man/Makefile
+4-42 files

FreeBSD/ports b4373b8lang/erlang-runtime27 Makefile distinfo

lang/erlang-runtime27: Update to 27.3.4.17
DeltaFile
+3-3lang/erlang-runtime27/distinfo
+1-1lang/erlang-runtime27/Makefile
+4-42 files

FreeBSD/ports e4ebe0flang/erlang-runtime29 Makefile distinfo

lang/erlang-runtime29: Update to 29.0.6
DeltaFile
+3-3lang/erlang-runtime29/distinfo
+1-1lang/erlang-runtime29/Makefile
+4-42 files

FreeBSD/ports e50d8aalang/erlang-doc Makefile distinfo

lang/erlang-doc: Update to 28.5.0.6
DeltaFile
+3-3lang/erlang-doc/distinfo
+1-1lang/erlang-doc/Makefile
+4-42 files

FreeBSD/ports 5bb61e5lang/erlang-runtime28 Makefile distinfo

lang/erlang-runtime28: Update to 28.5.0.6
DeltaFile
+3-3lang/erlang-runtime28/distinfo
+1-1lang/erlang-runtime28/Makefile
+4-42 files

FreeBSD/ports 5ff179dsecurity/vuxml/vuln 2026.xml

security/vuxml: Document CVE-2026-75538 in Erlang/OTP
DeltaFile
+46-0security/vuxml/vuln/2026.xml
+46-01 files

FreeBSD/ports 60d21dclang/erlang-java Makefile distinfo

lang/erlang-java: Update to 28.5.0.6
DeltaFile
+3-3lang/erlang-java/distinfo
+1-1lang/erlang-java/Makefile
+4-42 files

FreeBSD/ports ceab5f1lang/erlang distinfo Makefile

lang/erlang: Update to 28.5.0.6
DeltaFile
+4-4lang/erlang/Makefile
+3-3lang/erlang/distinfo
+7-72 files

FreeBSD/ports c860bcalang/erlang-wx Makefile distinfo

lang/erlang-wx: Update to 28.5.0.6
DeltaFile
+3-3lang/erlang-wx/distinfo
+1-1lang/erlang-wx/Makefile
+4-42 files

FreeBSD/ports ac1195bnet/redpanda-connect Makefile distinfo

net/redpanda-connect: Update to 4.107.2
DeltaFile
+5-5net/redpanda-connect/distinfo
+1-1net/redpanda-connect/Makefile
+6-62 files

FreeBSD/ports 525a828databases/pgbot Makefile distinfo

databases/pgbot: Update to 0.6.0
DeltaFile
+5-5databases/pgbot/distinfo
+1-1databases/pgbot/Makefile
+6-62 files

FreeBSD/ports 28a3750Tools/scripts rmport

Tools/scripts/rmport: remind user when removing an electron port to update its USES
DeltaFile
+4-0Tools/scripts/rmport
+4-01 files

FreeBSD/ports 868cb3eemulators/dosbox-x Makefile distinfo, emulators/dosbox-x/files patch-src_gui_sdl__gui.cpp patch-include_setup.h

emulators/dosbox-x: Update to 2026-08-31

- Remove upstreamed ffmpeg9 patch
- Remove unneeded #include <stdio.h> in include/setup.h patch.

ChangeLog:
https://github.com/joncampbell123/dosbox-x/releases/tag/dosbox-x-v2026.08.31
DeltaFile
+0-44emulators/dosbox-x/files/patch-fix-ffmpeg9
+0-11emulators/dosbox-x/files/patch-include_setup.h
+4-4emulators/dosbox-x/files/patch-src_gui_sdl__gui.cpp
+3-3emulators/dosbox-x/distinfo
+1-1emulators/dosbox-x/Makefile
+8-635 files

FreeBSD/ports 4665514mail/libtlsrpt Makefile pkg-plist

mail/libtlsrpt: update to 0.5.1

Changes:        https://github.com/sys4/libtlsrpt/blob/v0.5.1/CHANGELOG.md
Reported by:    portscout, repology
DeltaFile
+3-3mail/libtlsrpt/distinfo
+1-2mail/libtlsrpt/Makefile
+3-0mail/libtlsrpt/pkg-plist
+7-53 files

FreeBSD/ports c85de6ddevel/libddoc Makefile, devel/mir-core Makefile

*/*: Bump PORTREVISION. lang/ldc was updated to 1.43.0
DeltaFile
+2-2print/derelict-ft/Makefile
+2-2graphics/derelict-gl3/Makefile
+2-2devel/xdgpaths/Makefile
+2-2devel/stdx-allocator/Makefile
+2-2devel/mir-core/Makefile
+2-2devel/libddoc/Makefile
+12-1221 files not shown
+45-3927 files

FreeBSD/ports 2670192devel/dcd-server Makefile pkg-plist

devel/dcd-server: Update to 0.16.4
DeltaFile
+3-3devel/dcd-server/distinfo
+5-0devel/dcd-server/pkg-plist
+1-1devel/dcd-server/Makefile
+9-43 files