CVE and update status of the FreeBSD ports tree3,604 unaddressed CVEs in 712 portsAll times are CET

Latest commits

Recent CVEs ↓

Latest commits

The last 100 commits to main and 2026Q4, newest first. The security status refers to the most recently built package, shown as “package …” when it lags behind.
Wednesday, 4 November 2026
Brooks Davis (brooks)
devel/llvm2323.1.5 package 23.1.4LLVM and Clang
devel/llvm23: 23.1.5 release

See the annoucement for changes:
    https://discourse.llvm.org/t/llvm-23-1-5-released/92716

Sponsored by:	DARPA, AFRL
e4d7e5dff6
Jochen Neumeister (joneum)
www/worldmonitor2.11.7no package built yet
www/worldmonitor: Update to 2.11.7

Upstream moved to a native TypeScript compiler, so point the build
at it.

Add /usr/local/bin to PATH in the relay rc script, the relay needs
curl at runtime.

Sponsored by:	Netzkommune GmbH
5896cc3950
Michael Gmelin (grembo)
.hooks/pre-commit.d: New hook to validate vuxml

This runs `make validate` in case VuXML entries have been changed.

Approved by:	mat (portmgr), joneum (ports-secteam)
Differential Revision: https://reviews.freebsd.org/D61157
12edba1873
Yusuf Yaman (nxjoseph) · Author: hard.egg0918 2026Q4 from 495cd2f705
net-mgmt/nagios44.5.14,1 package 4.5.12,1Powerful network monitoring system
net-mgmt/nagios4: Security update 4.5.12 => 4.5.14

This release fixes many vulnerabilities.

Changelog:
https://www.nagios.org/projects/nagios-core/4x/

While here, drop SourceForge from MASTER_SITES.

PR:		300388
Approved by:	osa, vvd (mentors, implicit)
MFH:		2026Q4

(cherry picked from commit 495cd2f705ea910c78bedcc3c967cf991b364ed7)
c4c0824903
Yusuf Yaman (nxjoseph) · Author: hard.egg0918 MFH 2026Q4 ✓
net-mgmt/nagios44.5.14,1 package 4.5.12,1Powerful network monitoring system
net-mgmt/nagios4: Security update 4.5.12 => 4.5.14

This release fixes many vulnerabilities.

Changelog:
https://www.nagios.org/projects/nagios-core/4x/

While here, drop SourceForge from MASTER_SITES.

PR:		300388
Approved by:	osa, vvd (mentors, implicit)
MFH:		2026Q4
495cd2f705
Dries Michiels (driesm)
devel/ghq1.12.0 package 1.11.2_2Repository management tool (Git, Hg, SVN, Fossil, Bazaar, Darcs)
devel/ghq: update to 1.12.0

Changes:	https://github.com/x-motemen/ghq/releases/tag/v1.12.0
5ccb78e241
Yusuf Yaman (nxjoseph) · Author: Joachim Werner 2026Q4 from dc8bdde0ac
sysutils/rmlint2.11.0 package 2.10.1.11_1Remove duplicates and other lint from your filesystem
sysutils/rmlint: Update 2.10.1 => 2.11.0

Changelog:
https://github.com/sahib/rmlint/blob/v2.11.0/CHANGELOG.md

PR:		300443
Approved by:	osa, vvd (mentors, implicit)
MFH:		2026Q4

(cherry picked from commit dc8bdde0ac382a848d7586d4890d331f7ba3611b)
1ea15e50f6
Yusuf Yaman (nxjoseph) · Author: Joachim Werner MFH 2026Q4 ✓
sysutils/rmlint2.11.0 package 2.10.1.11_1Remove duplicates and other lint from your filesystem
sysutils/rmlint: Update 2.10.1 => 2.11.0

Changelog:
https://github.com/sahib/rmlint/blob/v2.11.0/CHANGELOG.md

PR:		300443
Approved by:	osa, vvd (mentors, implicit)
MFH:		2026Q4
dc8bdde0ac
Yusuf Yaman (nxjoseph) · Author: Howard Holm 2026Q4 from da7f0928a3
security/tang16 package 15_1Tang is a small daemon for binding data to the presence of a network
security/tang: Update 15 => 16

Changelog:
https://github.com/latchset/tang/releases/tag/v16

While here, sort Makefile (pet port{clippy,fmt,lint}).

PR:		300489
Approved by:	osa, vvd (mentors, implicit)

(cherry picked from commit da7f0928a3052e7ab1bbf6a7d7323026d5308546)
21db68207d
Yusuf Yaman (nxjoseph) · Author: Howard Holm MFH 2026Q4 ✓
security/tang16 package 15_1Tang is a small daemon for binding data to the presence of a network
security/tang: Update 15 => 16

Changelog:
https://github.com/latchset/tang/releases/tag/v16

While here, sort Makefile (pet port{clippy,fmt,lint}).

PR:		300489
Approved by:	osa, vvd (mentors, implicit)
da7f0928a3
Yusuf Yaman (nxjoseph) · Author: takefu 2026Q4 from 329cb3e3de
multimedia/streamlink8.6.3 package 8.6.2Command-line utility that pipes video streams
multimedia/streamlink: Update 8.6.2 => 8.6.3

Changelog:
https://github.com/streamlink/streamlink/releases/tag/8.6.3

PR:		300495
Approved by:	osa, vvd (mentors, implicit)
MFH:		2026Q4

(cherry picked from commit 329cb3e3de81a717c344e24521086f0f85c36544)
32f7042617
Yusuf Yaman (nxjoseph) · Author: takefu MFH 2026Q4 ✓
multimedia/streamlink8.6.3 package 8.6.2Command-line utility that pipes video streams
multimedia/streamlink: Update 8.6.2 => 8.6.3

Changelog:
https://github.com/streamlink/streamlink/releases/tag/8.6.3

PR:		300495
Approved by:	osa, vvd (mentors, implicit)
MFH:		2026Q4
329cb3e3de
Jochen Neumeister (joneum) 2026Q4 from 64781d7f3a
www/linux-chrome157.0.8103.38 package 156.0.8078.47Google web browser based on WebKit3 VuXML advisories
www/linux-chrome: Security update to 157.0.8103.38

Fixes buffer overflows in Dawn, memory corruption in ANGLE and use
after free in WebGL, Prerender, Geometry and Core, each of which lets
a crafted page execute code outside the sandbox.

Changelog:	https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html

Security:	380c9ad2-d81f-11f1-a214-a0369f7f7be0
Security:	3749ce48-d5ce-11f1-9bfa-a8a1599412c6
Security:	60814125-d630-11f1-9bfa-a8a1599412c6
Sponsored by:	Netzkommune GmbH

(cherry picked from commit 64781d7f3a12bc129634c10b3a6977c2041c1129)
da4c90bd57
Jochen Neumeister (joneum) · Author: Dima Panov 2026Q4 from f6fd9e1902
www/linux-chrome156.0.8078.47Google web browser based on WebKit3 VuXML advisories
www/linux-chrome: update to 156.0.8078.47 release

(cherry picked from commit f6fd9e19025fe642daa82af1113a7c0b834f215b)
95dfd13cd5
Hiroki Tagato (tagattie)
x11/hyprshutdown0.1.2 package 0.1.1_3Graceful shutdown utility for Hyprland
x11/hyprshutdown: Update to 0.1.2

While here, add missing dependencies per stage-qa suggestions.

Changelog: https://github.com/hyprwm/hyprshutdown/releases/tag/v0.1.2

Reported by:	GitHub (watch releases)
be638d1b98
Hiroki Tagato (tagattie)
x11/hyprlock0.9.7 package 0.9.6Hyprland's GPU-accelerated screen locking utility
x11/hyprlock: Update to 0.9.7

Changelog: https://github.com/hyprwm/hyprlock/releases/tag/v0.9.7

Reported by:	GitHub (watch releases)
ef6ccf07a8
Xin LI (delphij)
devel/google-cloud-cpp3.13.0 package 2.27.0_28C++ Idiomatic Clients for Google Cloud Platform services
devel/google-cloud-cpp: Update to 3.13.0

- opentelemetry-cpp is now a required dependency; crc32c is no
  longer used (Abseil's implementation is used instead).
- Drop CMake options that are no longer used by 3.x.
- Use GOOGLE_CLOUD_CPP_OVERRIDE_GOOGLEAPIS_URL to point at the
  googleapis distfile instead of copying it into the build tree.
- Add patches to use opentelemetry::nostd for opentelemetry-cpp
  types; upstream assumes opentelemetry-cpp is built with WITH_STL,
  which our devel/opentelemetry-cpp is not.

Changes:	https://github.com/googleapis/google-cloud-cpp/blob/v3.13.0/CHANGELOG.md
b65191d7b2
Hiroki Tagato (tagattie)
x11/hyprpaper0.8.5 package 0.8.4_2Blazing fast Wayland wallpaper utility with IPC controls
x11/hyprpaper: Update to 0.8.5

While here, add missing/remove excessive dependencies per stage-qa
suggestions.

Changelog: https://github.com/hyprwm/hyprpaper/releases/tag/v0.8.5

Reported by:	GitHub (watch releases)
747e404dcb
Jochen Neumeister (joneum) MFH 2026Q4 ✓
www/linux-chrome157.0.8103.38 package 156.0.8078.47Google web browser based on WebKit3 VuXML advisories
www/linux-chrome: Security update to 157.0.8103.38

Fixes buffer overflows in Dawn, memory corruption in ANGLE and use
after free in WebGL, Prerender, Geometry and Core, each of which lets
a crafted page execute code outside the sandbox.

Changelog:	https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html

Security:	380c9ad2-d81f-11f1-a214-a0369f7f7be0
Security:	3749ce48-d5ce-11f1-9bfa-a8a1599412c6
Security:	60814125-d630-11f1-9bfa-a8a1599412c6
Sponsored by:	Netzkommune GmbH
64781d7f3a
Hiroki Tagato (tagattie)
x11/hyprpicker0.4.8 package 0.4.7_1Color picker and magnifier for Wayland
x11/hyprpicker: Update to 0.4.8

While here, remove upstreamed patch.

Changelog: https://github.com/hyprwm/hyprpicker/releases/tag/v0.4.8

Reported by:	GitHub (watch releases)
da4abdbd8f
Hiroki Tagato (tagattie)
x11/xdg-desktop-portal-hyprland1.5.0 package 1.4.1xdg-desktop-portal backend for hyprland
x11/xdg-desktop-portal-hyprland: Update to 1.5.0

Changelog: https://github.com/hyprwm/xdg-desktop-portal-hyprland/releases/tag/v1.5.0

Reported by:	GitHub (watch releases)
3cc782b634
Alexey Dokuchaev (danfe)
deskutils/feathernotes1.3.2no package: not built, although its dependencies are · quarterly 1.3.2
deskutils/feathernotes: try to fix packaging after recent Qt update

Reported by:	pkg-fallout
04865f7df1
Kenneth Raplee (kenrap) 2026Q4 from 7c76d9b0a7
audio/qaudiosonar1.8.3_2 package 1.8.3_1Quick Audio Sonar
audio/qaudiosonar: Migrate to Qt6

The codebase uses no Qt5-only APIs, so this flips the port to qt:6 with
a C++17 compiler floor. One small source patch replaces the deprecated
Qt calls with their current equivalents.

(cherry picked from commit 7c76d9b0a7e4aae8b21f08611fe02d2a534c165d)
b35293dc98
Kenneth Raplee (kenrap) 2026Q4 from fe8766b149
deskutils/crqt-ng1.0.15_1no package: not built, although its dependencies are · quarterly 1.0.15
deskutils/crqt-ng: Fix build for linguisttools

(cherry picked from commit fe8766b149b7bd8e0dad094d3a0e8a6a8541cabe)
88324165fe
Kenneth Raplee (kenrap) 2026Q4 from 6478a856f1
devel/thonny5.0.1 package 4.1.7Python IDE for beginners
devel/thonny: Update to 5.0.1

Thonny now builds with the uv_build PEP 517 backend instead of setup.py,
so switch to USE_PYTHON=pep517 and add uv-build as a build dependency.
Upstream's <0.12 pin is out of reach for the port's uv-build 0.13.x, so
relax it at extract time. Match RUN_DEPENDS from pyproject.toml.

(cherry picked from commit 6478a856f13dccdb545915fbe7026b162aeafc2e)
84b7d14914
Kenneth Raplee (kenrap) 2026Q4 from 379c522c3e
audio/midipp2.1.7_2 package 2.1.7_1MIDI playback, recording, and live performance tool
audio/midipp: Migrate to Qt6

The codebase uses no Qt5-only APIs, so this flips the port to qt:6 with
a C++17 compiler floor. Several source patches replace the deprecated Qt
calls with their current equivalents.

(cherry picked from commit 379c522c3e25d4a38c6e84637ffe184c07905506)
52da119bfb
Kenneth Raplee (kenrap) 2026Q4 from 6bf16d9347
audio/hpsjam1.2.8_1 package 1.2.8Online jamming client and server tool
audio/hpsjam: Migrate to Qt6

The codebase uses no Qt5-only APIs, so this flips the port to qt:6 with
a C++17 compiler floor. One small source patch replaces the deprecated
Qt calls with their current equivalents.

(cherry picked from commit 6bf16d9347d0dc0f4047cc7526c23f157611330f)
2e8f136527
Kenneth Raplee (kenrap) MFH 2026Q4 ✓
devel/thonny5.0.1 package 4.1.7Python IDE for beginners
devel/thonny: Update to 5.0.1

Thonny now builds with the uv_build PEP 517 backend instead of setup.py,
so switch to USE_PYTHON=pep517 and add uv-build as a build dependency.
Upstream's <0.12 pin is out of reach for the port's uv-build 0.13.x, so
relax it at extract time. Match RUN_DEPENDS from pyproject.toml.
6478a856f1
Kenneth Raplee (kenrap) MFH 2026Q4 ✓
audio/qaudiosonar1.8.3_2 package 1.8.3_1Quick Audio Sonar
audio/qaudiosonar: Migrate to Qt6

The codebase uses no Qt5-only APIs, so this flips the port to qt:6 with
a C++17 compiler floor. One small source patch replaces the deprecated
Qt calls with their current equivalents.
7c76d9b0a7
Kenneth Raplee (kenrap) MFH 2026Q4 ✓
audio/midipp2.1.7_2 package 2.1.7_1MIDI playback, recording, and live performance tool
audio/midipp: Migrate to Qt6

The codebase uses no Qt5-only APIs, so this flips the port to qt:6 with
a C++17 compiler floor. Several source patches replace the deprecated Qt
calls with their current equivalents.
379c522c3e
Kenneth Raplee (kenrap) MFH 2026Q4 ✓
audio/hpsjam1.2.8_1 package 1.2.8Online jamming client and server tool
audio/hpsjam: Migrate to Qt6

The codebase uses no Qt5-only APIs, so this flips the port to qt:6 with
a C++17 compiler floor. One small source patch replaces the deprecated
Qt calls with their current equivalents.
6bf16d9347
Gleb Popov (arrowd)
misc/hwdata0.413,1 package 0.412,1Database of IDs used in PCI, PNP and USB devices
misc/hwdata: Update to 0.413

Reported by:	portscout!
1caa84fd63
Kai Knoblich (kai)
www/py-django-reversion6.5.1 package 6.5.0Provides comprehensive version control facilities to Django apps
www/py-django-reversion: Update to 6.5.1

Changelog:

https://github.com/etianen/django-reversion/releases/tag/v6.5.1
6381803f46
Kai Knoblich (kai)
www/py-django-mptt0.21.1 package 0.21.0Utilities for implementing Modified Preorder Tree Traversal in Django
www/py-django-mptt: Update to 0.21.1

Changelog:

https://github.com/django-mptt/django-mptt/blob/0.21.1/CHANGELOG.rst
ed9dcc9e0f
Kai Knoblich (kai)
textproc/py-mkdocs-rss-plugin1.20.0 package 1.17.9Generates a static RSS feed using git log and page.meta
textproc/py-mkdocs-rss-plugin: Update to 1.20.0

Changelog since 1.17.9:

https://github.com/Guts/mkdocs-rss-plugin/blob/1.20.0/CHANGELOG.md
af6e04b102
Kai Knoblich (kai)
textproc/py-backrefs8.2 package 8.1Wrapper around re and regex that adds additional back references
textproc/py-backrefs: Update to 8.2

Changelog:

https://github.com/facelessuser/backrefs/releases/tag/8.2
7fc4a63551
Kai Knoblich (kai)
games/pysolfc3.7.0 package 3.6.1Solitaire game, written in Python and the successor of PySol
games/pysolfc: Update to 3.7.0

Changelog:

https://github.com/shlomif/PySolFC/blob/pysolfc-3.7.0/NEWS.asciidoc
86c81722cc
Jochen Neumeister (joneum)
security/vuxml1.1_6Vulnerability and eXposure Markup Language DTD
security/vuxml: Document chromium security fixes

Add the Chrome 157 entry and list linux-chrome in the two previous
chromium entries, which left it out.

Obtained from:	https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html
Sponsored by:	Netzkommune GmbH
5308a25968
Rodrigo Osorio (rodrigo) 2026Q4 from 2d59ccefc7
www/p5-Starlet0.33Perl extension for standalone HTTP/1.0 server
www/p5-Starlet: update 0.32 -> 0.33

Changelog: https://metacpan.org/dist/Starlet/changes

Security:	prevent excessive CPU use when parsing malformed chunk-size lines
Security:	bound read allocations for large Content-Length values
Security:	suppress response bodies for HEAD requests and 204/304 responses
Security:	stream chunk data to the body buffer and limit chunk-size lines to 4096 bytes
(cherry picked from commit 2d59ccefc7de23da947d3543c2f78f2355c1af98)
e20de833f7
Hiroki Tagato (tagattie)
x11-wm/hyprland0.57.1 package 0.56.2_2Dynamic tiling Wayland compositor that doesn't sacrifice on its looks
x11-wm/hyprland: Update to 0.57.1

Release Annoucement: https://hypr.land/news/update57/
Changelog:
- https://github.com/hyprwm/Hyprland/releases/tag/v0.57.0
- https://github.com/hyprwm/Hyprland/releases/tag/v0.57.1

Reported by:	GitHub (watch releases)
ef5d0f22b2
Mathieu Arnold (mat)
Mk: generate SBOM .pc files for all ports

Each package and subpackage now installs an SBOM file in pkg-config
format, see pc(5).  The file is installed in ${PREFIX}/share/sbom/pc/.
The framework adds it to the plist automatically.

PR:		300098
Differential Revision:	https://reviews.freebsd.org/D60441
0774722088
Koichiro Iwao (meta)
net/cloudflare-speed-cli1.0.12 package 1.0.11Third-party CLI tool for Cloudflare Speed Test service
net/cloudflare-speed-cli: Update to 1.0.12
f6888c1e63
Nuno Teixeira (eduardo) MFH 2026Q4 requested
devel/codequery1.1.0_1no package: not built, although its dependencies are · quarterly 1.1.0
devel/codequery: Add missing qt6-tools build dependency

CMake requires Qt6LinguistTools, which was previously pulled in
indirectly and is no longer available, breaking configure.

MFH:		2026Q4
96b350c794
Nuno Teixeira (eduardo) MFH 2026Q4 requested
graphics/heimer4.5.0_1no package: not built, although its dependencies are · quarterly 4.5.0
graphics/heimer: Add missing qt6-tools build dependency

CMake requires Qt6LinguistTools, which was previously pulled in
indirectly and is no longer available, breaking configure.

MFH:		2026Q4
0fb37d13e8
Nuno Teixeira (eduardo)
games/trx1.12 package 1.11.1Open source re-implementation of Tomb Raider I, II and III
games/trx: Update to 1.12

ChangeLog: https://github.com/LostArtefacts/TRX/releases/tag/trx-1.12
29fcd01a67
Nuno Teixeira (eduardo)
emulators/sameboy1.0.5 package 1.0.4Game Boy and Game Boy Color emulator written in C
emulators/sameboy: Update to 1.0.5

ChangeLog: https://github.com/LIJI32/SameBoy/releases/tag/v1.0.5
ae41c078b2
Xin LI (delphij)
devel/py-ujson6.1.0 package 6.0.0Ultra fast JSON encoder and decoder for Python
devel/py-ujson: Update to 6.1.0

Changes:	https://github.com/ultrajson/ultrajson/releases/tag/6.1.0
569449fbcb
Matthias Fechner (mfechner)
devel/glab1.128.0 package 1.127.0GitLab CLI tool bringing GitLab to your command line
devel/glab: update to 1.128.0

Changes:	https://gitlab.com/gitlab-org/cli/-/releases
b042497e2a
Hiroki Tagato (tagattie)
sysutils/hyprpolkitagent0.2.0_2 package 0.2.0Polkit authentication agent written in QT/QML
x11-toolkits/hyprtoolkit0.6.0_3 package 0.6.0_1Modern C++ Wayland-native GUI toolkit
x11-wm/hyprland0.56.2_4 package 0.56.2_2Dynamic tiling Wayland compositor that doesn't sacrifice on its looks
x11/hyprlauncher0.1.7_2 package 0.1.7Multipurpose and versatile launcher / picker for Hyprland
x11/hyprlock0.9.6_1 package 0.9.6Hyprland's GPU-accelerated screen locking utility
x11/hyprpaper0.8.4_3 package 0.8.4_2Blazing fast Wayland wallpaper utility with IPC controls
*/*: Bump port revision after hyprgraphics shlib version bump (a225535f5768)
34491c9f66
Hiroki Tagato (tagattie)
graphics/hyprgraphics0.6.0 package 0.5.1_3Hyprland graphics / resource utilities
graphics/hyprgraphics: Update to 0.6.0

Changelog: https://github.com/hyprwm/hyprgraphics/releases/tag/v0.6.0

Reported by:	GitHub (watch releases)
a225535f57
Hiroki Tagato (tagattie)
sysutils/hyprpolkitagent0.2.0_1 package 0.2.0Polkit authentication agent written in QT/QML
x11-toolkits/hyprtoolkit0.6.0_2 package 0.6.0_1Modern C++ Wayland-native GUI toolkit
x11-wm/hyprland0.56.2_3 package 0.56.2_2Dynamic tiling Wayland compositor that doesn't sacrifice on its looks
x11/hyprlauncher0.1.7_1 package 0.1.7Multipurpose and versatile launcher / picker for Hyprland
*/*: Bump port revision after aquamarine shlib version bump (4f44f56ed746)
615f91320d
Hiroki Tagato (tagattie)
x11-toolkits/aquamarine0.16.0 package 0.15.1Very light linux rendering backend library
x11-toolkits/aquamarine: Update to 0.16.0

Changelog: https://github.com/hyprwm/aquamarine/releases/tag/v0.16.0

Reported by:	GitHub (watch releases)
4f44f56ed7
Hiroki Tagato (tagattie)
mail/py-resend2.51.0 package 2.50.1Resend Python SDK
mail/py-resend: Update to 2.51.0

Changelog: https://github.com/resend/resend-python/releases/tag/v2.51.0

Reported by:	Repology
bf190893c8
Hiroki Tagato (tagattie)
devel/py-ty0.0.96 package 0.0.95Extremely fast Python type checker, written in Rust
devel/py-ty: Update to 0.0.96

Changelog: https://github.com/astral-sh/ty/blob/0.0.96/CHANGELOG.md

Reported by:	portscout
c51e455a9a
Hiroki Tagato (tagattie)
databases/py-redisvl0.30.0 package 0.29.0Python client library and CLI for using Redis as a vector database
databases/py-redisvl: Update to 0.30.0

Changelog: https://github.com/redis/redis-vl-python/releases/tag/v0.30.0

Reported by:	portscout
55b92d36a3
Michael Johnson (ahze)
multimedia/jellyfin-ffmpeg8.1.3.2 package 8.1.3.1_4FFmpeg with patches for HDR tone mapping (tonemapx/libplacebo)
multimedia/jellyfin-ffmpeg: Update to 8.1.3.2

Changelog:	https://github.com/jellyfin/jellyfin-ffmpeg/releases/tag/v8.1.3-2
Reviewed by:	dtxdf
Approved by:	dtxdf (mentor)
Differential Revision:	https://reviews.freebsd.org/D61165
8723a1024f
Michael Johnson (ahze)
sysutils/py-dbuild1.13.1 package 1.13.0Build, test, and push FreeBSD OCI container images
sysutils/py-dbuild: Update to 1.13.1

ChangeLog:

- https://github.com/daemonless/dbuild/releases/tag/v1.13.1

Reviewed by:	dtxdf
Approved by:	dtxdf (mentor, maintainer)
Differential Revision:	https://reviews.freebsd.org/D61171
2094f47864
Hiroki Tagato (tagattie)
devel/zizmor1.32.0 package 1.31.1Static analysis for GitHub Actions
devel/zizmor: Update to 1.32.0

Changelog: https://github.com/zizmorcore/zizmor/releases/tag/v1.32.0

Reported by:	GitHub (watch releases)
5975cd092a
Palle Girgensohn (girgen)
databases/pgbadger13.3 package 13.2Very competent log analyzer for PostgreSQL
databases/pgbadger: Update to 13.3

Release notes:	https://github.com/darold/pgbadger/releases/tag/v13.3
e83ce9c144
Mark Felder (feld)
net-mgmt/omada66.3.0.111 package 6.3.0.45Omada SDN Controller v6
net-mgmt/omada6: Update to 6.3.0.111
b84b3492d5
Tuesday, 3 November 2026
Dave Cottlehuber (dch)
textproc/markterm0.17.0 package 0.16.0Render Markdown to the terminal, to Markdown, or to PDF
textproc/markterm: Update to 0.17.0

- bump the rebased litehtml submodule at d908f3f8
- regenerate patches against the new sources

Sponsored by:	SkunkWerks, GmbH
5fd4a9a249
Dave Cottlehuber (dch)
ports-mgmt/git-proxy0.11.0no package built yet
ports-mgmt/git-proxy: New port - generic caching repository proxy

- serve pkg(8) repositories at /freebsd/${ABI}/${set}/
- serve custom repositories from upstream.freebsd_repositories at
    /freebsd/{name}/
- https://github.com/git-pkgs/proxy
- cache many different types of asset and package registries

Sponsored by:	SkunkWerks, GmbH
aa11c086dc
Hiroki Tagato (tagattie)
www/monolith2.11.6 package 2.11.5CLI tool for saving complete web pages as a single HTML fileHigher version available: 2.12.0
www/monolith: Update to 2.11.6 and take maintainership

While here, claim maintainership after three consecutive maintainer
timeouts.

Changelog: https://github.com/Y2Z/monolith/releases/tag/v2.11.6

PR:		299625
Approved by:	lcook (former maintainer, timeout 2 weeks)
f09078f233
Romain Tartière (romain) 2026Q4 from de978c8335
databases/openvoxdb-terminus88.18.0 package 8.17.1PuppetDB storeconfigs backend terminus module
databases/openvoxdb88.18.0 package 8.17.1PuppetDB storeconfigs backend
databases/openvoxdb8: Update to 8.18.0

Release notes:
https://github.com/OpenVoxProject/openvoxdb/releases#release-8.18.0

With hat:	puppet

(cherry picked from commit de978c83354d795dd37496acc790f02666a741e9)
dca77393d3
Romain Tartière (romain) 2026Q4 from fb12b01bd7
sysutils/openvox-server88.18.0 package 8.17.1Puppet Server running in the JVM
sysutils/openvox-server8: Update to 8.18.0

Release notes:
https://github.com/OpenVoxProject/openvox-server/releases/tag/8.18.0

With hat:	puppet

(cherry picked from commit fb12b01bd779d6a0e08c83c2e08cbcff449d9800)
765da84232
Romain Tartière (romain) 2026Q4 from f5f65dd693
sysutils/openvox-agent88.32.0 package 8.31.2Configuration management framework written in Ruby
sysutils/openvox-agent8: Update to 8.32.0

Release notes:
https://github.com/OpenVoxProject/openvox/releases/tag/8.32.0

With hat:	puppet

(cherry picked from commit f5f65dd693f988e3f2c8d96eaaf7309ba374ade6)
af3d5c8e40
Romain Tartière (romain)
databases/openvoxdb-terminus99.2.0 package 9.1.1PuppetDB storeconfigs backend terminus module
databases/openvoxdb99.2.0 package 9.1.1PuppetDB storeconfigs backend
databases/openvoxdb9: Update to 9.2.0

Release notes:
https://github.com/OpenVoxProject/openvoxdb/releases#release-9.2.0

With hat:	puppet
fc5ef9f792
Romain Tartière (romain)
sysutils/openvox-server99.2.0 package 9.1.1Puppet Server running in the JVM
sysutils/openvox-server9: Update to 9.2.0

Release notes:
https://github.com/OpenVoxProject/openvox-server/releases/tag/9.2.0

With hat:	puppet
e8d79641d0
Romain Tartière (romain) MFH 2026Q4 ✓
sysutils/openvox-server88.18.0 package 8.17.1Puppet Server running in the JVM
sysutils/openvox-server8: Update to 8.18.0

Release notes:
https://github.com/OpenVoxProject/openvox-server/releases/tag/8.18.0

With hat:	puppet
fb12b01bd7
Romain Tartière (romain)
sysutils/rubygem-choria-mcorpc-support2.28.0 package 2.27.0Ruby support for the Choria Orchestration Server
sysutils/rubygem-choria-mcorpc-support: Update to 0.28.0

Release notes:
https://github.com/choria-io/choria-mcorpc-support/releases/tag/2.28.0

With hat:	puppet
83a63a443c
Romain Tartière (romain)
sysutils/openvox-agent99.3.0 package 9.2.1Configuration management framework written in Ruby
sysutils/openvox-agent9: Update to 9.3.0

Release notes:
https://github.com/OpenVoxProject/openvox/releases/tag/9.3.0

With hat:	puppet
d848baeb6e
Romain Tartière (romain) MFH 2026Q4 ✓
sysutils/openvox-agent88.32.0 package 8.31.2Configuration management framework written in Ruby
sysutils/openvox-agent8: Update to 8.32.0

Release notes:
https://github.com/OpenVoxProject/openvox/releases/tag/8.32.0

With hat:	puppet
f5f65dd693
Rene Ladan (rene) 2026Q4 from 2dcb31b474
net/ooni-probe-cli3.31.1 package 3.31.0Next generation OONI Probe CLI
net/ooni-probe-cli: update to 3.31.1

Security: 	updated brotli dependency [1]
MFH:		2026Q4

[1] https://github.com/andybalholm/brotli/commit/33c2a9884269798192b5ecf171288f98939dbe42

(cherry picked from commit 2dcb31b47481c80b19fa8548883fa3f0dd0bf92c)
f003b2ff16
Rene Ladan (rene) 2026Q4 from 7312c71552
net/ooni-probe-cli3.31.0Next generation OONI Probe CLI
net/ooni-probe-cli: update to 3.31.0

(cherry picked from commit 7312c7155241ff90ca5f69382d3dc99cc7f3fca8)
659bde3661
Rene Ladan (rene) MFH 2026Q4 ✓
net/ooni-probe-cli3.31.1 package 3.31.0Next generation OONI Probe CLI
net/ooni-probe-cli: update to 3.31.1

Security: 	updated brotli dependency [1]
MFH:		2026Q4

[1] https://github.com/andybalholm/brotli/commit/33c2a9884269798192b5ecf171288f98939dbe42
2dcb31b474
Devin Teske (dteske)
x11-wm/bvwm1.1.5.b.10 package 1.1.5.b.9B? Virtual Window Manager (fvwm3 fork)
x11-wm/bvwm: Update to 1.1.5.b.10

ChangeLog: https://github.com/FrauBSD/bvwm/blob/1.1.5-bvwm.10/BCHANGELOG.md
4f43ff5b3e
Devin Teske (dteske)
x11/bhotkeys-audio1.3 package 1.2Volume and audio-output hotkeys for bhotkeys
x11/bhotkeys-audio: Update to 1.3

ChangeLog: https://github.com/FrauBSD/bhotkeys-audio/blob/1.3/CHANGELOG.md
7e861e5776
Devin Teske (dteske)
x11/bosd11.0 package 10.9X11 on-screen display engineHigher version available: 11.1
x11/bosd: Update to 11.0

ChangeLog: https://github.com/FrauBSD/bosd/blob/11.0/CHANGELOG.md
7c1843cf84
Devin Teske (dteske)
x11/bhotkeys1.9 package 1.8Grab-proof X11 plugin hotkey listener
x11/bhotkeys: Update to 1.9

ChangeLog: https://github.com/FrauBSD/bhotkeys/blob/1.9/CHANGELOG.md
19696c87e0
Rene Ladan (rene)
java/apache-commons-lang2.6_6Apache library with helper utilities for the java.lang API1 VuXML advisory
java/apache-commons-lang: Remove expired port

2026-10-31 java/apache-commons-lang: Unpatched CVE, last release in 2011, does not compile with Java 11+, not actively maintained. Superseded by port java/apache-commons-lang3.
1527ba9655
Rene Ladan (rene)
textproc/lucene3.6.2_3Full-text search engine for Java
textproc/lucene: Remove expired port

2026-10-31 textproc/lucene: Release from 2013. Unsupported upstream. Lucene is now at version 10.X. Superseded in ports by textproc/lucene9.
4449433dd6
Sergey A. Osokin (osa)
databases/kividb1.2.0 package 1.1.3Fast, multi-threaded Redis and Valkey
databases/kividb: update: 1.1.3 -> 1.2.0

ChangeLog:	https://github.com/kividbio/kividb/compare/v1.1.3...v1.2.0

Sponsored by:	tipi.work
a5a3023661
Devin Teske (dteske)
games/eduke3220260807_1 package 20260807Duke Nukem 3D Port based on JFDuke and EDuke
games/eduke32: Add fullscreen-display patch

In window managers such as dwm, fvwm, bvwm, etc. moving fullscreen
windows should cause resizing to the new output display.

eduke32 automatically resizes in window mode but not when asked to
run fullscreen. This patch causes resize when, for example, a user
in dwm utilizes Alt+Shift+Period (or Alt+Shift+Comma) to send the
game to another screen.
6898902daf
Devin Teske (dteske)
games/eduke3220260807Duke Nukem 3D Port based on JFDuke and EDuke
games/eduke32: Switch to using DISTVERSION
bffe7af067
Devin Teske (dteske)
games/eduke3220260807Duke Nukem 3D Port based on JFDuke and EDuke
games/eduke32: Fixes for portfmt -D Makefile
406cbc54e0
Devin Teske (dteske)
games/eduke3220260807Duke Nukem 3D Port based on JFDuke and EDuke
games/eduke32: Fixes for portclippy Makefile
34659be822
Rene Ladan (rene)
sysutils/dekit0.9.6_4Run multiple commands in parallel
sysutils/dekit: Remove expired port

2026-11-03 sysutils/dekit: Cannot upgrade due to linuxisms
6f181ad8b3
Renato Botelho (garga)
sysutils/flock2.41.6 package 2.41.5Manage locks from shell scriptsHigher version available: 2.42.4
sysutils/flock: Update to 2.41.6

Sponsored by:	Rubicon Communications, LLC ("Netgate")
950b2283ea
Renato Botelho (garga)
net/tcpdump4.99.7 package 4.99.6Ubiquitous network traffic analysis tool
net/tcpdump: Update to 4.99.7

Sponsored by:	Rubicon Communications, LLC ("Netgate")
0051aaabba
Renato Botelho (garga)
net/igmpproxy0.4_4,1 package 0.4_3,1Multicast forwarding IGMP proxy
net/igmpproxy: Fix igmpproxy_conf rc.d knob, document user and chroot

- The rc.d script documented igmpproxy_conf but read igmpproxy_config,
  and required_files always pointed to the default path.  Honor
  igmpproxy_conf, keeping igmpproxy_config as a fallback so existing
  setups do not break, and check the file actually in use.
- Add commented user and chroot examples to the sample configuration.
  They allow igmpproxy to drop privileges once sysutils/mac_igmpproxy
  is loaded.

Sponsored by:	Rubicon Communications, LLC ("Netgate")
fbe636b5d3
Renato Botelho (garga) · Author: leper
sysutils/mac_igmpproxy1.0.1501000no package built yet
sysutils/mac_igmpproxy: New port, MAC policy for net/igmpproxy

A MAC framework policy that grants the multicast routing privilege to
a single configurable UID, so net/igmpproxy can drop root and run as
the new igmpproxy user (UID/GID 422).  The policy can be tuned or
disabled with the security.mac.igmpproxy.uid and
security.mac.igmpproxy.enabled sysctls.

PR:		291647
c49d4d3dd8
Renato Botelho (garga) · Author: Dan Mahoney
emulators/open-vm-tools13.1.0_1,2 package 13.1.0,2Open VMware tools for FreeBSD VMware guests
emulators/open-vm-tools: Use fixed name and rcvar in vmware-kmod

vmware-kmod handles two kernel modules by setting name and rcvar from
$kernel_mod and calling run_rc_command twice.  Tools that read rcvar
without running the script, such as service -e, see the unexpanded
variable and check the nonexistent $vmware_guest__enable, warning on
every host where the package is installed.

Give the script a fixed name (vmware_guest_kmod) and rcvar
(vmware_guest_kmod_enable), and have start and status loop over the
modules, each honoring its own knob.  The script name and rc.conf
knobs are unchanged: vmware_guest_kmod_enable (default YES) still
supplies the defaults for vmware_guest_vmmemctl_enable and
vmware_guest_vmblock_enable, either of which can still be enabled on
its own, and rc.conf.d files for the per-module names are still read.

PR:		300431
Sponsored by:	Rubicon Communications, LLC ("Netgate")
c1dd95b515
Renato Botelho (garga)
net/dhcpdump2.00 package 1.8_1Decode and diagnose sniffed DHCP packets
net/dhcpdump: Update to 2.00 and switch to the active fork

The original dhcpdump 1.8 has not been maintained for many years.  Move
to the dhcpdump-org fork, which Debian and Fedora already ship.

Changes since 1.8 include VLAN (802.1Q/802.1ad) support, reading from
pcap files, an option to dump the whole packet in hex, option 82/121/
249/93/94/116 decoding, updated IANA option names and several fixes for
out-of-bounds reads on crafted packets.

Add a TUI option, enabled by default, for the new interactive session
tracking interface (-t).  It depends on devel/yascreen.

PR:		297349
Reported by:	diizzy
Sponsored by:	Rubicon Communications, LLC ("Netgate")
686d273424