CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

net-im/prosody 13.0.7

Simple extensible XMPP server written in Lua

Port info

Maintainer
twm@pdp11.pw
Packages
latest: 13.0.7
Upstream
up to date
Last update
to 13.0.7 · 22efa0c10d
Quarterly
2026Q4: 13.0.7
WWW
https://www.prosody.im/
Links
cgit · VuXML

Install

Package
# pkg install prosody
installs 13.0.7 from latest; from quarterly (2026Q4) 13.0.7
Port
# cd /usr/ports/net-im/prosody && make install clean
Size
441 KiB download · 2.1 MiB installed
Depends on
devel/icu 76.1,1, devel/lua-libevent 0.4.6_3, devel/luafilesystem 1.8.0, dns/luaunbound 1.1.0, lang/lua54 5.4.8, net/lua-luasocket 3.1.0_1,1, security/luasec 1.3.2, textproc/lua-luaexpat 1.5.2
License
MIT
Creates
user prosody, group prosody
pkg-message
Shown after installing
If you're running Prosody in a jail and experience problems, please add
the following to the global section of your prosody.cfg.lua:

interfaces = { 'x.x.x.x' }

where 'x.x.x.x' is the public IP you wish Prosody to bind to.
Shown after upgrading
Prosody 13.0 will function correctly on any config file that is compatible
with 0.12. No changes are required, however there may be some recommendations.
The best way to find these is to run:

  prosodyctl check config

If you are upgrading from an earlier release and you use PostgreSQL or SQLite
for storage, Prosody may refuse to initialize storage until you complete a
schema upgrade. To check for any necessary schema upgrades and apply them, run:

  prosodyctl mod_storage_sql upgrade

For more detailed information check the release notes at:

  https://prosody.im/doc/release/13.0.0
Shown after removing
===> post-deinstallation information for prosody:"

     Note:
     Prosody related user accounts and groups were not removed.

     To remove the user and group which were created by 
     the installation of this package, run:

     pw userdel -n prosody
     pw groupdel -n prosody

     and to remove all server data:
     rm -rf /var/db/prosody"
     rm -rf /var/run/prosody"

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 1613.0.713.0.7–
FreeBSD 1513.0.713.0.7–
FreeBSD 1413.0.713.0.713.0.7

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 1513.0.713.0.7–
FreeBSD 1413.0.713.0.713.0.7

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 13.0.7.

Fixed (6)

Show 6 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (107)

Yusuf Yaman (nxjoseph) · 13.0.7 MFH 2026Q3 ✓
net-im/prosody: Update 13.0.6 => 13.0.7

Latest maintenance release in the stable 13.x series covering some
minor changes and several important bug fixes.

The release notes strongly recommend that BSD users upgrade.

Changelog:
https://prosody.im/doc/release/13.0.7

PR:		298829
Approved by:	osa, vvd (Mentors, implicit)
MFH:		2026Q3
22efa0c10d
Vladimir Druzenko (vvd) · 13.0.6
net-im/prosody: Update 13.0.5 => 13.0.6

Changelog:
https://prosody.im/doc/release/13.0.6

PR:		295652
Sponsored by:	UNIS Labs
MFH:		2026Q2
24b798e3a3
Rene Ladan (rene) · 13.0.5
all: drop support for FreeBSD 13, mips and risc64sf

Reviewed by:            many (*)
Differential Revision:  https://reviews.freebsd.org/D55624
Differential Revision:  https://reviews.freebsd.org/D55642 (merged in from bofh)

many (*)
  acm arrowd brooks cmt dch decke dinoex eduardo fluffy fuz gahr garga
  jbeich joerg jrm kai kenrap martymac matthew mfechner michaelo mizhka
  nobutaka pkubaj se tagattie thj

  Anton Saietskii
  GenericRikka
  Gert Doering
  Jan Bramkamp
  Oleh Hushchenkov
  Oleksandr Kryvulia
  Ralf van der Enden
  Yamagi

  desktop kde python tcltk office
2a7c056120
Yusuf Yaman (nxjoseph) · 13.0.5
net-im/prosody: Security update 13.0.4 => 13.0.5

Release Notes:
https://prosody.im/doc/release/13.0.5

PR:		294897, 294898
Reported by:	Thomas Morper <twm@pdp11.pw> (maintainer)
Approved by:	vvd (co-mentor)
MFH:		2026Q2
Security:	a420f545-442c-11f1-b9b5-589cfc0dc9a2
0888cf1428
Vladimir Druzenko (vvd) · 13.0.4
net-im/prosody: Update 13.0.3 => 13.0.4

Release Notes:
https://prosody.im/doc/release/13.0.4

Add build,run to USES=lua:54 - port doesn't link with liblua-54.so.

PR:	292725
599f556052
Vsevolod Stakhov (vsevolod) · 13.0.3_1
security/libsodium: Update to 1.0.21

The API remains compatible but bumping all dependent ports as SHLIB
has changed.

Changelog: https://github.com/jedisct1/libsodium/releases/tag/1.0.21-RELEASE
Security: https://00f.net/2025/12/30/libsodium-vulnerability/
PR: 279347
8b878d88b4
Vladimir Druzenko (vvd) · 13.0.3
net-im/prosody: Update 13.0.2 => 13.0.3

Changelog:
https://prosody.im/doc/release/13.0.3

PR:	292218
89a64f52fe
Vladimir Druzenko (vvd) · 13.0.2
net-im/prosody: Update 13.0.1 => 13.0.2

Changelog:
https://prosody.im/doc/release/13.0.2

PR:	287160
97a0637005
Zsolt Udvari (uzsolt) · 13.0.1
net-im/prosody: Update to 13.0.1

Update to new major version 13.0.1
Add update hints to pkg-message
Add patch for FreeBSD <14
Remove obsolete LUA_PREMK variable
Some minor cleanups (portfmt, portclippy)

Changelog: https://prosody.im/doc/release/13.0.1

PR:		285896
Approved by:	submitter is maintainer
78219422d9
Daniel Engberg (diizzy) · 0.12.5_1
*/*: Bump consumers of devel/icu

...to avoid library mismatches
ff33dd4700
Vanilla I. Shu (vanilla) · 0.12.5
net-im/prosody: update to 0.12.5.

* Update to 0.12.5
 * Update maintainer's e-mail address
 * Remove dependency on lua-bitop (not required with Lua 5.2+)

PR:		283805
Reported by:	maintainer
7c6144487a
Po-Chuan Hsieh (sunpoet) · 0.12.4_5
net-im/prosody: Fix PLIST after mandir migration

====> Running Q/A tests (stage-qa)
Warning: Installing man files in /usr/local/man is no longer supported. Consider installing these files in /usr/local/share/man instead.
51537 drwxr-xr-x  3 root  wheel  64 Aug 19 19:46:14 2024 /wrkdirs/usr/ports/net-im/prosody/work/stage/usr/local/man
====> Checking for pkg-plist issues (check-plist)
===> Parsing plist
===> Checking for items in STAGEDIR missing from pkg-plist
Error: Orphaned: @dir man/man1
===> Checking for items in pkg-plist which are not in STAGEDIR
===> Error: Plist issues found.
*** Error code 1

Approved by:	portmgr (blanket)
444a0768a1
Po-Chuan Hsieh (sunpoet) · 0.12.4_5
textproc/lua-luaexpat: Move textproc/luaexpat to textproc/lua-luaexpat

- Bump PORTREVISION of dependent ports for dependency change
d6de2c128d
Po-Chuan Hsieh (sunpoet) · 0.12.4_4
net/lua-luasocket: Move net/luasocket to net/lua-luasocket

- Bump PORTREVISION of dependent ports for dependency change
6c56b36aab
Vsevolod Stakhov (vsevolod) · 0.12.4_3
security/libsodium: update to 1.0.19, bump dependent ports

PR:	278259
Reported by:	Andrey Korobkov <alster-vinterdalen.se>
b66e4949cb
Muhammad Moinur Rahman (bofh) · 0.12.4_2
net-im/prosody: Moved man to share/man

Approved by:    portmgr (blanket)
758eff80cc
Jan Beich (jbeich) · 0.12.4_1
devel/icu: update to 74.1

Changes:	https://github.com/unicode-org/icu/releases/tag/release-74-1
Reported by:	GitHub (watch releases)
PR:		274317
Exp-run by:	antoine (incomplete)
Approved by:	fluffy
e55b80195e
Vanilla I. Shu (vanilla) · 0.12.4
net-im/prosody: update to 0.12.4.

PR:		273608
bca7b3cc93
Jan Beich (jbeich) · 0.12.3_1
devel/icu: update to 73.1

- Temporarily switch to GitHub auto archive (release artifacts are N/A atm)

Changes:	https://github.com/unicode-org/icu/releases/tag/release-73-1
Reported by:	GitHub (watch releases)
PR:		270422
Exp-run by:	antoine
f1f1a8be88
Fernando Apesteguía (fernape) · 0.12.3
net-im/prosody: update to 0.12.3

ChangeLog: https://prosody.im/doc/release/0.12.3

PR:		269746
Reported by:	thomas@beingboiled.info (maintainer)
7d620af116
Fernando Apesteguía (fernape) · 0.12.2
net-im/prosody: update to 0.12.2

ChangeLog: https://prosody.im/doc/release/0.12.2

Fixes and improvements

 * util.stanza: Allow U+7F when constructing stazas
 * net.unbound: Preserve built-in defaults and Prosodys settings for luaunbound
 * mod_smacks: Disable not implemented resumption behavior on s2s
 * mod_http: Allow disabling CORS in the http_cors_override option and by default

Minor changes

 * util.json: Accept empty arrays with whitespace
 * util.stanza: Adjust number of return values to handle change in dependency
   of test suite
 * util.startup: Ensure import() is available in prosodyctl
 * mod_storage_sql: Fix initialization when called from prosodyctl
 * mod_storage_sql: Fix the summary API with Postgres
 * mod_admin_shell: Fixes for showing data related to disconnected sessions
 * core.s2smanager: Don’t remove unrelated session on close of bidi session
 * mod_smacks: Don’t send redundant requests for acknowledgement
 * mod_admin_shell: Rename commands user:roles() to user:setroles() and
   user:showroles() to user:roles()
 * mod_smacks: Bounce unhandled stanzas from local origin
 * mod_bookmarks: Reduce log level of message about not having any bookmarks
 * mod_s2s: Fix firing buffer drain events
 * mod_http_files: Log warning about legacy modules using mod_http_files
 * util.startup: Wait for last shutdown steps
 * util.datamapper: Improve handling of schemas with non-obvious “type”
 * util.jsonschema: Fix validation to not assume presence of “type” field
 * util.jsonschema: Use same integer/float logic on Lua 5.2 and 5.3

PR:		268382
Reported by:	thomas@beingboiled.info (maintainer)
60dc26dd79
Jan Beich (jbeich) · 0.12.1_2
devel/icu: update to 72.1

Changes:	https://github.com/unicode-org/icu/releases/tag/release-72-1
Reported by:	GitHub (watch releases)
PR:		266582
Exp-run by:	antoine
dfe25d73e7
Stefan Eßer (se) · 0.12.1_1
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 0.12.1_1
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Baptiste Daroussin (bapt) · 0.12.1_1
net-im/prosody: use pkg-message to show message on remove
131f741e5a
Tobias C. Berner (tcberner) · 0.12.1
net-im: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  <ports@c0decafe.net>
  *  Adam Weinberger <adamw@FreeBSD.org>
  *  Alberto Villa <avilla@FreeBSD.org>
  *  Alexander Logvinov <ports@logvinov.com>
  *  Alexander Timoshenko <gonzo@univ.kiev.ua>
  *  Andrew Lewis <freeghb@gmail.com>
  *  Andrey Akhmichin <sepulkarium45@yahoo.com>
  *  Bartek Rutkowski <r@robakdesign.com>
  *  Bernard Spil <brnrd@freebsd.org>
  *  Brendan Molloy <brendan+freebsd@bbqsrc.net>
  *  Denis Shaposhnikov <dsh@vlink.ru>
  *  Dennis Herrmann <dhn@FreeBSD.org>
  *  Dmitry Sivachenko <demon@FreeBSD.org>
  *  Emanuel Haupt <ehaupt@FreeBSD.org>
  *  Eugene Grosbein <eugen@FreeBSD.org>
  *  Florent Thoumie <flz@FreeBSD.org>
  *  Frank Altpeter <frank@altpeter.de>
  *  Gea-Suan Lin <gslin@gslin.org>
  *  Geoffrey Mainland <mainland@apeiron.net>
  *  Henry Hu <henry.hu.sh@gmail.com>
  *  Jim Mock <jim@FreeBSD.org>
  *  Joe Marcus Clarke <marcus@FreeBSD.org>
  *  John Prather
  *  Jonathan Chen <jonc@chen.org.nz>
  *  Joseph S. Atkinson <jsatkinson@embarqmail.com>
  *  Junji NAKANISHI <jun-g@daemonfreaks.com>
  *  Kelly Cochran <kcochran@trolans.net>
  *  Koop Mast <kwm@FreeBSD.org>
  *  Kris Moore <kmoore@FreeBSD.org>
  *  Kris Moore <kmoore@freebsd.org>
  *  Lars Eggert <lars.eggert@gmx.net>
  *  Marc Bruenink
  *  Matthew West <mwest@uct.ac.za>
  *  Matthias Fechner <mfechner@FreeBSD.org>
  *  Max E. Kuznecov <mek@mek.uz.ua>
  *  Meethune Bhowmick <meethune@gmail.com>
  *  Michael Johnson <ahze@FreeBSD.org>
  *  Nicola Stanislao Vitale <nivit@FreeBSD.org>
  *  Nicola Vitale <nivit@email.it>
  *  Nikolay Pavlov <qpadla@gmail.com>
  *  Oleg Ginzburg (olevole@olevole.ru)
  *  Pavel Andreev
  *  Saulius Menkevicius <bob@nulis.lt>
  *  SeaD
  *  Seamus Venasse <svenasse@polaris.ca>
  *  Sergey Skvortsov <skv@protey.ru>
  *  Steve Wills <swills@FreeBSD.org>
  *  Sunpoet Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  TAKATSU Tomonari <tota@FreeBSD.org>
  *  Thierry Thomas <thierry@pompo.net>
  *  Tsung-Han Yeh <snowfly@yuntech.edu.tw>
  *  Vsevolod Stakhov <vsevolod@highsecure.ru>
  *  Wen Heping <wen@FreeBSD.org>
  *  Yen-Ming Lee <leeym@cae.ce.ntu.edu.tw>
  *  Yuri <yuri@tsoft.com>
  *  Yuri Victorovich
  *  Yuri Victorovich <yuri@rawbw.com>
  *  dd
  *  gahr
  *  gnome@freebsd.org
  *  jodocus <jodocus@jodocus.org>
  *  mph
  *  trasz
  *  vsevolod

With hat:	portmgr
103413d55f
Nuno Teixeira (eduardo) · 0.12.1
net-im/prosody: Update to 0.12.1

- switch to DISTVERSION

ChangeLog: https://prosody.im/doc/release/0.12.1

PR:		264581
1089efbe6e
Jan Beich (jbeich) · 0.12.0_1
devel/icu: update to 71.1

Changes:	https://github.com/unicode-org/icu/releases/tag/release-71-1
Reported by:	GitHub (watch releases)
PR:		262654
Exp-run by:	antoine
Approved by:	fluffy
268cee3b02
Neel Chauhan (nc) · 0.12.0
net-im/prosody: Update to 0.12.0

PR:	262667
7a96631d53
Li-Wen Hsu (lwhsu) · 0.11.13
net-im/prosody: Update to 0.11.13

ChangeLog: https://blog.prosody.im/prosody-0.11.13-released/

PR:		261450
03607b157e
Thomas Zander (riggs) · 0.11.12
net-im/prosody: Update to upstream release 0.11.12

Details:
- Changelog see https://blog.prosody.im/prosody-0.11.12-released
- Fixes a denial of service vulnerability (CVE-2022-0217)

PR:		261209
Reported by:	thomas@beingboiled.info (maintainer)
MFH:		2022Q1
Security:	CVE-2022-0217
73a52bb768
Li-Wen Hsu (lwhsu) · 0.11.11
net-im/prosody: Update to 0.11.11

ChangeLog:
  https://blog.prosody.im/prosody-0.11.11-released/

PR:		260584
15a424c932
Kevin Bowling (kbowling) · 0.11.10_1
net-im/prosody: fix failure when using libevent

PR:		257952
c336760ec1
Li-Wen Hsu (lwhsu) · 0.11.10
net-im/prosody: Update to 0.11.10

PR:		257595
MFH:		2021Q3
Security:	5ef14250-f47c-11eb-8f13-5b4de959822e
5767b5976b
Neel Chauhan (nc) · 0.11.9
net-im/prosody: Update to 0.11.9

PR:		255845
MFH:		2021Q2
Security:	fc75570a-b417-11eb-a23d-c7ab331fd711
643a6a5bc1
Mathieu Arnold (mat) · 0.11.8
all: Remove all other $FreeBSD keywords.
135fdeebb9
Mathieu Arnold (mat) · 0.11.8
Remove # $FreeBSD$ from Makefiles.
305f148f48
Mathieu Arnold (mat) · 0.11.8
Remove occurrences of %%LUA_LIBDIR%%.

Differential Revision:	https://reviews.freebsd.org/D29138
18f4cb47cc
Vanilla I. Shu (vanilla) · 0.11.8
Update to 0.11.8.

PR:		253549
Submitted by:	maintainer
9aa9417461
Steve Wills (swills) · 0.11.7
net-im/prosody: Update to 0.11.7

PR:		250032
Submitted by:	Thomas Morper <thomas@beingboiled.info> (maintainer)
b1ae6e16a7
Li-Wen Hsu (lwhsu) · 0.11.6_1
net-im/prosody: Do not use prosodyctl in init script

* Apply shebangfix.
* Update init script to directly control the Prosody
  daemon as using prosodyctl has been deprecated. [1]
* Add pkg-message to clearly state that setting the
  pidfile option in prosody.cfg.lua is required.
* Fix pkg-message formatting.

[1] https://blog.prosody.im/prosody-0.11.6-released/

PR:		249276
Submitted by:	Thomas Morper <thomas@beingboiled.info> (maintainer)
e626abca93
Li-Wen Hsu (lwhsu) · 0.11.6
net-im/prosody: Update to 0.11.6

PR:		249225
Submitted by:	Thomas Morper <thomas@beingboiled.info> (maintainer)
e5c4e01703
Tobias C. Berner (tcberner) · 0.11.5_1
net-im/prosody: Fix http files download

net-im/prosody: fix ETag creation

* Include patch from upstream to fix crash in mod_http_files
  when encountering large device- or inode-numbers [1]

[1] https://issues.prosody.im/1498

PR:		244618
Submitted by:	Thomas Morper <thomas@beingboiled.info> (maintainer)
Reported by:	rozhuk.im@gmail.com
e346c38a35
Mathieu Arnold (mat) · 0.11.5
USES=lua gained flavors.

Ports using USES=lua:module or lua:flavors will be flavored.  A range of
supported lua versions can be set using XX-YY (or XX-, or -YY, or simply ZZ)
for ports not supporting all lua versions.

USES=lua sets LUA_FLAVOR that needs to be used on all dependencies of
flavored lua ports, in a similar way as PHP or Python flavors.

PR:		245038
Submitted by:	andrew tao11 riddles org uk
Reviewed by:	mat, kevans, russ haley gmail com
Approved by:	mat (portmgr)
Differential Revision:	https://reviews.freebsd.org/D16494
beb1c1fe19
Tobias C. Berner (tcberner) · 0.11.5
net-im/prosody: Update to 0.11.5

- use https for the MASTER_SITES
- remove non-working mirror

ChangeLog: https://blog.prosody.im/prosody-0.11.5-released/

PR:		245040
Submitted by:	Thomas Morper <thomas@beingboiled.info>  (maintainer)
6d0860ccba
David Thiel (lx) · 0.11.4_1
New maintainer.

PR:		245413
Submitted by:  Thomas Morper
e227afbf89
Kurt Jaeger (pi) · 0.11.4_1
net-im/prosody: refactor and move to lua 5.2

- Use Lua 5.2 and drop support for the dead LuaJIT.
- Explicitly state all required configure options
  as the "freebsd" preset has some of them wrong.
- Do not install the example certs as they clutter the
  config directory and nobody should ever use them.
  They can be recreated with prosodyctl if needed.
- Remove the broken "daemonize" option from the rc script,
  handle all actions with "prosodyctl" instead.
- Change data directory from /usr/local/var/lib/prosody to
  /var/db/prosody and include instructions in UPDATING
- Install the prosody migrator
- Use arc4random

PR:		241619
Submitted by:	thomas@beingboiled.info
Reviewed by:	lx (maintainer), Sascha Biberhofer <ports@skyforge.at>
Approved by:	lx (maintainer timeout)
baee6b2d5e
Kubilay Kocak (koobs) · 0.11.4
net-im/prosody: Update to 0.11.4

Changelog:

  https://blog.prosody.im/prosody-0.11.4-released/

PR:		243460
Submitted by:	Thomas Morper <thomas beingboiled info>
Approved by:	portmgr (maintainer timeout: > 14 days)
MFH: 2010Q1	(blanket: bugfix release)
2fc828c848
Kubilay Kocak (koobs) · 0.11.3
net-im/prosody: Update to 0.11.3

Changelog:

  https://blog.prosody.im/prosody-0.11.3-released/

PR:		241488
Submitted by:	Thomas Morper <thomas beingboiled info>
Approved by:	portmgr (maintainer timeout: > 1 month)
MFH:		2020Q1 (blanket: bugfix release)
69062a0c41
Mathieu Arnold (mat) · 0.11.2_2
Convert to UCL & cleanup pkg-message (categories n)

(and missed 3 missed files from previous categories.)
2614c95748