CVE and update status of the FreeBSD ports tree3,924 unaddressed CVEs in 706 portsAll times are CET
Port details

www/brave 1.96.61_3

Brave web browser based on Chromium

Port info

Maintainer
freebsd@sysctl.cz
Packages
latest: 1.96.61_3
Upstream
Higher version available: 7.0.2 portscout
Last update
to 1.96.61_3 · 7b94b5e568
Quarterly
not in the 2026Q4 packages
WWW
https://brave.com/
CPE
Brave
Links
cgit · VuXML · Report wrong data

UPDATING

No entry in UPDATING affects this port.

Entries come from UPDATING in the ports tree. They are matched to a port through the AFFECTS line, which is free text, so an entry that names no port (“users of python”) or a port that no longer exists is not shown anywhere.

Install

Package
# pkg install brave
installs 1.96.61_3 from latest
Port
# cd /usr/ports/www/brave && make install clean
# make -C /usr/ports/www/brave config  # change options first
Size
202 MiB download · 657 MiB installed
License
MPL20
Options
10 of 12 on in the package: ALSA CODECS CUPS KERBEROS NODEMODS PIPEWIRE PULSEAUDIO QT6 SNDIO WIDEVINE
Show the 2 options that are off
DEBUG LTO
pkg-message
Shown after installing
## Shared memory

Brave, like Chromium, unlinks shared memory segments while they are still
mapped, which FreeBSD only allows with

	sysctl kern.ipc.shm_allow_removed=1

The /usr/local/bin/brave wrapper checks that sysctl and refuses to start the
browser without it.  To keep the setting across reboots, add

	kern.ipc.shm_allow_removed=1

to /etc/sysctl.conf.

## Screen sharing under Wayland

Choosing a screen or a window under Wayland goes through the ScreenCast
portal, which the PIPEWIRE option, on by default, talks to.  That portal only
answers if xdg-desktop-portal has a backend for the desktop in use.  On GNOME,
Xfce, MATE and Cinnamon that is

	deskutils/xdg-desktop-portal-gtk

while KDE Plasma and the wlroots compositors ship their own.  None of them is
a dependency of this package, since only the matching one is of any use.
Without a backend the picker stays empty and nothing is shared; under X11 no
portal is involved.

## DRM protected media

Playing DRM protected media needs the Widevine CDM, which this package does
not contain.  With the WIDEVINE option on, the default, the support for it is
compiled in and www/foreign-cdm, which came with this package, provides the
shim that runs the module, but the module itself comes from Google under
their own licence and has to be installed separately:

	cd /usr/ports/www/linux-widevine-cdm && make install clean

Brave reads the module through /usr/local/share/brave/WidevineCdm, which this package
links to the directory www/foreign-cdm installs it into.

It runs under the Linuxulator, so that has to be loaded as well:

	service linux enable && service linux start

The first protected page fails to play even when everything is in place, and
the CDM is only registered after the browser is restarted once -- a quirk of
foreign-cdm, documented in its own README.

Without it Brave says nothing: DRM protected pages simply fail to play,
brave://components leaves Widevine at 0.0.0.0, and the reason is only
visible with

	brave --enable-logging=stderr --vmodule='*cdm_registration*=1'

which then reports "Widevine enabled but no library found".

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 16✗✗–
FreeBSD 15✗✗–
FreeBSD 14✗✗✗

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 15✗✗–
FreeBSD 14✗✗✗

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 67

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.96.61_3.

Fixed (0)

No VuXML entries for this package.

Problem reports (1) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
300643www/brave: update to 1.97.59Open2026-11-10

Commits (3)

Dag-Erling Smørgrav (des) · 1.96.61_3 MFH 2026Q4 ✓
various: Bump Go ports for Go 1.26.11 / 1.27.4
7b94b5e568
Dima Panov (fluffy) · 1.96.61_2
brave: fix distinfo

Signed-off-by: Martin Filla <freebsd@sysctl.cz>
b93bc4c53a
Dima Panov (fluffy) · 1.96.61_2
www/brave: add new port (+)

Brave is a Chromium based web browser that blocks ads and trackers by
default.  It ships with a built-in ad blocker, HTTPS upgrading, fingerprinting
protection, a Tor enabled private window and an optional cryptocurrency
wallet.
6088a4dc87