security/wazuh-manager 4.14.9
Security tool to monitor and check logs and intrusions (manager)
security/wazuh-server 4.14.9
Components for analyze the data received from the agents
security/wazuh*: update to 4.14.9
- Update cpython bundle to 3.11.17
- Remove obsolete patch file
- Use PYTHON_DISTVERSION for avoid temporarily pkg-plist issues when
system python is updated. The best is keep system python and bundle
python with the same version.
ChangeLog at:
https://documentation.wazuh.com/current/release-notes/release-4-14-9.html
PR: 299490
(cherry picked from commit 47b0693c6d1b507bd0acd1908d8317c0e43f547a)
security/wazuh-manager 4.14.9
Security tool to monitor and check logs and intrusions (manager)
security/wazuh-server 4.14.9
Components for analyze the data received from the agents
security/wazuh*: update to 4.14.9
- Update cpython bundle to 3.11.17
- Remove obsolete patch file
- Use PYTHON_DISTVERSION for avoid temporarily pkg-plist issues when
system python is updated. The best is keep system python and bundle
python with the same version.
ChangeLog at:
https://documentation.wazuh.com/current/release-notes/release-4-14-9.html
PR: 299490
lang/php82 8.2.35_1
PHP Scripting Language (8.2.X branch)
lang/php83 8.3.36_1
PHP Scripting Language (8.3.X branch)
lang/php84 8.4.27_1
PHP Scripting Language (8.4.X branch)
lang/php85 8.5.12_1
PHP Scripting Language (8.5.X branch)
lang/php8*: Force fresh FreeBSD.org package builds.
No functional changes to the ports.
The packages were built manually today from a temporary branch to
incorporate the RCE fixes without triggering unnecessary rebuilds.
These fixes were cherry-picked onto the previous package build rather
than built from a published branch.
Bump the ports to trigger fresh builds from the published tree,
ensuring reproducibility and accurate package metadata.
MFH: 2026Q4
(cherry picked from commit 44fd248dd4d7337c7e3517d1852be9d3dfd6071c with
lmdb reference removed)
lang/php82 8.2.35_1
PHP Scripting Language (8.2.X branch)
lang/php83 8.3.36_1
PHP Scripting Language (8.3.X branch)
lang/php84 8.4.27_1
PHP Scripting Language (8.4.X branch)
lang/php85 8.5.12_1
PHP Scripting Language (8.5.X branch)
lang/php8*: Force fresh FreeBSD.org package builds.
No functional changes to the ports.
The packages were built manually today from a temporary branch to
incorporate the RCE fixes without triggering unnecessary rebuilds.
These fixes were cherry-picked onto the previous package build rather
than built from a published branch. The cherry-picks also omitted the
lmdb change in 85ba298b7e0.
Bump the ports to trigger fresh builds from the published tree,
ensuring reproducibility and accurate package metadata.
MFH: 2026Q4
www/{nginx,nginx-devel,freenginx}: 3rd-party modules management
Build the auth_ldap module from its own source port, and add the
cert_expiry, ip_anon, stream limit_req and syslog5424 modules.
Sponsored by: Netzkommune GmbH
www/nginx-module-syslog5424: Add New Port
The syslog5424 module sends an access line in the format RFC 5424 asks for:
version, RFC 3339 timestamp, hostname, app name, process id, message id and
structured data.
Sponsored by: Netzkommune GmbH
www/nginx-module-stream-limit-req: Add New Port
The stream limit_req module rate limits incoming connections in the stream
subsystem. limit_req_zone and limit_req are spelled and counted as in the
http module, so a rate written down once reads the same for TCP, UDP and
HTTP.
Sponsored by: Netzkommune GmbH
www/nginx-module-ip-anon: Add New Port
The ip_anon module masks the host part of the client address.
$remote_addr_anon and $binary_remote_addr_anon carry the result, for a log
or a limit key that is not meant to name anybody.
Sponsored by: Netzkommune GmbH
www/nginx-module-cert-expiry: Add New Port
The cert_expiry module reads every file an ssl_certificate names, when the
configuration is read and again on a timer, and reports how long the
certificate still has. $ssl_expiry_days carries the days left into a log
format.
Sponsored by: Netzkommune GmbH
www/nginx-module-auth-ldap: Add New Port
The auth_ldap module authenticates HTTP basic credentials against an LDAP
directory. An ldap_server block describes one directory, require rules say
who is let in, and every worker keeps a pool of connections to it.
Sponsored by: Netzkommune GmbH
databases/cego: 2.54.43 -> 2.54.44, databases/p5-DBD-cego: 1.5.9 -> 1.5.10
cego:
- Improved error handling made for invalid procedure out parameter
calls, e.g. call myProc(null, null), where myProc has been defined
with out parameters. Instead of confusing error message "Unknown
variable null", the corresponding out parameter is mentioned in the
error messsage. e.g. "No out variable given for parameter <outval>"
p5-DBD-cego:
- Patch added to treat invalid procedure out parameter arguments.
If a scalar is given as an out parameter, an error is returned (
e.g. ? = myProc(?,?) with no binding on parameter 1 )
audio/pulseaudio: Improve OSS support
- Set vol or pcm for oss module, but not both. Setting both channels results
in drastic volume change.
- Set / read monitor channel.
Reviewed by: arrowd, christos
Differential Revision: D60197
x11-fonts/fnt: Update 1.9.1 => 1.9.2
This update includes a fix for when the requested font is not found.
Commit log:
https://github.com/alexmyczko/fnt/compare/1.9.1...1.9.2
While here:
- Add ftp/curl to RUN_DEPENDS, it won't start without it,
even though upstream also checks for "fetch" or "wget".
- Replace do-install-ZSH-on with post-install.
Reported by: portscout
Approved by: osa, vvd (Mentors, implicit)
MFH: 2026Q4
(cherry picked from commit 7efcb57130175ba02462c51d8915b2832b71ca86)
x11-fonts/fnt: Update 1.9.1 => 1.9.2
This update includes a fix for when the requested font is not found.
Commit log:
https://github.com/alexmyczko/fnt/compare/1.9.1...1.9.2
While here:
- Add ftp/curl to RUN_DEPENDS, it won't start without it,
even though upstream also checks for "fetch" or "wget".
- Replace do-install-ZSH-on with post-install.
Reported by: portscout
Approved by: osa, vvd (Mentors, implicit)
MFH: 2026Q4
security/vuxml 1.1_6
Vulnerability and eXposure Markup Language DTD
security/vuxml: Fix PHP entry d8e16d08-cd2f-11f1-8135-8447094a420f
- php85: the fixed version is 8.5.12, not 8.5.13
- Quote the security advisory instead of the pre-announcement
- Add references to the advisory and both GHSAs
Reported by: Dan Langille <dan@langille.org>
Sponsored by: Netzkommune GmbH
misc/py-claude-agent-sdk: Drop version from claude-code dependency
The tree already has a newer misc/claude-code, so the minimum version
is pointless.
Sponsored by: Netzkommune GmbH
graphics/optipng: Fix does not set execute bit on binary
Upstream uses "install(FILES ..." instead of "install(PROGRAMS ..."
for install executable binary.
PR: 299678299132
Approved by: blanket (fix runtime)
Sponsored by: UNIS Labs
x11/cosmic-bg: New port: COSMIC service to apply wallpapers to displays
`cosmic-bg` is a layer shell protocol implementation to
handle wallpapers for the COSMIC desktop environment. It supports
common image formats, using gradients or solid colors, per-display
backgrounds, and slideshows.
WWW: https://github.com/pop-os/cosmic-bg
PR: 299662
Reported by: Josh Megnauth <jo.sh@tutanota.com> (new maintainer)
security/zeek 9.0.0
System for detecting network intruders in real-time
security/zeek: fix build on powerpc64
The 9.0.0 update dropped the powerpc64 patches from 144863452393. Bring back
the ones still needed: the VSX hash kernel stays off on big-endian (it
computes wrong hashes there) and the bundled fiber library enables its
ppc64 ELFv2 assembly on big-endian too (upstream simonfxr/fiber
dc084920bc81). The hilti stack-direction change is upstream now.
