BSD Ports

What changed in FreeBSD on 2026-07-28

Updated 29

PortFromTo
biology/diamond2.2.32.2.4
devel/moon2.4.32.4.6
devel/py-fastcore2.1.112.1.12
dns/dnscontrol4.43.34.44.1
lang/erlang-runtime2929.0.329.0.4
mail/mailpit1.30.51.30.6
mail/thunderbird153.0153.0.1
misc/antigravity-cli1.1.71.1.8
misc/ollama0.32.40.32.5
misc/py-ibm-watsonx-ai1.5.141.6.0
misc/py-langchain-google-genai4.3.14.3.2
misc/py-langchain-mcp-adapters0.3.00.3.1
misc/py-langchain-openai1.3.51.4.1
misc/py-polars1.42.11.43.1
misc/py-polars-runtime1.42.11.43.1
multimedia/shaka-packager3.9.23.9.3
net-im/gomuks26.0626.07
net-im/telegram-desktop7.0.57.0.6
shells/atuin18.17.018.18.1
sysutils/leaf1.26.11.26.2
textproc/py-docling2.113.02.115.0
textproc/py-docling-core2.87.12.88.0
textproc/py-docling-jobkit2.1.03.1.0
textproc/py-docling-serve1.26.01.28.0
textproc/py-docling-slim2.113.02.115.0
www/py-exa-py2.16.02.16.2
www/py-firecrawl-py4.31.04.33.1
x11/rio0.5.10.5.2
x11/rio0.5.00.5.1

New vulnerabilities 5

Advisories published that day for FreeBSD's ports; pkgsrc's on the day its list first named them.

Fixed 68

Ports that moved that day to a version outside an advisory's ranges.

PortAdvisoryDays after it
lang/erlangErlang/OTP -- megaco flex scanner buffer overflow1
lang/erlangErlang/OTP -- (D)TLS-1.2 server certificate verification bypass1
lang/erlangErlang -- Erlang/OTP SSH Vulnerable to Pre-Authentication RCE464
lang/erlangErlang - Absolute Path in Zip Module272
lang/erlangErlang/OTP -- public_key accepts non-CA certificate as intermediate issuer61
lang/erlangErlang/OTP -- TLS denial of service using invalid certificate chains1
lang/erlangErlang/OTP -- TLS hostname verification bypass via Subject CommonName fallback and name constraints61
lang/erlangErlang/OTP -- denial of service in epmd1
lang/erlangErlang/OTP -- relative path traversal in the zip module1
lang/erlangErlang/OTP -- denial of service via exponential certificate policy tree growth1
lang/erlangErlang/OTP -- heap corruption decoding invalidly encoded large tuples1
lang/erlangErlang/OTP -- binary_to_term crash on crafted BIT_BINARY_EXT input1
lang/erlang-runtime27Erlang/OTP -- TLS hostname verification bypass via Subject CommonName fallback and name constraints61
lang/erlang-runtime27Erlang/OTP -- buffer overflow parsing SCTP ERROR/ABORT chunks48
lang/erlang-runtime27Erlang/OTP -- megaco flex scanner buffer overflow1
lang/erlang-runtime27Erlang -- Erlang/OTP SSH Vulnerable to Pre-Authentication RCE464
lang/erlang-runtime27Erlang/OTP -- (D)TLS-1.2 server certificate verification bypass1
lang/erlang-runtime27Erlang - Absolute Path in Zip Module272
lang/erlang-runtime27Erlang/OTP -- binary_to_term crash on crafted BIT_BINARY_EXT input1
lang/erlang-runtime27Erlang/OTP -- OCSP responder certificate accepted after expiry in public_key61
lang/erlang-runtime27Erlang/OTP -- public_key accepts non-CA certificate as intermediate issuer61
lang/erlang-runtime27Erlang/OTP -- denial of service via exponential certificate policy tree growth1
lang/erlang-runtime27Erlang/OTP -- heap corruption decoding invalidly encoded large tuples1
lang/erlang-runtime27Erlang/OTP -- TLS denial of service using invalid certificate chains1
lang/erlang-runtime27Erlang/OTP -- TLS distribution check_ip flag does not enforce same-LAN constraint48
lang/erlang-runtime27Erlang/OTP -- SFTP READLINK discloses server filesystem paths48
lang/erlang-runtime27Erlang/OTP -- relative path traversal in the zip module1
lang/erlang-runtime27Erlang/OTP -- httpc leaks authentication headers on cross-host redirect48
lang/erlang-runtime27Erlang/OTP -- FTP passive-mode client does not validate server response IP48
lang/erlang-runtime27Erlang/OTP -- stack overflow in ei_s_print_term for very large integer terms48
lang/erlang-runtime27Erlang/OTP -- denial of service in epmd1
lang/erlang-runtime28Erlang/OTP -- relative path traversal in the zip module1
lang/erlang-runtime28Erlang/OTP -- binary_to_term crash on crafted BIT_BINARY_EXT input1
lang/erlang-runtime28Erlang/OTP -- megaco flex scanner buffer overflow1
lang/erlang-runtime28Erlang/OTP -- OCSP responder certificate accepted after expiry in public_key61
lang/erlang-runtime28Erlang - Absolute Path in Zip Module272
lang/erlang-runtime28Erlang/OTP -- denial of service in epmd1
lang/erlang-runtime28Erlang/OTP -- buffer overflow parsing SCTP ERROR/ABORT chunks48
lang/erlang-runtime28Erlang/OTP -- TLS denial of service using invalid certificate chains1
lang/erlang-runtime28Erlang/OTP -- stack overflow in ei_s_print_term for very large integer terms48
lang/erlang-runtime28Erlang/OTP -- heap corruption decoding invalidly encoded large tuples1
lang/erlang-runtime28Erlang/OTP -- FTP passive-mode client does not validate server response IP48
lang/erlang-runtime28Erlang/OTP -- public_key accepts non-CA certificate as intermediate issuer61
lang/erlang-runtime28Erlang/OTP -- httpc leaks authentication headers on cross-host redirect48
lang/erlang-runtime28Erlang/OTP -- (D)TLS-1.2 server certificate verification bypass1
lang/erlang-runtime28Erlang/OTP -- SFTP READLINK discloses server filesystem paths48
lang/erlang-runtime28Erlang/OTP -- TLS hostname verification bypass via Subject CommonName fallback and name constraints61
lang/erlang-runtime28Erlang/OTP -- TLS distribution check_ip flag does not enforce same-LAN constraint48
lang/erlang-runtime28Erlang/OTP -- denial of service via exponential certificate policy tree growth1
lang/erlang-runtime29Erlang/OTP -- TLS denial of service using invalid certificate chains1
lang/erlang-runtime29Erlang/OTP -- denial of service in epmd1
lang/erlang-runtime29Erlang/OTP -- heap corruption decoding invalidly encoded large tuples1
lang/erlang-runtime29Erlang/OTP -- (D)TLS-1.2 server certificate verification bypass1
lang/erlang-runtime29Erlang/OTP -- binary_to_term crash on crafted BIT_BINARY_EXT input1
lang/erlang-runtime29Erlang/OTP -- denial of service via exponential certificate policy tree growth1
lang/erlang-runtime29Erlang/OTP -- relative path traversal in the zip module1
lang/erlang-runtime29Erlang/OTP -- megaco flex scanner buffer overflow1
mail/mailpitmailpit -- WebSocket origin check bypass via percent-encoded path0
mail/mailpitmail/mailpit -- Server-Side Request Forgery (SSRF) via Link Check API153
mail/mailpitmail/mailpit -- multiple vulnerabilities190
mail/mailpitmail/mailpit -- Cross-Site WebSocket Hijacking199
mail/mailpitmail/mailpit -- Server-Side Request Forgery203
mail/mailpitmail/mailpit -- multiple vulnerabilities75
mail/mailpitmail/mailpit -- memory-exhaustion DoS via unbounded JSON body61
mail/mailpitmail/mailpit -- Incomplete SSRF protection in Link Check API via uncovered IPv6 forms41
mail/mailpitMailpit -- Performance information disclosure292
mail/mailpitmailpit -- multiple vulnerabilities19
mail/mailpitMailpit -- SMTP DATA line reader buffers over-limit input before size enforcement8