What changed in FreeBSD on 2026-10-22
New 7
- devel/php80-APCu 5.1.28
- devel/php80-arcanist 20230530
- lang/php80-legacy 8.0.30
- mail/php80-mailparse 3.2.0
- net-p2p/libtorrent-devel 0.16.26
- net-p2p/rtorrent-devel 0.16.26
- ports-mgmt/optique 0.2.0
Updated 137
New vulnerabilities 6
Advisories published that day for FreeBSD's ports; pkgsrc's on the day its list first named them.
- Keycloak -- multiple vulnerabilities: net/keycloak
- brotli -- out-of-bounds write permits remote code execution: archivers/brotli
- chromium -- security fixes: www/chromium, www/ungoogled-chromium
- jackson-core -- denial of service: devel/jackson-core
- jackson-databind -- denial of service: devel/jackson-databind
- jackson-databind -- type parameters bypass the polymorphic type validator: devel/jackson-databind
Fixed 8
Ports that moved that day to a version outside an advisory's ranges.