Erlang is a programming language used to build massively scalable soft
real-time systems with requirements on high availability. Some of its
uses are in telecoms, banking, e-commerce, computer telephony and
instant messaging. Erlang's runtime system has built-in support for
concurrency, distribution and fault tolerance.
===> The following configuration options are available for erlang-28.5.0.8_1,4:
CHUNKS=on: Enable in-line documentation in Erlang console
CORBA=on: Enable Corba support
DTRACE=on: Build with DTrace probes
JAVA=off: Java platform support
KQUEUE=on: Enable Kernel Poll (kqueue) support
MANPAGES=on: Build and/or install manual pages
ODBC=off: ODBC database backend
OPENSSL=on: SSL/TLS support via OpenSSL
SCTP=on: Enable SCTP support
SHARING=on: Enable term copy-and-share support
WX=off: Enable WX application
===> Use 'make config' to modify these settings
Affects: users of lang/erlang, lang/erlang-runtime27, lang/erlang-runtime28
and lang/erlang-runtime29 running an SSH daemon
Author: olgeni@FreeBSD.org
Reason:
OTP 29.1.1, 28.5.0.7 and 27.3.4.18 fix CVE-2026-68956, where the ssh
application did not enforce the max_channels daemon option for session
channels without an active subsystem. An authenticated client could open
an unbounded number of idle channels and exhaust the memory of the whole
Erlang VM.
As part of the fix, two ssh daemon defaults have changed:
max_channels infinity -> 256 (per connection)
max_sessions infinity -> 1024 (concurrent connections)
Deployments that legitimately need more than these limits must now set
them explicitly, for example:
ssh:daemon(Port, [{max_channels, infinity}, {max_sessions, infinity}])
The same releases also fix CVE-2026-89422 (TLS 1.3 client completes the
handshake without validating the server certificate when the ServerHello
carries an unsolicited pre_shared_key) and CVE-2026-65634 (superlinear
CPU denial-of-service in the asn1 OID decoder). Those need no
configuration changes.
Number of commits found: 465 (showing only 100 on this page) #
lang/erlang: Fix the vsn.mk consistency checks in pre-configure
The checks grepped lib/*/vsn.mk for _EI_VSN, _TOOLS_VSN and _SNMP_VSN,
but upstream names those variables EI_VSN, TOOLS_VSN and SNMP_VSN.
The grep therefore matched nothing and each test reduced to
[ ! = <version> ], which sh evaluates as a false string comparison, so
every check passed silently no matter what the Makefile said.
The port-side variables grew their underscore prefix in 12b48a4d8ea,
which renamed them inside the grep patterns as well.
lang/erlang: Do not add WRKSRC/lib to ERL_LIBS during build
ERL_LIBS=${WRKSRC}/lib puts the half-populated in-tree lib/*/ebin
directories on the bootstrap erlc's code path, where they shadow the
bootstrap compiler. That breaks whenever a patch release changes an
API inside the compiler itself. OTP 28.5.0.8 changes
beam_ssa_type:opt_start from arity 2 to arity 3, so the freshly
written beam_ssa_opt.beam gets loaded from lib/compiler/ebin while
beam_ssa_type still comes from the bootstrap, and the build dies with
beam_ssa_recv.erl: internal error in pass beam_ssa_opt:
exception error: undefined function beam_ssa_type:opt_start/3
The ordering inside lib/compiler/src is alphabetical, so this is not a
job race and MAKE_JOBS_UNSAFE, which the error message suggests, does
not help.
The build system derives its own code paths from ERL_TOP, and
lang/erlang-runtime2[789] build the same tarballs, doc chunks
included, without this variable. Removing it leaves the installed
file list unchanged.
lang/erlang: Update to 28.5.0.2
OTP 26 is end-of-life; move the main suite to OTP 28. Update the bundled
erl_interface, snmp and tools subsystem versions, and bump the corba
dependency to 5.2.2.
Drop the FOP and PDF options: they relied on the XML/fop documentation
toolchain that upstream removed in OTP 27, so they no longer build.
lang/erlang: rename typer to avoid conflicts with other ports
typer is rarely used, so rename to erl_typer to allow the far more
common py-typer to take its place, used by many py-* CLI tools.
Sponsored by: SkunkWerks, GmbH
Approved by: erlang
lang/erlang: enhance epmd security
- Add dedicated beam user (UID/GID 372) for non-root execution
- Use daemon(8) for epmd process supervision and auto-restart
This addresses security concerns with epmd running as root by
providing privilege separation and automatic restart capability.
PR: 213001
Reviewed by: dch
Differential Revision: https://reviews.freebsd.org/D50874
Mk/**java.mk: Convert bsd.java.mk to USES
The following features have been added or changed:
- Instead of USE_JAVA use USES=java. This defaults to
USES=java:build,run if NO_BUILD is undefined. Else it defaults to
USES=java:run
- Instead of USE_ANT=yes use USES=java:ant which also implies
USES=java:build
- Instead of JAVA_BUILD=yes use USES=java:build. Does not imply run or
extract
- Instead of JAVA_EXTRACT=yes use USES=java:extract does not imply
build or run
- Instead of JAVA_RUN=yes use USES=java:run does not imply extract or
build
- Instead of USE_JAVA=<version> use USES=java and JAVA_VERSION=<version>
Approved by: mat (portmgr), glewis
Differential Revision: https://reviews.freebsd.org/D48201
all: drop support for FreeBSD 13.2 which reached EOL today
Thanks again to jbeich for noticing various things I overlooked.
Reviewed by: acm, ashish, eduardo, ehaupt, eugen, jbeich, martymac, mat,
nobukata, sunpoet, tagattie, yuri, arrowd, kde
Differential Revision: https://reviews.freebsd.org/D45141
*/*: Sunset 12.4-RELEASE/12-STABLE from ports tree
- Remove all references to defunct ARCH arm
- Remove all references to defunct ARCH sparc64
- Remove x11-drivers/xf86-video-sunffb which requires defunct sparc64
ARCH
- Remove sysutils/afbinit requires defunct sparc64 ARCH
- Remove all references to bktr driver
- Remove all references to defunct FreeBSD_12
- Remove all references to OSVERSION/OSREL corresponding to 12
- Remove conditionals in Mk/Uses/cabal.mk
- Remove sparc reference from Mk/Uses/qt-dist.mk
- Remove BROKEN_sparc64/NOT_FOR_ARCH=sparc64
- Remove BROKEN_FreeBSD_12* from:
- Remove OpenSSL patches from:
- Remove conditional flags for OSVERSION >= 1300000 to fixed flags.
Also move conditional flags for non sparc64/arm ARCH to fixed flags.
Reviewed by: brooks, jbeich, rene, salvadore
Differential Revision: https://reviews.freebsd.org/D42068
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
lang: remove 'Created by' lines
A big Thank You to the original contributors of these ports:
* Aaron Dalton <aaron@FreeBSD.org>
* Adam Weinberger <adamw@FreeBSD.org>
* Akinori MUSHA aka knu <knu@idaemons.org>
* Alex Dupre <ale@FreeBSD.org>
* Alexey Dokuchaev <danfe@FreeBSD.org>
* Alonso Cardenas Marquez <acm@FreeBSD.org>
* Andreas Klemm <andreas@klemm.gtn.com>
* Andrew Pantyukhin <infofarmer@FreeBSD.org>
* Andrey Zakhvatov
* Anton Berezin <tobez@FreeBSD.org>
* Anton Berezin <tobez@tobez.org>
(Only the first 15 lines of the commit message are shown above )
lang/(erlang(-runtime2[13])?): work around dtrace failures with clang 13
During an exp-run for llvm 13 (see bug 258209), it turned out that
lang/erlang and lang/erlang-runtime2[13] fail to build with clang 13.
What appears to happen is that for these versions of erlang, PGO is
enabled, and it first builds a PGO-enabled beam.smp:
gmake[5]: Entering directory
'/wrkdirs/usr/ports/lang/erlang/work/otp-OTP-21.3.8.24/erts/emulator'
if utils/gen_git_version amd64-portbld-freebsd14.0/gen_git_version.mk; then
touch beam/erl_bif_info.c; fi
echo " PROFILE beam.prof.smp"
PROFILE beam.prof.smp
rm -f obj/amd64-portbld-freebsd14.0/opt/smp/erl*.profraw
set -e;
LLVM_PROFILE_FILE="obj/amd64-portbld-freebsd14.0/opt/smp/erlc-%m.profraw" \
ERL_FLAGS="-emu_type prof +S 1" erlc -W -DPGO \
(Only the first 15 lines of the commit message are shown above )
graphics/mesa-libs: Bump reverse deps for libglvnd
Per discussion with bapt on helping pkg handle the changing of these
deps and avoiding impossible upgrade senarios.
PR: 246767
Reviewed by: manu, bapt
Approved by: x11
Differential Revision: https://reviews.freebsd.org/D30824
lang/erlang: remove unnecessary patch.
The call to gethostbyname_r is handled correctly on recent Erlang
releases. No PORTREVISION required as the patch is touching unreachable
code in FreeBSD.
lang/erlang*: include serious scheduler bugfixes
OTP-16371
Taking a scheduler offline could cause timers set while executing on
that scheduler to be delayed until the scheduler was put online again.
This bug was introduced in ERTS version 10.0 (OTP 21.0).
OTP-16378 | ERL-1125
The ets:update_counter/4 core dumped when given an ordered_set with
write_concurrency enabled and an invalid position.
OTP-16379
A process calling erlang:system_flag(multi_scheduling, block) could end
up blocked waiting for the operation to complete indefinitely.
Reviewed by: olgeni
MFH: 2020Q1
Sponsored by: SkunkWerks, GmbH
Differential Revision: https://reviews.freebsd.org/D23313
lang/erlang*: repair 32-bit x86 erlang builds
Having HIPE & NATIVE enabled breaks OTP on 32-bit x86. They have not
built succesfully for quite some time.
Reported by: pkg fallout
Reviewed by: olgeni
Sponsored by: SkunkWerks, GmbH
Differential Revision: https://reviews.freebsd.org/D23296
