FreeBSD/ports c3505b2sysutils/epazote distinfo Makefile.crates

sysutils/epazote: Update to 3.7.0

Changelog: https://github.com/epazote/epazote/blob/3.7.0/CHANGELOG.md

PR:             295982
Reported by:    Nicolas Embriz <nbari at tequila.io> (maintainer)
DeltaFile
+167-177sysutils/epazote/distinfo
+82-87sysutils/epazote/Makefile.crates
+1-2sysutils/epazote/Makefile
+250-2663 files

FreeBSD/src fa75c1csys/dev/mwl if_mwl.c

mwl: return ENOMEM when rx buffer allocation fails

The malloc() failure path returned error, which is 0 at this point,
so callers would treat the allocation failure as success.
Return ENOMEM instead to correctly propagate the out-of-memory condition.

Reviewed by:    adrian
Differential Revision:  https://reviews.freebsd.org/D42282
DeltaFile
+1-1sys/dev/mwl/if_mwl.c
+1-11 files

FreeBSD/ports fde48a0net/s3m distinfo Makefile.crates

net/s3m: Update to 0.18.1

Changelog: https://github.com/s3m/s3m/blob/0.18.1/CHANGELOG.md

PR:             295983
Reported by:    Nicolas Embriz <nbari at tequila.io> (maintainer)
DeltaFile
+399-393net/s3m/distinfo
+198-195net/s3m/Makefile.crates
+2-3net/s3m/Makefile
+599-5913 files

FreeBSD/ports 41458f0misc/crush distinfo Makefile

misc/crush: Update to 0.77.0

Changelog: https://github.com/charmbracelet/crush/releases/tag/v0.77.0

Reported by:    GitHub (watch releases)
DeltaFile
+5-5misc/crush/distinfo
+1-1misc/crush/Makefile
+6-62 files

FreeBSD/src db88771lib/libc/gen exterr_cat_filenames.h, sbin/kldload kldload.c

kldload: Improve error handling

Address a failure in linker_load_module (sys/kern/kern_linker.c) to
verify that an already-loaded module matches the version requirement,
which caused the method to return the error (EEXIST).  This was then
propagated back up to kldload, which incorrectly printed that the module
had already been loaded.

Add a lookup to modlist_lookup2 to distinguish between the two cases:
- A module is already loaded that is of the correct version, so the
  error EEXIST should be returned
- An already-loaded module is of the incorrect version, so the error
  ENOEXEC is returned (changed from ENOENT)

Reviewed by:    imp, kib
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D57002
DeltaFile
+55-28sys/kern/kern_linker.c
+8-9sbin/kldload/kldload.c
+1-0lib/libc/gen/exterr_cat_filenames.h
+1-0sys/sys/exterr_cat.h
+65-374 files

FreeBSD/ports cf7cb8dnet/php-oauth Makefile distinfo

net/php-oauth: Update 2.0.10 => 2.0.12

Changelogs:
https://github.com/php/pecl-web_services-oauth/releases/tag/2.0.11
https://github.com/php/pecl-web_services-oauth/releases/tag/2.0.12

- Upstream moved to github.
- Add support for php 8.6.

PR:             295762
Sponsored by:   UNIS Labs
DeltaFile
+17-5net/php-oauth/Makefile
+3-3net/php-oauth/distinfo
+20-82 files

FreeBSD/ports e5ef954net/pecl-oauth2 Makefile pkg-descr, net/php-oauth Makefile pkg-descr

net/pecl-oauth2: Rename to net/php-oauth

Rename to avoid confusion between implemented protocol and library
version. Also, pecl repository is deprecated.

PR:             295762
Sponsored by:   UNIS Labs
DeltaFile
+21-0net/php-oauth/Makefile
+0-21net/pecl-oauth2/Makefile
+4-0net/php-oauth/pkg-descr
+0-4net/pecl-oauth2/pkg-descr
+3-0net/php-oauth/distinfo
+0-3net/pecl-oauth2/distinfo
+28-282 files not shown
+30-298 files

FreeBSD/ports 4b3dbf2mail/aerc Makefile

mail/aerc: Fix build

PR:             295990
Reported by:    Herbert J. Skuhra <herbert at gojira.at>
Approved by:    osa, vvd (Mentors, implicit)
DeltaFile
+2-1mail/aerc/Makefile
+2-11 files

FreeBSD/ports 57d0b94mail/py-offlineimap distinfo Makefile, mail/py-offlineimap/files patch-offlineimap_imapserver.py

mail/py-offlineimap: Update 8.0.2 => 8.0.3

While here, add new DOCS dependency and drop backported patch
since it's included in this release already.

Changelog:
https://github.com/OfflineIMAP/offlineimap3/blob/v8.0.3/Changelog.md
Commit log:
https://github.com/OfflineIMAP/offlineimap3/compare/v8.0.2...v8.0.3

PR:             296060
Approved by:    osa, vvd (Mentors, implicit)
DeltaFile
+0-11mail/py-offlineimap/files/patch-offlineimap_imapserver.py
+3-3mail/py-offlineimap/distinfo
+2-1mail/py-offlineimap/Makefile
+5-153 files

FreeBSD/src 1c601bfsys/compat/linuxkpi/common/src linux_80211.c linux_80211_macops.c

LinuxKPI: 802.11: lock down mac80211 downcalls

Add lock assertions and "might_sleep" annotations to various
mac80211 operation downcalls into the driver.

Make sure the code to these is all covered by locks--pushing more wiphy
lock into the code--or lock assertions as well.  Split up parts of the
MC code up into an unlocked and locked version to avoid recurive locking.

Sponsored by:   The FreeBSD Foundation
MFC after:      3 days
DeltaFile
+48-10sys/compat/linuxkpi/common/src/linux_80211.c
+19-0sys/compat/linuxkpi/common/src/linux_80211_macops.c
+67-102 files

FreeBSD/src 134e90esys/contrib/dev/mediatek/mt76 debugfs.c, sys/contrib/dev/mediatek/mt76/mt7921 pci.c usb.c

mt76: mt7921: depend on lindebugfs and turn debugfs support on

Add the missing MODULE_DEPEND() calls for lindebugfs.
It is unfortunate that they are shared code between various bus
implementations.  Ideally we would leave the MODULE_DEPEND() calls
in the debugfs.c file instead of adding extra #ifdef guards to the
bus attachment files.

Turn debugfs support on for mt76(core) and the mt7921 module for now.

Sponsonred by:  The FreeBSD Foundation
MFC after:      3 days
DeltaFile
+3-0sys/contrib/dev/mediatek/mt76/mt7921/pci.c
+3-0sys/contrib/dev/mediatek/mt76/debugfs.c
+3-0sys/contrib/dev/mediatek/mt76/mt7921/usb.c
+1-1sys/modules/mt76/mt7921/Makefile
+1-1sys/modules/mt76/Makefile.inc
+11-25 files

FreeBSD/src b662295sys/contrib/dev/mediatek/mt76/mt7921 mcu.c

mt76: mt7921: terminate fw log messages with \n

In order to make the firmware messages spewed on the console readable
write one message per line and not one very long line.

Sponsored by:   The FreeBSD Foundation
MFC after:      3 days
DeltaFile
+4-0sys/contrib/dev/mediatek/mt76/mt7921/mcu.c
+4-01 files

FreeBSD/src baf8561sys/contrib/dev/mediatek/mt76 mac80211.c mt76.h, sys/contrib/dev/mediatek/mt76/mt7915 init.c

mt76: ensure net80211 com instance before returning from driver load

Do as we have done for iwlwifi (f808c43ad923,  bee60c989745) add a
completion event for device registration which calls into 802.11
and creates the wifi "device" (net80211 com instance).
This is needed as otherwise the deferred work in the mt76 drivers
(mt7915, mt7921, mt7925, mt7996; but not the 7615 [*]) would make
driver loading return before the wifi device is there.  We would then
continue, e.g., during rc startup and race possibly trying to create
a vap (wlan interface) with the underlying device not being registered
yet and fail.

[*] the 7615 does not seem to do this asynchronously so is fine.

Sponsored by:   The FreeBSD Foundation
Tested on:      7921, others to be tested at time
MFC after:      3 days
DeltaFile
+7-0sys/contrib/dev/mediatek/mt76/mt7921/init.c
+7-0sys/contrib/dev/mediatek/mt76/mt7925/init.c
+6-0sys/contrib/dev/mediatek/mt76/mt7996/init.c
+6-0sys/contrib/dev/mediatek/mt76/mt7915/init.c
+4-0sys/contrib/dev/mediatek/mt76/mac80211.c
+3-0sys/contrib/dev/mediatek/mt76/mt76.h
+33-06 files

FreeBSD/ports 0a6affbnet/pecl-rdkafka Makefile distinfo

net/pecl-rdkafka: Update 6.0.0 => 6.0.5

Changelogs:
https://github.com/php-rdkafka/php-rdkafka/releases/tag/6.0.1
https://github.com/php-rdkafka/php-rdkafka/releases/tag/6.0.2
https://github.com/php-rdkafka/php-rdkafka/releases/tag/6.0.3
https://github.com/php-rdkafka/php-rdkafka/releases/tag/6.0.4
https://github.com/php-rdkafka/php-rdkafka/releases/tag/6.0.5

- Unbreak with php86 - upstream pool request:
  https://github.com/php-rdkafka/php-rdkafka/pull/612
- Update WWW to new organization repo.

PR:             295768
Approved by:    Sergey Akhmatov <sergey at akhmatov.ru> (maintainer, timeout 2 weeks)
Sponsored by:   UNIS Labs
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>
DeltaFile
+12-3net/pecl-rdkafka/Makefile
+3-3net/pecl-rdkafka/distinfo
+15-62 files

FreeBSD/src b8ec492sys/kern kern_timeout.c

callout: ddb: resolve symbol of callout function

In the ddb show callout function try to resolve the symbol of the
callout function to improve debugging.  In my case I went through
various callouts from show ktr to check what they were and this saved
me opening lldb/gdb next to it (and still having the old kernel as
the panic to debug was upon reboot).

Sponsored by:   The FreeBSD Foundation
MFC after:      3 days
Reviewed by:    rlibby
Differential Revision: https://reviews.freebsd.org/D57521
DeltaFile
+3-1sys/kern/kern_timeout.c
+3-11 files

FreeBSD/src 84008e3sys/compat/lindebugfs lindebugfs.c

lindebugfs: improve an error message

In case the fill function fails do not report (read/write) but the
actual operation only given we can easily determine it.

Sponsored by:   The FreeBSD Foundation
MFC after:      3 days
Reviewed by:    dumbbell, emaste
Differential Revision: https://reviews.freebsd.org/D57523
DeltaFile
+2-2sys/compat/lindebugfs/lindebugfs.c
+2-21 files

FreeBSD/src 31ded41sys/compat/linuxkpi/common/src linux_80211.c

LinuxKPI: 802.11: force update of net80211 crypto key flags

Several drivers (rtw8x, mt76) do not announce the supported ciphers suites
in the wiphy instance.  This means we never populate net80211 ic_cryptocaps
on device creation and thus not announcing any supported hw crypto
offload forcing a fallback to software crypto.

However when the mac80211 (*set_key) succeeds we know we can offload
crypto.  At that point the net80211 key flags have IEEE80211_KEY_SWCRYPT
set which we want to clear.  Historically the net80211 API does not
allow this though there should be no ill side effects (base on a
quick code inspection).  We thus have to DECONST the key argument
for now.  It is expected that with MFP support this will need to
become a common operation and the API will need to change as we
will only get the information of some details from the driver on a
per-cipher case when the (*set_key) downcall returns.

Sponsored by:   The FreeBSD Foundation
MFC after:      3 days
DeltaFile
+15-4sys/compat/linuxkpi/common/src/linux_80211.c
+15-41 files

FreeBSD/src 009d92bsys/contrib/dev/mediatek/mt76/mt7921 pci.c

mt76: mt7921: prevent PM from scheduling another delayed work on detach

Amongst others mt76_connac_pm_unref() is calling mt76_connac_power_save_sched()
which will (normaly) re-schedule the pm_work.
In various parts we also cancel that work, also during PCI detach ("shutdown",
"remove" in LinuxKPI terms).
However we also keep calling mt76_connac_pm_unref() in the detach path and thus
we get to a point where we re-scheduled the work but then the device goes away.
At that point LinuxKPI delayed work has a callput pending which is embedded in
the work structure (pm_work).  The moment we free the device that structure
and callout is gone but the callout is still on the list and once that list
is walked we panic.

Simply prevent mt76_connac_power_save_sched() from getting to the point of
possibly re-scheduling the pm_work by setting pm->enable to false in the
beginning of the detach path.

The are likely more paths which will need the same treatment as the code
is by far anything from "symmetric" (that is the attach path is highly

    [6 lines not shown]
DeltaFile
+11-0sys/contrib/dev/mediatek/mt76/mt7921/pci.c
+11-01 files

FreeBSD/src 3fa40c5sys/compat/linuxkpi/common/src linux_simple_attr.c

linudebugfs: fix simple_attr_write_common() kernel buffer

With 2cf15144daf7e we added a kernel buffer for parsing input copying the
user buffer into that.  The problem is that we only copy exactly as many
bytes as the user supplied.  printf 1 would have a write_size of 1, while
echo 1 would have a write_size of 2 (1\n).  But in order to check and
parse we need a terminating '\0'.

Overallocate the kernel buffer by 1 and make sure it is always '\0'
terminated.

Remove the check that the string needs to be of different length than
the write_size as this will always fail unless the user passes in, e.g.,
"1\02\n\0" somehow in which case we won't bother as kstrto*ll() will
not only handle the '\n' but also stop at '\0' and should be fine or
it will fail and we will error.

In theory we could use a static buffer here as well as we know a maximum
possible length of digits plus \n and \0 and take a min of that buffer

    [8 lines not shown]
DeltaFile
+2-5sys/compat/linuxkpi/common/src/linux_simple_attr.c
+2-51 files

FreeBSD/src ff6c95dsys/compat/linuxkpi/common/src linux_80211_macops.c

LinuxKPI: 802.11: improve hw_crypto key operations

mt7921 would happily receive traffic (MC/BC) and decrypt it correctly
when hw_crypto was used but TX would only have garbled data in frames.

The problem came from the fact with keys for which we do not have an
address the driver will pick the "sta" information from different places
(driver view of sta or vif).
In the downcall this is signalled by the sta argument being NULL as
the linux keyconf has no address field.

Us passing the sta for first the pairwise key and then also for the
group key likely overwrote the pairwise key on the sta and allowed
the MC/BC RX operations to succeed anyway (the observed behaviour).

Software crypto was fully fine for mt7921 and showed no problems.

Looking some other drivers:
- iwlwifi/mld picks the ap_sta if the sta argument is NULL; thus it

    [11 lines not shown]
DeltaFile
+16-0sys/compat/linuxkpi/common/src/linux_80211_macops.c
+16-01 files

FreeBSD/src f54e9d1sys/compat/linuxkpi/common/src linux_80211.c

LinuxKPI: 802.11: set undefined link in TX control info

We are not doing MLO yet so set the undefined link bit in the
TX info control message in case a driver checks if the TX would be
link specific.

Sposnored by:   The FreeBSD Foundation
MFC after:      3 days
DeltaFile
+4-0sys/compat/linuxkpi/common/src/linux_80211.c
+4-01 files

FreeBSD/src 0cb3b92sys/compat/linuxkpi/common/include/linux ieee80211.h, sys/compat/linuxkpi/common/src linux_80211.c

LinuxKPI: 802.11: add print masks for tx status flags

Add print masks for tx status flags and use them in the TX tracing
in order to more easily debug TX problems.

As a result it was easier to determine that some dirver like the mt7921
(or mt76) do not always zero the status bits of the tx status information
(it is a union with the control bits passed on TX) and thus we get bogus
values back (rather than having flags in a different place than we thought).

Sponsored by:   The FreeBSD Foundation
MFC after:      3 days
DeltaFile
+11-0sys/compat/linuxkpi/common/include/linux/ieee80211.h
+4-4sys/compat/linuxkpi/common/src/linux_80211.c
+15-42 files

FreeBSD/ports 1c6962bgraphics/alizams Makefile distinfo

graphics/alizams: Update to 1.10.0 and switch to qt6

https://github.com/AlizaMedicalImaging/AlizaMS/releases/tag/v1.10.0

PR:             295493
Approved by:    yuri (maintainer timeout > 2 weeks)
Approved by:    osa (mentor)
DeltaFile
+5-5graphics/alizams/Makefile
+3-3graphics/alizams/distinfo
+8-82 files

FreeBSD/ports b7bde18devel/universal-ctags distinfo Makefile

devel/universal-ctags: Update p6.2.20260510.0 => p6.2.20260607.0

Commit log:
https://github.com/universal-ctags/ctags/compare/p6.2.20260510.0...p6.2.20260607.0

PR:             296061
Sponsored by:   UNIS Labs
DeltaFile
+3-3devel/universal-ctags/distinfo
+1-1devel/universal-ctags/Makefile
+4-42 files

FreeBSD/ports 1383b79net-mgmt/netxms pkg-plist Makefile

net-mgmt/netxms: Update 6.1.3 => 6.1.4

Release Notes:
https://netxms.com/release-notes/

- Add option for MariaDB.
- Sort plist.
- Fix plist if SSH enabled, AGENT disabled, SERVER disabled.

PR:             296051
Sponsored by:   UNIS Labs
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>
DeltaFile
+148-146net-mgmt/netxms/pkg-plist
+9-2net-mgmt/netxms/Makefile
+3-3net-mgmt/netxms/distinfo
+160-1513 files

FreeBSD/ports cbc4172net-mgmt/libsmi Makefile distinfo

net-mgmt/libsmi: Fix CVE-2010-2891

PR:             295866
Approved by:    Marcin Cieślak <saper at saper.info> (maintainer)
Approved by:    osa (mentor)
MFH:            2026Q2
Security:       CVE-2010-2891

(cherry picked from commit e5ff44e8c35c7b8b65e4ba4ab6fdf1da7a1ee5ab)
DeltaFile
+4-1net-mgmt/libsmi/Makefile
+3-0net-mgmt/libsmi/distinfo
+7-12 files

FreeBSD/ports 9bb4f84security/vuxml/vuln 2026.xml

security/vuxml: improve recent change

Fixes:  a90e0c311e44e5916df1d0b26f288bac063d1688
DeltaFile
+3-3security/vuxml/vuln/2026.xml
+3-31 files

FreeBSD/ports aa3fda0databases/tkrzw-python Makefile

databases/tkrzw-python: Switch distutils to PEP517

PR:             295998
Sponsored by:   UNIS Labs
DeltaFile
+7-1databases/tkrzw-python/Makefile
+7-11 files

FreeBSD/ports e5ff44enet-mgmt/libsmi Makefile distinfo

net-mgmt/libsmi: Fix CVE-2010-2891

PR:             295866
Approved by:    Marcin Cieślak <saper at saper.info> (maintainer)
Approved by:    osa (mentor)
MFH:            2026Q2
Security:       CVE-2010-2891
DeltaFile
+4-1net-mgmt/libsmi/Makefile
+3-0net-mgmt/libsmi/distinfo
+7-12 files

FreeBSD/doc 1e6745bwebsite/content/en/releases/15.1R relnotes.adoc

15.1/relnotes: add the latest EN and SA

Approved by: re (implicit)
Differential Revision: https://reviews.freebsd.org/D57593
DeltaFile
+56-0website/content/en/releases/15.1R/relnotes.adoc
+56-01 files