FreeBSD/ports 9bb4f84security/vuxml/vuln 2026.xml

security/vuxml: improve recent change

Fixes:  a90e0c311e44e5916df1d0b26f288bac063d1688
DeltaFile
+3-3security/vuxml/vuln/2026.xml
+3-31 files

FreeBSD/ports aa3fda0databases/tkrzw-python Makefile

databases/tkrzw-python: Switch distutils to PEP517

PR:             295998
Sponsored by:   UNIS Labs
DeltaFile
+7-1databases/tkrzw-python/Makefile
+7-11 files

FreeBSD/ports e5ff44enet-mgmt/libsmi Makefile distinfo

net-mgmt/libsmi: Fix CVE-2010-2891

PR:             295866
Approved by:    Marcin Cieślak <saper at saper.info> (maintainer)
Approved by:    osa (mentor)
MFH:            2026Q2
Security:       CVE-2010-2891
DeltaFile
+4-1net-mgmt/libsmi/Makefile
+3-0net-mgmt/libsmi/distinfo
+7-12 files

FreeBSD/doc 1e6745bwebsite/content/en/releases/15.1R relnotes.adoc

15.1/relnotes: add the latest EN and SA

Approved by: re (implicit)
Differential Revision: https://reviews.freebsd.org/D57593
DeltaFile
+56-0website/content/en/releases/15.1R/relnotes.adoc
+56-01 files

FreeBSD/ports 62a8943cad/freecad/files patch-src_Mod_TechDraw_Gui_CommandCreateDims.cpp

cad/freecad: better fix for build on -CURRENT

pull in patch from upstream, where they had similar failures
on other systems with recent compilers.
DeltaFile
+33-3cad/freecad/files/patch-src_Mod_TechDraw_Gui_CommandCreateDims.cpp
+33-31 files

FreeBSD/ports a90e0c3security/vuxml/vuln 2026.xml

security/vuxml: Add libsmi 0.4.8 vulnerability

PR:             295866
Approved by:    osa (mentor)
DeltaFile
+29-0security/vuxml/vuln/2026.xml
+29-01 files

FreeBSD/ports 96d1244security/nss distinfo Makefile

security/nss: update to 3.124

Announcement:
  https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/SdWmt1l2lz8
(cherry picked from commit 6cb495a2b494ae7f037ef531cf153ae843b23267)
DeltaFile
+3-3security/nss/distinfo
+1-3security/nss/Makefile
+4-62 files

FreeBSD/ports ae370a1mail/mutt distinfo Makefile

mail/mutt: Update 2.3.2 => 2.3.3

Release Notes:
https://marc.info/?l=mutt-users&m=178124026624974

PR:             296058
Sponsored by:   UNIS Labs
DeltaFile
+3-3mail/mutt/distinfo
+1-1mail/mutt/Makefile
+4-42 files

FreeBSD/ports b97c83dnet/liferea Makefile, net/liferea/files patch-configure

net/liferea: Add a patch to downgrade the required glib-2.0 version

to make sure the port can be built from the FreeBSD ports branch 2026Q2.

The port already contains a patch to add compatibility code
for glib-2.0 versions before 2.86.0 since e8b5b5dee.

PR:     296020
DeltaFile
+26-0net/liferea/files/patch-configure
+1-0net/liferea/Makefile
+27-02 files

FreeBSD/src 142cba9sys/dev/bge if_bge.c

bge: read MAC from loader hint for boards without NVRAM/EEPROM

BCM57766 on Apple T2 Macs (Macmini8,1) has no dedicated EEPROM and the
chip firmware handshake fails (the T2 intercepts PCI config space),
leaving the SRAM mailbox unpopulated.  All four existing MAC retrieval
paths (SRAM mailbox, NVRAM, EEPROM, firmware stub) fail, causing bge to
abort attach with "failed to read station address".

Work around this with two changes:

  1. Tolerate EEPROM read failure on BCM57766.  The chip is copper-only
     so hwcfg=0 is correct; skip the fatal error that aborts attach
     before bge_get_eaddr() is ever called.

  2. Implement bge_get_eaddr_fw() to read a "hint.bge.N.mac" string
     (e.g. "f0:18:98:f4:1e:2f") from loader(8) tunable / kenv.

This is a workaround until the T2 BCE API is understood well enough to
either poke the chip firmware into completing its handshake or read the

    [4 lines not shown]
DeltaFile
+36-6sys/dev/bge/if_bge.c
+36-61 files

FreeBSD/src e37e49bsys/dev/asmc asmc.c

asmc: fix asmc_key_dump() page fault on T2 MMIO backend

asmc_key_dump() used I/O port macros (ASMC_DATAPORT_WRITE/READ,
asmc_command()) unconditionally. On T2 Macs, sc_ioport is NULL
(MMIO backend is used instead), causing a page fault when
ASMC_DEBUG triggers asmc_dumpall() during attach.

Add an MMIO guard at the top of asmc_key_dump(): delegate to
asmc_key_dump_by_index() + asmc_key_read() for MMIO devices,
consistent with the rest of the T2 code paths.

Reviewed by:    adrian
Differential Revision:  https://reviews.freebsd.org/D56748
DeltaFile
+31-5sys/dev/asmc/asmc.c
+31-51 files

FreeBSD/src 9f90536sys/dev/apple_bce apple_bce_vhci.c apple_bce_vhci.h, sys/modules/apple_bce Makefile

apple_bce/vhci: add T2 virtual USB host controller

Implements a VHCI driver on top of the BCE transport:
- Virtual USB bus registration via usb_controller
- Port discovery and device enumeration
- Control, interrupt, and bulk endpoint support
- Firmware event handling with taskqueue
- Suspend/resume via BCE mailbox

Provides keyboard, trackpad, and Touch Bar access on T2 Macs.

Tested-on: MacBookPro16,2 (A2251), Mac mini 8,1 (A1993)

Reviewed by:    adrian
Differential Revision:  https://reviews.freebsd.org/D57089
DeltaFile
+4,821-0sys/dev/apple_bce/apple_bce_vhci.c
+251-0sys/dev/apple_bce/apple_bce_vhci.h
+87-0sys/dev/apple_bce/apple_bce.c
+5-0sys/dev/apple_bce/apple_bce_mailbox.c
+2-1sys/dev/apple_bce/apple_bce.h
+2-0sys/modules/apple_bce/Makefile
+5,168-12 files not shown
+5,170-18 files

FreeBSD/src 6fd2ad9sys/dev/apple_bce apple_bce.c apple_bce_queue.c

apple_bce: add Apple T2 Buffer Copy Engine driver

DMA ring transport between the host and the T2 coprocessor.
Provides mailbox handshake, queue setup, and firmware keepalive
for higher-level T2 services (VHCI, audio, etc.).

Tested-on: MacBookPro16,2 (A2251), Mac mini 8,1 (A1993)

Reviewed by:    adrian
Differential Revision:  https://reviews.freebsd.org/D57088
DeltaFile
+642-0sys/dev/apple_bce/apple_bce.c
+492-0sys/dev/apple_bce/apple_bce_queue.c
+304-0sys/dev/apple_bce/apple_bce.h
+108-0sys/dev/apple_bce/apple_bce_mailbox.c
+52-0sys/dev/apple_bce/apple_bce_queue.h
+20-0sys/dev/apple_bce/apple_bce_mailbox.h
+1,618-03 files not shown
+1,630-09 files

FreeBSD/src 5e0ba47sys/dev/nvme nvme_qpair.c nvme_pci.c

nvme: add Apple T2 ANS2 NVMe quirks

The Apple T2 (ANS2, PCI 106b:2005) requires several quirks:

- 128-byte submission queue entries (CC.IOSQES = 7)
- Single MSI vector, one IO queue
- Admin and IO queues share a CID table; IO CIDs offset by
  adminq.num_trackers to avoid overlap
- No async event support
- IDENTIFY CNS >= 2 rejected to avoid firmware confusion

Tested-on:
- MacBookPro16,2 (A2251)
- Mac mini 8,1 (A1993)
- Multiple Non-Apple computers

Reviewed by:    imp
Differential Revision:  https://reviews.freebsd.org/D57087
DeltaFile
+23-9sys/dev/nvme/nvme_qpair.c
+15-0sys/dev/nvme/nvme_pci.c
+14-0sys/dev/nvme/nvme_private.h
+13-0sys/dev/nvme/nvme_ctrlr.c
+9-0sys/dev/nvme/nvme_sim.c
+1-1sys/dev/nvme/nvme_sysctl.c
+75-106 files

FreeBSD/ports 7467b1ccad/freecad/files patch-src_Mod_TechDraw_Gui_CommandCreateDims.cpp

cad/freecad: attempt to fix build on CURRENT

hard cast to make call to abs unambiguous

Error was:

/wrkdirs/usr/ports/cad/freecad/work/FreeCAD-1.1.1/src/Mod/TechDraw/Gui/CommandCreateDims.cpp:1106:52: error: call to 'abs' is ambiguous
 1106 |             int alpha = std::round(Base::toDegrees(std::abs<float>(std::atan(type == "DistanceY" ? (dx / dy) : (dy / dx)))));
DeltaFile
+13-0cad/freecad/files/patch-src_Mod_TechDraw_Gui_CommandCreateDims.cpp
+13-01 files

FreeBSD/ports 625b0ffdevel/rust-cbindgen distinfo Makefile, mail/thunderbird-esr/files patch-bug2046162

devel/rust-cbindgen: update to 0.29.4

Release Notes:
  https://github.com/mozilla/cbindgen/releases/tag/0.29.4

Second attempt, pull in fixes for gecko esr ports to fix build with
newer rust-cbindgen as per https://github.com/mozilla/cbindgen/issues/1165
DeltaFile
+31-0mail/thunderbird-esr/files/patch-bug2046162
+31-0www/firefox-esr/files/patch-bug2046162
+3-3devel/rust-cbindgen/distinfo
+1-2devel/rust-cbindgen/Makefile
+66-54 files

FreeBSD/ports 6ff19dctextproc/p5-PPIx-Regexp distinfo Makefile

textproc/p5-PPIx-Regexp: Update 0.091 => 0.092

Changelog:
https://metacpan.org/release/WYANT/PPIx-Regexp-0.092/source/Changes

PR:             296056
Sponsored by:   UNIS Labs
DeltaFile
+3-3textproc/p5-PPIx-Regexp/distinfo
+1-1textproc/p5-PPIx-Regexp/Makefile
+4-42 files

FreeBSD/ports 8b01fbawww/freenginx-devel distinfo Makefile.extmod, www/freenginx-devel/files extra-patch-ngx_http_zip_headers.c

www/freenginx-devel: third-party modules management (+)

Update third-party modules to their recent snapshots:

- keyval
- lua
- mod_zip (moves back to its original author's repo)

Bump PORTREVISION.

Sponsored by:   tipi.work
DeltaFile
+20-0www/freenginx-devel/files/extra-patch-ngx_http_zip_headers.c
+7-7www/freenginx-devel/distinfo
+4-3www/freenginx-devel/Makefile.extmod
+1-1www/freenginx-devel/Makefile
+32-114 files

FreeBSD/src b5cb273sys/kern tty.c

tty: Add sysctl knob to globally disable TIOCSTI

Reviewed by:    markj
PR:             293485
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D57233

(cherry picked from commit c289291a6736c01dd68fb8459ec3801859b0a59a)
(cherry picked from commit c94b8eee5bcb5f9d116cce9c831933115cfeeb19)
(cherry picked from commit 16532b220c9cbd9fb0365a80a23cc435003e9986)
DeltaFile
+8-0sys/kern/tty.c
+8-01 files

FreeBSD/src 16532b2sys/kern tty.c

tty: Add sysctl knob to globally disable TIOCSTI

Reviewed by:    markj
PR:             293485
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D57233

(cherry picked from commit c289291a6736c01dd68fb8459ec3801859b0a59a)
(cherry picked from commit c94b8eee5bcb5f9d116cce9c831933115cfeeb19)
DeltaFile
+8-0sys/kern/tty.c
+8-01 files

FreeBSD/doc 0344687website/content/ru/releases/15.1R relnotes.adoc

website/ru: Update releases/15.1R/relnotes.adoc

Update to EN 01d28516c437d000bc0c1a7adc0c967828489858
DeltaFile
+1-4website/content/ru/releases/15.1R/relnotes.adoc
+1-41 files

FreeBSD/doc 968cae3website/content/ru/releases/15.1R installation.adoc

website/ru: Add releases/15.1R/installation.adoc

Synced to EN c3372876197d665c77772a2581abdc66bc7b075e
DeltaFile
+96-0website/content/ru/releases/15.1R/installation.adoc
+96-01 files

FreeBSD/doc 93a5549website/content/en/cgi man.cgi

update freebsd-ports alias
DeltaFile
+1-1website/content/en/cgi/man.cgi
+1-11 files

FreeBSD/ports 75044aesysutils/chezmoi distinfo Makefile, sysutils/chezmoi/files patch-go.mod patch-assets_chezmoi.io_mkdocs.yml

sysutils/chezmoi: Update 2.50.0 => 2.70.5

Changelog (~50 new versions):
https://github.com/twpayne/chezmoi/releases/tag/v2.51.0
 . . .
https://github.com/twpayne/chezmoi/releases/tag/v2.70.5

PR:             295946
Sponsored by:   UNIS Labs
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>
DeltaFile
+5-303sysutils/chezmoi/distinfo
+7-194sysutils/chezmoi/Makefile
+0-11sysutils/chezmoi/files/patch-go.mod
+0-7sysutils/chezmoi/files/patch-assets_chezmoi.io_mkdocs.yml
+12-5154 files

FreeBSD/doc 01d2851website/content/en/releases/15.1R relnotes.adoc

15.1/relnotes: Remove ath(4) update

The update was to ath10k, not ath.

Reported by:    bz
DeltaFile
+0-3website/content/en/releases/15.1R/relnotes.adoc
+0-31 files

FreeBSD/ports 9713e05games/lmarbles Makefile

games/lmarbles: Pass maintainership

PR:             295905
DeltaFile
+2-1games/lmarbles/Makefile
+2-11 files

FreeBSD/ports 07fabbdnet-p2p/amule pkg-plist Makefile, net-p2p/amule/files patch-fix-boost1.89+ patch-fix-boost1.87+

net-p2p/amule: Update to 3.0.0

- Switch to the active community fork upstream
- Switch build system from GNU Autotools to CMake.
- Fix library dependencies by unbundling/forcing native options (disable BFD).
- Clean up obsolete Makefile variables, overrides, and old patches.
- Add tests

Reviewed by:    diizzy
DeltaFile
+0-983net-p2p/amule/files/patch-fix-boost1.89+
+133-135net-p2p/amule/pkg-plist
+0-139net-p2p/amule/files/patch-fix-boost1.87+
+39-98net-p2p/amule/Makefile
+31-0net-p2p/amule/files/patch-disable-try-to-use-ccache
+0-28net-p2p/amule/files/patch-autoconf-2.70
+203-1,3834 files not shown
+214-1,40610 files

FreeBSD/ports b2e64b1devel/wxformbuilder Makefile pkg-plist, devel/wxformbuilder/files patch-create__build__files4.sh patch-build_premake_bsd_Premake4.make

devel/wxformbuilder: Update 3.5.0-beta => 4.2.1, take maintainership

Changelog:
https://github.com/wxFormBuilder/wxFormBuilder/blob/v4.2.1/CHANGELOG.md

- Upstream moved to github.
- Unbundle tinyxml2.

PR:             295955
Sponsored by:   UNIS Labs
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>
DeltaFile
+0-50devel/wxformbuilder/files/patch-create__build__files4.sh
+12-30devel/wxformbuilder/Makefile
+28-13devel/wxformbuilder/pkg-plist
+0-35devel/wxformbuilder/files/patch-build_premake_bsd_Premake4.make
+0-30devel/wxformbuilder/files/patch-sdk_premake_scripts_wxpresets.lua
+18-0devel/wxformbuilder/files/patch-CMakeLists.txt
+58-1585 files not shown
+72-19911 files

FreeBSD/ports 6f01aa2databases/cego distinfo Makefile

databases/cego: update 2.54.25 -> 2.54.29

- fix in CegoBTreeValue::valueToFVL
- log mesage cleanup done for CegoRecoveryManager, CegoQueryManager
  and CegoTableManager.
- Changed return code of CegoBufferPool::writeCheckPoint to int to
  return the exit code of the optional escape command.
  This exit code then is indicated in the admin console
- Consolidation work done for CegoTableManager and CegoAuthManager
- Code reorganization for CegoAuthManager, CegoQueryManager and
  CegoTableManager: TableManager contains low level data access methods,
  QueryManger contains high level access and AuthMenager contains
  authorized access methods
- Post patch for this version : In CegoFieldValue::castTo, changed
  __dateFormatLock to writeLock. This is needed, since with readlock
  the _dateFormatList could be traversed in parallel by the Datetime
  constructor. This may lead to concurreny issues

Author:    Björn Lemke <lemke at lemke-it.com>
DeltaFile
+3-3databases/cego/distinfo
+1-1databases/cego/Makefile
+1-0databases/cego/pkg-plist
+5-43 files

FreeBSD/src a74c77cusr.bin/grep util.c

grep(1): optimize -w/--word-regexp word boundary check

The -w option checks word boundaries before and after each potential
match by decoding the adjacent character.  This was done via the
heavyweight sscanf(3) with "%lc", which goes through the full scanf
parser and locale-aware mbrtowc(3) machinery even for simple ASCII.

Replace with a three-tier fast path:

1. ASCII bytes (< 0x80): simple isalnum(3) / '_' comparison
2. UTF-8 continuation bytes (0x80-0xBF): interior bytes of a multi-byte
   character are always word characters -> no further decoding needed
3. Multi-byte start bytes (>= 0xC0): decode with mbrtowc(3) directly
   instead of sscanf(3)/%lc, avoiding scanf parser overhead

Benchmark with ministat(1) (10 runs each):

Worst-case ASCII (100k lines of 100 'a' chars, -w 'a'):
    Difference at 95.0% confidence: -15.3% +/- 3.1%

    [14 lines not shown]
DeltaFile
+34-10usr.bin/grep/util.c
+34-101 files