dns/adns: update 1.6.0 -> 1.6.2, pet repology
- Disable debugging output to stderr from adns_addr2text and
adns_text2addr, when used with exciting values (eg scoped addresses)
- Suppress warning about `trust-ad` in resolv.conf
intelspi: sort PCI ID table by device ID
Sort the existing LPSS peripheral SPI controller PCI ID table by
numeric device ID so new entries have an unambiguous insertion point.
Reviewed by: wulf
Differential Revision: https://reviews.freebsd.org/D58996
intelspi: add Apollo Lake SPI controller IDs
Add PCI device IDs for Apollo Lake-generation LPSS peripheral SPI
controllers.
Reviewed by: adrian
Differential Revision: https://reviews.freebsd.org/D58998
sysutils/terraform: Update to 1.15.9, fix LICENSE
Update from 1.15.3 to 1.15.9. 1.15.9 updates go-slug to v0.18.3,
addressing CVE-2026-14978, an exclusion bypass in .terraformignore
handling. The version proposed in the PR, 1.15.8, still carries the
affected go-slug v0.18.1, hence the jump to 1.15.9.
The remaining changes are bugfixes: crashes in init and console,
wrong exit codes for variable errors in plan, query and refresh,
child module and submodule validation, several module installation
edge cases, and concurrency safety in the config parsers.
PR: 297296
Security: CVE-2026-14978
Approved by: maintainer timeout (dutra)
Sponsored by: Netzkommune GmbH
(cherry picked from commit 470005eb0237802792ed6d527374f0f1301e1967)
security/vuxml: Document terraform exclusion bypass
go-slug before v0.18.3, bundled in terraform, does not consistently
match .terraformignore rules against canonically equivalent Unicode
filenames, so files meant to be excluded can end up in uploads to
HCP Terraform or Terraform Enterprise. Fixed in terraform 1.15.9.
Security: CVE-2026-14978
Sponsored by: Netzkommune GmbH
sysutils/terraform: Update to 1.15.9, fix LICENSE
Update from 1.15.3 to 1.15.9. 1.15.9 updates go-slug to v0.18.3,
addressing CVE-2026-14978, an exclusion bypass in .terraformignore
handling. The version proposed in the PR, 1.15.8, still carries the
affected go-slug v0.18.1, hence the jump to 1.15.9.
The remaining changes are bugfixes: crashes in init and console,
wrong exit codes for variable errors in plan, query and refresh,
child module and submodule validation, several module installation
edge cases, and concurrency safety in the config parsers.
PR: 297296
Security: CVE-2026-14978
Approved by: maintainer timeout (dutra)
Sponsored by: Netzkommune GmbH
libkern.h: remove HAVE_INLINE_* macros
The final consumer of this was OpenZFS, fixed in ffaea0831973 (thanks
mav@). That change has been present in all active OpenZFS release
branches for at least 6 months. These can finally be retired.
Reviewed by: mav
MFC after: 3 days
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D55201
jh7110_gpio: driver enhancements
Fix reporting of state and capabilities by the gpioctl command.
Support selection of pull-up and pull-down resistors.
Support second gpio device (AON - always on power domain) to allow
attaching gpioled device to visionfive2 status LED or querying boot
selection switches.
Reviewed by: mhorne
MFC after: 1 week
Differential Revision: https://reviews.freebsd.org/D58693
jh7110_gpio: remove unneeded cleanup
Any failure within bus_alloc_resources() will call bus_release_resources();
thus the call is redundant here.
MFC after: 3 days
Sponsored by: The FreeBSD Foundation
OptionalObsoleteFiles: Add missing headers
The header files for dialog, figpar, dpv were never listed.
Fixes: bc6c827078b7 ("OptionalObsoleteFiles: Add figpar to dialog section")
(cherry picked from commit acf6518a2d6f33fb56c861861cbad0c0cb56817e)
security/certmonger: Fix hardcoded paths
The location of the IPA configuration is hardcoded in three source
files, so on FreeBSD certmonger never finds it and every certificate
request fails with "Unable to determine location of IPA LDAP server".
Renewal is affected too, dogtag-ipa-renew-agent-submit carries the same
paths.
PR: 297709
Approved by: crees (maintainer)
Sponsored by: Netzkommune GmbH
(cherry picked from commit 2a0a6d9d4d7e21058908377aff9d6ec101ff3993)
security/certmonger: Fix hardcoded paths
The location of the IPA configuration is hardcoded in three source
files, so on FreeBSD certmonger never finds it and every certificate
request fails with "Unable to determine location of IPA LDAP server".
Renewal is affected too, dogtag-ipa-renew-agent-submit carries the same
paths.
PR: 297709
Approved by: crees (maintainer)
Sponsored by: Netzkommune GmbH
vchiq: Merge two commits from Linux
6e474d8e3981 ("staging: vchiq_shim: avoid code duplication") refactors
some code which makes applying the subsequent patch easier.
49bec49fd7f2 ("staging: vc04_services: remove vchiq_copy_from_user")
addresses a user-triggerable integer overflow via the
VCHIQ_IOC_QUEUE_MESSAGE ioctl on /dev/vchiq (which has mode 0600 by
default). It also addresses insufficient validation of user-controlled
addresses in vchiq_copy_from_user().
Update the bcm2835_audio driver to follow the change to
vchi_msg_queue().
Reported by: Vicki Pfau
Reviewed by: Abdelkader Boudih <freebsd at seuros.com>
Tested by: Abdelkader Boudih <freebsd at seuros.com>
Tested by: Marco Devesas Campos <devesas.campos at gmail.com>
MFC after: 2 weeks
[2 lines not shown]
libusb: Add an XXX comment for possible duplicate callback IDs
If next_callback_id wraps we could end up with two callbacks with the
same ID. I recommitted the original change despite this issue in order
to fix the libusb API as soon as possible after SHLIB_MAJOR was bumped
in commit 527a82474cb3 (libusb: versioning symbols).
It's very unlikely in practice that software will register and
deregister a sufficient number of callbacks to trigger this, but it is
a real issue to be fixed in a subsequent commit.
Sponsored by: The FreeBSD Foundation
libusb: change callback register handler to int
libusb upstream uses int for register handler. This causes some library
user (like pyusb) to assume that we have int in all implementations and
therefore provides a 4 byte storage only. This causes Segmentation
fault as we will right the pointer.
Reviewed by: adrian
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D54211
(cherry picked from commit ce9ced951a0b9d004a3b007d4ac6e9087a1301a2)
devel/py-backports.*: resolve conflicts with devel/py-backports
devel/py-backports does basically nothing except to install the
/usr/local/lib/python3.*/site-packages/backports/__init__.py file.
Several other py-backports.* ports also installed the same file, with
identical contents. That created runtime conflicts that prevented
certain ports from being installed, including sysutils/py-salt.
Fix the conflicts by patching the offending ports to stop installing
that file, and instead depend on devel/py-backports.
PR: 297696
PR: 297697
Reviewed by: krion
Sponsored by: ConnectWise
Inspired by: 56a719e6b67 (svn r492366)
netstat(1): Add nexthop statistics support with -os flag
Add support nexthop statistics and update its manual.
While here, fix manual of other nexthop related options.
Reviewed by: kfv
Differential Revision: https://reviews.freebsd.org/D58538
