FreeBSD/ports 1ba6e73sysutils/py-google-compute-engine Makefile, sysutils/py-google-compute-engine/files google_set_hostname google_startup.in

sysutils/py-google-compute-engine: revive port

This reverts commit 5a7ff5102154b08055c37868810192a9dca8044b and uses
www/py-boto3 instead of the removed devel/py-boto, and releng-gce@
assumes maintainership.

This is meant to be a temporary measure as we are exploring alternatives
for GCE support.

MFH:    2025Q2
(cherry picked from commit 592b450ab9275d2b5423132059ca9e2c231746d1)
DeltaFile
+60-0sysutils/py-google-compute-engine/files/google_set_hostname
+51-0sysutils/py-google-compute-engine/Makefile
+43-0sysutils/py-google-compute-engine/files/google_startup.in
+35-0sysutils/py-google-compute-engine/files/google_accounts_daemon.in
+32-0sysutils/py-google-compute-engine/files/google_clock_skew_daemon.in
+32-0sysutils/py-google-compute-engine/files/google_network_daemon.in
+253-09 files not shown
+342-115 files

FreeBSD/ports 592b450sysutils/py-google-compute-engine Makefile, sysutils/py-google-compute-engine/files google_set_hostname google_startup.in

sysutils/py-google-compute-engine: revive port

This reverts commit 5a7ff5102154b08055c37868810192a9dca8044b and uses
www/py-boto3 instead of the removed devel/py-boto, and releng-gce@
assumes maintainership.

This is meant to be a temporary measure as we are exploring alternatives
for GCE support.

MFH:    2025Q2
DeltaFile
+60-0sysutils/py-google-compute-engine/files/google_set_hostname
+51-0sysutils/py-google-compute-engine/Makefile
+43-0sysutils/py-google-compute-engine/files/google_startup.in
+35-0sysutils/py-google-compute-engine/files/google_accounts_daemon.in
+32-0sysutils/py-google-compute-engine/files/google_clock_skew_daemon.in
+32-0sysutils/py-google-compute-engine/files/google_network_daemon.in
+253-09 files not shown
+342-115 files

FreeBSD/src bcd85e0sys/amd64/sgx sgx.c, sys/arm/nvidia/drm2 tegra_bo.c

vm_page: make iter_insert() public

In places where vm_page_insert() is used after lookups, or for
consecutive pages, use vm_page_iter_insert instead, to exploit
locality.

Reviewed by:    kib, markj
Differential Revision:  https://reviews.freebsd.org/D50248
DeltaFile
+30-32sys/amd64/sgx/sgx.c
+8-3sys/compat/linuxkpi/common/src/linux_page.c
+6-3sys/dev/drm2/ttm/ttm_bo_vm.c
+3-1sys/arm/nvidia/drm2/tegra_bo.c
+1-1sys/vm/vm_page.c
+2-0sys/vm/vm_page.h
+50-406 files

FreeBSD/src 8703b57sys/kern subr_pctrie.c, sys/sys pctrie.h

vm_page_grab_pages: fetch page ranges

Define an iterator based function for reading a range of consecutive,
non-NULL leaves from a pctrie. Adapt it to vm pages.  Use it in
vm_page_grab_pages to fetch more than one page at a time.

Reviewed by:    markj
Differential Revision:  https://reviews.freebsd.org/D50253
DeltaFile
+24-7sys/kern/subr_pctrie.c
+15-1sys/sys/pctrie.h
+10-4sys/vm/vm_page.c
+11-0sys/vm/vm_radix.h
+60-124 files

FreeBSD/ports 77e5783security/hockeypuck distinfo Makefile

security/hockeypuck: Update to 2.2.3

Use PLIST_FILES and Makefile.modules.
Submitter takes maintainership.

PR:             259176
DeltaFile
+99-37security/hockeypuck/distinfo
+18-34security/hockeypuck/Makefile
+49-0security/hockeypuck/Makefile.modules
+0-4security/hockeypuck/pkg-plist
+166-754 files

FreeBSD/ports 2038605security/sudo-rs Makefile distinfo

security/sudo-rs: Update to 0.2.6

ChangeLog:
https://github.com/trifectatechfoundation/sudo-rs/releases/tag/v0.2.6

PR:             286636
Approved by:    submitter is maintainer
DeltaFile
+22-19security/sudo-rs/Makefile
+7-7security/sudo-rs/distinfo
+29-262 files

FreeBSD/ports 3dd40d5www/newsraft Makefile distinfo

www/newsraft: Update to 0.30

Remove unneeded yajl dependency.
Use utf8 test environment.

Changelog:
https://codeberg.org/newsraft/newsraft/releases/tag/newsraft-0.30
DeltaFile
+3-3www/newsraft/Makefile
+3-3www/newsraft/distinfo
+1-0www/newsraft/pkg-plist
+7-63 files

FreeBSD/ports 0600608devel/wasmer distinfo Makefile.crates

devel/wasmer: Update to 6.0.0

Changelog:
https://github.com/wasmerio/wasmer/blob/main/CHANGELOG.md#600---24042025

PR:             286578
Approved by:    submitter is maintainer
DeltaFile
+601-515devel/wasmer/distinfo
+299-256devel/wasmer/Makefile.crates
+5-3devel/wasmer/Makefile
+905-7743 files

FreeBSD/ports a929721www/py-django42 distinfo Makefile, www/py-django42/files patch-pyproject.toml patch-setup.cfg

www/py-django42: Update to 4.2.21
DeltaFile
+17-0www/py-django42/files/patch-pyproject.toml
+0-9www/py-django42/files/patch-setup.cfg
+3-3www/py-django42/distinfo
+2-2www/py-django42/Makefile
+22-144 files

FreeBSD/ports 4b286f9www/py-django52 distinfo Makefile, www/py-django52/files patch-pyproject.toml

www/py-django52: Update to 5.2.1
DeltaFile
+5-2www/py-django52/files/patch-pyproject.toml
+3-3www/py-django52/distinfo
+2-2www/py-django52/Makefile
+10-73 files

FreeBSD/ports 95ea581www/py-django51 distinfo Makefile, www/py-django51/files patch-pyproject.toml

www/py-django51: Update to 5.1.9
DeltaFile
+5-2www/py-django51/files/patch-pyproject.toml
+3-3www/py-django51/distinfo
+2-3www/py-django51/Makefile
+10-83 files

FreeBSD/src 2fa185fshare/man/man9 crypto_request.9, sys/opencrypto crypto.c cryptodev.h

crypto: Remove uses of CRYPTO_F_DONE

Previously OCF set CRYPTO_F_DONE prior to invoking the completion
callback, even if the request failed. This isn't particularly useful
and leads to bugs when consumers retry a failed request, since OCF also
asserts that CRYPTO_F_DONE is clear in crypto_dispatch(). (Really, OCF
should retry requests that fail with EAGAIN, but that's a larger
change.)

For now, just stop setting CRYPTO_F_DONE to simplify consumers (and fix
those which fail to clear the flag before retrying a request).

PR:             286321
Reviewed by:    jhb
Differential Revision:  https://reviews.freebsd.org/D50104
DeltaFile
+1-12share/man/man9/crypto_request.9
+0-6sys/opencrypto/crypto.c
+1-1sys/opencrypto/cryptodev.h
+1-1sys/sys/param.h
+0-2sys/opencrypto/cryptodev.c
+0-2sys/opencrypto/ktls_ocf.c
+3-242 files not shown
+3-268 files

FreeBSD/src 04421fdsys/kgssapi/krb5 kcrypto_aes.c

krb5: Fix handling of transient crypto request failures

- Instead of using CRYPTO_F_DONE to decide whether a request has
  completed, use a custom protocol of setting crp_opaque = NULL in the
  callback and checking that instead.  CRYPTO_F_DONE is set independent
  of whether an error occurred, but for transient errors signaled by
  EAGAIN, we want to simply retry the request.
- Clear CRYPTO_F_DONE before retrying the request.
- Panic if the request truly failed, as we currently have no way to
  pass hard errors back up.

Reviewed by:    jhb
MFC after:      2 weeks
Differential Revision:  https://reviews.freebsd.org/D50238
DeltaFile
+19-11sys/kgssapi/krb5/kcrypto_aes.c
+19-111 files

FreeBSD/src 0e80651sys/conf newvers.sh

14.3: Update to BETA2

Approved by:    re (implicit)
Sponsored by:   Amazon
DeltaFile
+1-1sys/conf/newvers.sh
+1-11 files

FreeBSD/src 33759fclibexec/rtld-elf rtld.c

rtld: remove stray tabs

Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
DeltaFile
+2-2libexec/rtld-elf/rtld.c
+2-21 files

FreeBSD/doc 81c8a1eshared releases.adoc, website/content/en where.adoc

stable/14 is now 14.3-STABLE

Update errata and advisory templates and download page.

Sponsored by:   Amazon
DeltaFile
+3-3website/content/en/where.adoc
+3-0shared/releases.adoc
+1-1website/static/security/advisory-template.txt
+1-1website/static/security/errata-template.txt
+8-54 files

FreeBSD/ports c3626a7sysutils/desktop-installer distinfo Makefile

sysutils/desktop-installer: Update to 1.1.1

Minor fixes and enhancements
Changes: https://github.com/outpaddling/desktop-installer/releases
DeltaFile
+3-3sysutils/desktop-installer/distinfo
+1-2sysutils/desktop-installer/Makefile
+4-52 files

FreeBSD/ports a98cffawww/fcgi Makefile pkg-plist, www/fcgi/files patch-CVE-2012-6687-pool patch-examples__Makefile.in

www/fcgi: Update 2.4.0 => 2.4.6 (fix CVE-2025-23016), improve port

Commit log:
https://github.com/FastCGI-Archives/fcgi2/compare/2.4.0...2.4.6

Changelogs:
https://github.com/FastCGI-Archives/fcgi2/releases/tag/2.4.1
https://github.com/FastCGI-Archives/fcgi2/releases/tag/2.4.1.1
https://github.com/FastCGI-Archives/fcgi2/releases/tag/2.4.2
https://github.com/FastCGI-Archives/fcgi2/releases/tag/2.4.3
https://github.com/FastCGI-Archives/fcgi2/releases/tag/2.4.4
https://github.com/FastCGI-Archives/fcgi2/releases/tag/2.4.5
https://github.com/FastCGI-Archives/fcgi2/releases/tag/2.4.6

Improve port:
- Replace PORTVERSION with DISTVERSION.
- Update WWW - old is down.
- Switch upstream to GitHub.
- Add USES+=pathfix for install *.pc files in correct path.

    [13 lines not shown]
DeltaFile
+0-79www/fcgi/files/patch-CVE-2012-6687-pool
+11-10www/fcgi/Makefile
+7-5www/fcgi/pkg-plist
+0-11www/fcgi/files/patch-examples__Makefile.in
+0-10www/fcgi/files/patch-include__fcgio.h
+3-2www/fcgi/distinfo
+21-1176 files

FreeBSD/ports a654249sysutils/auto-admin distinfo Makefile

sysutils/auto-admin: Update to 0.8.3

Minor fixes and enhancements
Changes: https://github.com/outpaddling/auto-admin/releases
DeltaFile
+3-3sysutils/auto-admin/distinfo
+1-1sysutils/auto-admin/Makefile
+4-42 files

FreeBSD/ports 7809d88www/fcgi Makefile pkg-plist, www/fcgi/files patch-CVE-2012-6687-pool patch-examples__Makefile.in

www/fcgi: Update 2.4.0 => 2.4.6 (fix CVE-2025-23016), improve port

Commit log:
https://github.com/FastCGI-Archives/fcgi2/compare/2.4.0...2.4.6

Changelogs:
https://github.com/FastCGI-Archives/fcgi2/releases/tag/2.4.1
https://github.com/FastCGI-Archives/fcgi2/releases/tag/2.4.1.1
https://github.com/FastCGI-Archives/fcgi2/releases/tag/2.4.2
https://github.com/FastCGI-Archives/fcgi2/releases/tag/2.4.3
https://github.com/FastCGI-Archives/fcgi2/releases/tag/2.4.4
https://github.com/FastCGI-Archives/fcgi2/releases/tag/2.4.5
https://github.com/FastCGI-Archives/fcgi2/releases/tag/2.4.6

Improve port:
- Replace PORTVERSION with DISTVERSION.
- Update WWW - old is down.
- Switch upstream to GitHub.
- Add USES+=pathfix for install *.pc files in correct path.

    [11 lines not shown]
DeltaFile
+0-79www/fcgi/files/patch-CVE-2012-6687-pool
+11-10www/fcgi/Makefile
+7-5www/fcgi/pkg-plist
+0-11www/fcgi/files/patch-examples__Makefile.in
+0-10www/fcgi/files/patch-include__fcgio.h
+3-2www/fcgi/distinfo
+21-1176 files

FreeBSD/src 8d6b758sys/net80211 ieee80211_ioctl.c

net80211: fix a race between ieee80211_sta_join and scan entries

We were seeing panics during ieee80211_sta_join() which seemed that
the ni->ni_chan was not valid anymore, which was true.
We also saw errors indicating data put into ni_ies became inalid.

The problem was that the ieee80211_scan_entry passed into
ieee80211_sta_join() (in the observed case from setmlme_assoc_sta())
became invalid during ieee80211_alloc_node().
As a result for the ni_chan case the the rateset and len in rates[1]
became invalid.  Similarly for the IEs.

Make a (deep)copy of the scan entry in setmlme_assoc_sta() and return
the copy as once we leave ieee80211_scan_iterate() we can no longer
rely on the scan entry to be valid.

Sponsored by:   The FreeBSD Foundation
Reported by:    rm, ziaee, bz
Tested by:      rm, ziaee, bz

    [7 lines not shown]
DeltaFile
+21-5sys/net80211/ieee80211_ioctl.c
+21-51 files

FreeBSD/src 873c0easys/compat/linuxkpi/common/include/linux ieee80211.h, sys/compat/linuxkpi/common/include/net cfg80211.h mac80211.h

LinuxKPI: 802.11: header updates for mt76

Add more structs, fields, flags, defines.

Sponsored by:   The FreeBSD Foundation
Approved by:    re (cperciva)

(cherry picked from commit 675e6b1c68ba71af1853952f7df4d84399340009)
(cherry picked from commit 6a0dbc0a1246c9825f0892bb6dd957f5d081057a)
DeltaFile
+67-29sys/compat/linuxkpi/common/include/net/cfg80211.h
+27-9sys/compat/linuxkpi/common/include/net/mac80211.h
+6-0sys/compat/linuxkpi/common/include/linux/ieee80211.h
+100-383 files

FreeBSD/src 7194631sys/compat/linuxkpi/common/include/net cfg80211.h

LinuxKPI: 802.11: fix wiphy_info[_once]

The dev field in wiphy is a pointer already; no need for &.

Sponsored by:   The FreeBSD Foundation
Fixes:          ac1d519c01ca8
Approved by:    re (cperciva)

(cherry picked from commit 845b81cf908002b14ac08ce8c42246720a5b30d9)
(cherry picked from commit a21addc7a0137c5938414df322dbf5f929729834)
DeltaFile
+2-2sys/compat/linuxkpi/common/include/net/cfg80211.h
+2-21 files

FreeBSD/ports 8c1ec3emisc/py-polars distinfo Makefile, misc/py-polars/files patch-src_allocator.rs patch-dotdot-Cargo.lock

misc/py-polars: update 1.9.0 → 1.29.0
DeltaFile
+523-443misc/py-polars/distinfo
+269-223misc/py-polars/Makefile
+0-52misc/py-polars/files/patch-src_allocator.rs
+0-29misc/py-polars/files/patch-dotdot-Cargo.lock
+10-18misc/py-polars/files/patch-Cargo.toml
+802-7655 files

FreeBSD/ports 64bbf97security/vuxml/vuln 2025.xml

security/vuxml: Add information about PostgreSQL overflow issue
DeltaFile
+70-0security/vuxml/vuln/2025.xml
+70-01 files

FreeBSD/ports a9608d6databases/postgresql18-server pkg-plist-server pkg-plist-client, databases/postgresql18-server/files postgresql.in 502.pgsql.in

databases/postgresql??-*: Update to latest version

PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 Released!

The PostgreSQL Global Development Group has released an update to all
supported versions of PostgreSQL, including 17.5, 16.9, 15.13, 14.18,
and 13.21. This release fixes 1 security vulnerability and over 60 bugs
reported over the last several months.

Security:       78b8e808-2c45-11f0-9a65-6cc21735f730
Release notes:  https://www.postgresql.org/about/news/postgresql-175-169-1513-1418-and-1321-released-3072/
DeltaFile
+1,725-0databases/postgresql18-server/pkg-plist-server
+1,400-0databases/postgresql18-server/pkg-plist-client
+281-0databases/postgresql18-server/pkg-plist-contrib
+245-0databases/postgresql18-server/Makefile
+125-0databases/postgresql18-server/files/postgresql.in
+114-0databases/postgresql18-server/files/502.pgsql.in
+3,890-051 files not shown
+4,481-3257 files

FreeBSD/ports 50fb480security/vuls distinfo Makefile

security/vuls: Update to 0.31.1

Release notes:  https://github.com/future-architect/vuls/releases/tag/v0.31.1
DeltaFile
+5-5security/vuls/distinfo
+1-2security/vuls/Makefile
+6-72 files

FreeBSD/ports d4a506amath/R pkg-plist Makefile, math/R/files patch-src_library_grDevices_src_devPS.c

math/R: Update to 4.5.0

Release announcement:   https://hypatia.math.ethz.ch/pipermail/r-announce/2025//000710.html
Sponsored by:   The FreeBSD Foundation
DeltaFile
+16-0math/R/pkg-plist
+10-0math/R/files/patch-src_library_grDevices_src_devPS.c
+5-4math/R/Makefile
+3-3math/R/distinfo
+34-74 files

FreeBSD/src 7866169stand/i386/loader Makefile

loader: i386: use -z nostart-stop-gc for bfd as well

binutils 2.37 seems to have added the knob, so let's just use that
version here (it's not clear if GC'ing start/stop symbols was actually
made the default at the time, and it didn't seem worth it to dig much
further).  This fixes misbehavior when built with more recent binutils,
as we do rely on linker sets for loader commands that we use.

Reported by:    sjg
Reviewed by:    dim, sjg
Differential Revision:  https://reviews.freebsd.org/D50252
DeltaFile
+2-1stand/i386/loader/Makefile
+2-11 files

FreeBSD/ports 5b5c709net/openrsync Makefile distinfo

net/openrsync: Update 0.0.20200401 => 0.0.20250127 (latest commit)

Commit log:
https://github.com/kristapsdz/openrsync/compare/8b61216...a257c0f

Improve port:
- split long lines,
- reduce number of run ${REINPLACE_CMD} from 12 to 4,
- add strip binary (warning from poudriere testport).

PR:             285938
Approved by:    Timothy Beyer <beyert at cs.ucr.edu> (maintainer)
Co-authored-by: Herbert J. Skuhra <herbert at gojira.at>
DeltaFile
+18-11net/openrsync/Makefile
+3-3net/openrsync/distinfo
+21-142 files