databases/openldap2[567]-server: Restore SMBPWD
Since FreeBSD 15 switched to MIT Kerberos, the SMBPWD option
was excluded because smbk5pwd requires Heimdal for its Kerberos
support. However, the Samba and shadow password hash parts of
the overlay do not depend on Kerberos and are still useful.
On FreeBSD 15 and later, build smbk5pwd without DO_KRB5 instead
of excluding the option altogether.
PR: 299408
Reported by: Geoffroy Desvernay <dgeo at centrale-med.fr>
net/samba425: avoid SIGFPE in streams_xattr_get_ea_value_fsp
As reported in https://bugzilla.samba.org/show_bug.cgi?id=16278,
upstream commit 5fa43440ebd3 ("vfs: Implement larger streams in multiple
xattrs"), results in many signal 8 (SIGFPE) crashes in smbd child
processes on FreeBSD, if the streams_xattr vfs module is loaded.
This is because streams_xattr_get_ea_value_fsp() can divide by zero, if
the "max xattrs per stream" is left at its default value.
Apply the upstream fix to avoid the crashes.
PR: 299446
Obtained from: https://gitlab.com/samba-team/samba/-/commit/21f8b339
MFH: 2026Q4
Approved by: samba (kiwi)
net/samba424: avoid SIGFPE in streams_xattr_get_ea_value_fsp
As reported in https://bugzilla.samba.org/show_bug.cgi?id=16278,
upstream commit 5fa43440ebd3 ("vfs: Implement larger streams in multiple
xattrs"), results in many signal 8 (SIGFPE) crashes in smbd child
processes on FreeBSD, if the streams_xattr vfs module is loaded.
This is because streams_xattr_get_ea_value_fsp() can divide by zero, if
the "max xattrs per stream" is left at its default value.
Apply the upstream fix to avoid the crashes.
PR: 299445
Obtained from: https://gitlab.com/samba-team/samba/-/commit/21f8b339
MFH: 2026Q4
Approved by: samba (kiwi)
www/pomerium-envoy-custom: Fix build on aarch64
gperftools has no way to read the program counter from a signal's
ucontext on FreeBSD/aarch64, so its CPU profiler, which Envoy builds
with --define tcmalloc=gperftools, failed to compile:
getpc-inl.h:393:22: error: no member named 'Get' in ...
On FreeBSD/aarch64 the kernel stores the interrupted PC in
uc_mcontext.mc_gpregs.gp_elr. Add an accessor for it to gperftools
and apply the patch through the gperftools http_archive in envoy's
bazel/repositories.bzl, the same way the msgpack patch is applied.
The hunk offsets of the other entries in that patch are refreshed
while here.
The gperftools change has been verified with getpc_test on an Ampere
eMAG running FreeBSD 15.1 and submitted upstream. The full port has
only been test-built on amd64 so far.
Upstream PR: https://github.com/gperftools/gperftools/pull/1647
graphics/scantpaper: Fix with Python 3.13
- The post-build target runs dev/compile_mo.py with a hardcoded
python3.12, which is not installed when another Python version is
the default, so the build fails. Use ${PYTHON_CMD}.
- The app window and document code import sqlite3 (packaged separately
as databases/py-sqlite3), and imageview/basethread import
typing_extensions, which upstream lists as a dependency. Without
them the scantpaper command and half of the modules fail to import.
Add both to RUN_DEPENDS and bump PORTREVISION.
lang/cim: Mark DEPRECATED
- Switch to DISTVERSION while I am here
- Upstream WWW and MASTER_SITES is no longer available
- Set EXPIRATION_DATE 2026-11-17
(cherry picked from commit 796dca98ee5dc2856dea5a61971572b663fd8696)
