HardenedBSD/ports 72fd4d6ports-mgmt/pkg distinfo

HBSD: Resolve merge conflict

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
DeltaFile
+0-6ports-mgmt/pkg/distinfo
+0-61 files

HardenedBSD/src bafff9arelease/tools ec2-builder.conf ec2-small.conf

HBSD: Resolve merge conflicts

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
DeltaFile
+0-5release/tools/ec2-builder.conf
+0-5release/tools/ec2-small.conf
+0-102 files

HardenedBSD/src 0c89907lib/libifconfig libifconfig_sfp.c sfp.lua, share/examples/sound mmap.c

Merge remote-tracking branch 'internal/freebsd/current/main' into hardened/current/master

Conflicts:
        release/tools/ec2-builder.conf (unresolved)
        release/tools/ec2-small.conf (unresolved)
DeltaFile
+450-0sys/net/cmis.h
+297-0share/examples/sound/mmap.c
+241-0tests/sys/cam/ctl/opcodes.sh
+227-1lib/libifconfig/libifconfig_sfp.c
+120-0lib/libifconfig/sfp.lua
+52-21sys/netinet/tcp_lro.c
+1,387-2240 files not shown
+1,783-14146 files

HardenedBSD/ports 31c976adatabases/qdrant distinfo Makefile.crates, devel/nextest distinfo

Merge remote-tracking branch 'internal/freebsd/main' into hardenedbsd/main

Conflicts:
        ports-mgmt/pkg/distinfo (unresolved)
DeltaFile
+861-795databases/qdrant/distinfo
+761-567security/agave/distinfo
+430-397databases/qdrant/Makefile.crates
+383-286security/agave/Makefile
+239-23misc/lean-ctx/distinfo
+99-101devel/nextest/distinfo
+2,773-2,16980 files not shown
+3,508-2,80586 files

HardenedBSD/src 6b00c65sys/netinet6 in6_pcb.c

inpcb: make in6_pcbdisconnect() just like in_pcbdisconnect()

Allow to be passed with already unconnected inpcb.

Fixes:  4fadf2466468dd6dcb6cf9e3739ed696a18c1bb4
DeltaFile
+3-0sys/netinet6/in6_pcb.c
+3-01 files

HardenedBSD/ports 7006b75ports-mgmt/pkg distinfo Makefile

HBSD: Bump ports-mgmt/pkg to 2.7.1

This also resolves the merge conflict in ports-mgmt/pkg/distinfo.

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
DeltaFile
+3-9ports-mgmt/pkg/distinfo
+2-2ports-mgmt/pkg/Makefile
+5-112 files

HardenedBSD/ports 6119517deskutils/taskwarrior-tui distinfo Makefile.crates, editors/zed distinfo

Merge remote-tracking branch 'origin/freebsd/main' into hardenedbsd/main

Conflicts:
        ports-mgmt/pkg/distinfo (unresolved)
DeltaFile
+801-487x11/rio/distinfo
+714-161misc/nanocoder/pkg-plist
+400-244x11/rio/Makefile
+247-255deskutils/taskwarrior-tui/distinfo
+137-135editors/zed/distinfo
+122-126deskutils/taskwarrior-tui/Makefile.crates
+2,421-1,408254 files not shown
+3,985-2,851260 files

HardenedBSD/src bf41d86sys/netinet ip_fastfwd.c, sys/netinet6 ip6_fastfwd.c

routing: Make ip[6]_tryforward() FIB-aware for local traffic

`ip_tryforward()` and `ip6_tryforward()` checks whether the destination
address is local or not without considering if it belongs to the current FIB.
If the destination is local but not in our FIB, forward it instead
of returning it to ip_input().

PR:             292319
Reviewed by:    zlei
MFC after:      1 week
MFC to:         stable/15
Differential Revision: https://reviews.freebsd.org/D56353
DeltaFile
+2-2sys/netinet/ip_fastfwd.c
+1-1sys/netinet6/ip6_fastfwd.c
+3-32 files

HardenedBSD/ports 0aac0admultimedia/ffmpeg/files patch-configure

HBSD: Restore accidentally deleted file

I accidentally deleted the patch to the configure script for
multimedia/ffmpeg. This patch is maintained by our upstream, FreeBSD.

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
DeltaFile
+11-0multimedia/ffmpeg/files/patch-configure
+11-01 files

HardenedBSD/ports e1e9fcex11-servers/xwayland distinfo Makefile

x11-servers/xwayland: security update to 24.1.10

PR:             294518
Security:       CVE-2026-33999, CVE-2026-34000, CVE-2026-34001,
                CVE-2026-34002, CVE-2026-34003

Sponsored by:   tipi.work
DeltaFile
+3-3x11-servers/xwayland/distinfo
+1-1x11-servers/xwayland/Makefile
+4-42 files

HardenedBSD/ports 3322a28x11-servers/xorg-server distinfo Makefile

x11-servers/xorg-server: security update: 21.1.20 -> 21.1.22

PR:             294519
Security:       CVE-2026-33999, CVE-2026-34000, CVE-2026-34001,
                CVE-2026-34002, CVE-2026-34003

Sponsored by:   tipi.work
DeltaFile
+3-3x11-servers/xorg-server/distinfo
+1-1x11-servers/xorg-server/Makefile
+4-42 files

HardenedBSD/ports db6e74cdevel/got distinfo Makefile

devel/got: update to 0.124

User-visible changes:
- fix a segfault in tog while using the & search feature
- expand tabs in log messages displayed by tog diff to prevent misalignment
DeltaFile
+3-3devel/got/distinfo
+1-1devel/got/Makefile
+4-42 files

HardenedBSD/ports 060c5f0multimedia/ffmpeg/files patch-libavcodec_ffv1enc__vulkan.c patch-configure

HBSD: Fix build of multimedia/ffmpeg

ffmpeg was recently updated, causing issues with our patches for
_FORTIFY_SOURCE=2 support. Fix the build by rebasing the patches for the
updated version.

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
DeltaFile
+2-11multimedia/ffmpeg/files/patch-libavcodec_ffv1enc__vulkan.c
+0-11multimedia/ffmpeg/files/patch-configure
+2-5multimedia/ffmpeg/files/patch-libavcodec_vulkan__ffv1.c
+4-273 files

HardenedBSD/ports cb4045asecurity/nss distinfo Makefile

security/nss: update to 3.122.1

Announcement:
  https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/q302OZzf8cI
DeltaFile
+3-3security/nss/distinfo
+1-1security/nss/Makefile
+4-42 files

HardenedBSD/ports 1133c5csecurity/agave distinfo Makefile, security/agave/files patch-rust-1.87.0 patch-gossip_src_protocol.rs

security/agave: update 2.2.14 → 3.1.13
DeltaFile
+761-567security/agave/distinfo
+383-286security/agave/Makefile
+0-42security/agave/files/patch-rust-1.87.0
+29-0security/agave/files/patch-gossip_src_protocol.rs
+20-0security/agave/files/patch-core_src_system__monitor__service.rs
+20-0security/agave/files/patch-gossip_src_ping__pong.rs
+1,213-8955 files not shown
+1,258-90711 files

HardenedBSD/ports 41bcc68net-mgmt/prometheus3 distinfo Makefile

net-mgmt/prometheus3: Update to 3.11.2

Changelog:
https://github.com/prometheus/prometheus/releases/tag/v3.11.2
DeltaFile
+7-7net-mgmt/prometheus3/distinfo
+1-2net-mgmt/prometheus3/Makefile
+8-92 files

HardenedBSD/ports d50e153Mk/Uses gnome.mk, deskutils/gnotime Makefile

gnome: retire INSTALLS_OMF

INSTALLS_OMF triggered execution of scrollkeeper-install and -unsinstall
which are script only doing exit 0 so useless.
DeltaFile
+0-15Mk/Uses/gnome.mk
+1-2deskutils/gnotime/Makefile
+1-172 files

HardenedBSD/ports efd4077www/web2ldap Makefile, www/web2ldap/files patch-setup.py

www/web2ldap: Fix build with setuptools 81.0.0

This patch make web2ldap build against both setuptools 63.1.0 (currently
in ports) and 81.0.0.

PR:     294472
DeltaFile
+17-0www/web2ldap/files/patch-setup.py
+1-1www/web2ldap/Makefile
+18-12 files

HardenedBSD/ports 423620acad/yosys pkg-plist distinfo

cad/yosys: Update 0.63 => 0.64

Summary: * Strip all the executables, not only the main one

Approved by:            yuri@ (maintainer, Mentor)
Approved by:            db@, yuri@ (Mentors, implicit)
Differential Revision:  https://reviews.freebsd.org/D56397
DeltaFile
+15-0cad/yosys/pkg-plist
+3-3cad/yosys/distinfo
+2-2cad/yosys/Makefile
+20-53 files

HardenedBSD/ports 6f1ada6devel/terraform-ls distinfo Makefile

devel/terraform-ls: Update to 0.38.6

ChangeLog:
https://github.com/hashicorp/terraform-ls/releases/tag/v0.38.6
DeltaFile
+5-5devel/terraform-ls/distinfo
+1-2devel/terraform-ls/Makefile
+6-72 files

HardenedBSD/ports 8ba6a2csecurity/osv-scanner distinfo Makefile

security/osv-scanner: Update to 2.3.5

ChangeLog:
https://github.com/google/osv-scanner/releases/tag/v2.3.5
DeltaFile
+5-5security/osv-scanner/distinfo
+3-4security/osv-scanner/Makefile
+8-92 files

HardenedBSD/ports 38aafd6print/plutobook distinfo Makefile

print/plutobook: Update to 0.17.0

Changelog: https://github.com/plutoprint/plutobook/releases/tag/v0.17.0
DeltaFile
+3-3print/plutobook/distinfo
+1-1print/plutobook/Makefile
+4-42 files

HardenedBSD/ports af82ab5devel/freebsd-sysroot Makefile

devel/freebsd-sysroot: force rebuild with pkg 2.7.1

pkg 2.7.1 will make sure at installation this port is not expecting
any shlib to be required to the exception of the private libraries
which are not part of this sysroot, but some of the libraries in this
sysroot are linked to those libprivate so they are listed in the
required field, add NO_SHLIB_REQUIRES_GLOB=libprivate* to get rid of
those.

PR:     293874
DeltaFile
+3-0devel/freebsd-sysroot/Makefile
+3-01 files

HardenedBSD/ports 7aba3b5ports-mgmt/pkg distinfo Makefile

ports-mgmt/pkg: update to 2.7.1

Major Changes:
- install: respect -q
- vital: now explicitly state the SAT solver issue are due to a vital package
- lua: add pkg.exec_capture, a pkg.exec version capturing stdout/stderr
- Honor --repository flag for disabled repos as documented
Other Changes:
- version: add IGNORE_MAJOR to pkg.conf and document it
- pkg_config: accept int as boolean converted via != 0
- lock: do not error in expected (un)lock state
- backup_libraries: now fully respects rootdir
- backup libraries: atomic replacement of the library
- DB: loudly complain if the DB cannot be opened
- shlibs: also remove ignored shlibs provided from shlibs required
DeltaFile
+3-3ports-mgmt/pkg/distinfo
+1-1ports-mgmt/pkg/Makefile
+4-42 files

HardenedBSD/ports b8b2ade. MOVED, devel Makefile

devel/prjpeppercorn111: Remove port

This ports gets removed immediately without a grace period as it is only
useful in combination with the devel/nextpnr* ports which no longer support
this particular version of prjpeppercorn.

Reviewed by:    rene
DeltaFile
+0-32devel/prjpeppercorn111/Makefile
+0-15devel/prjpeppercorn111/pkg-plist
+0-5devel/prjpeppercorn111/distinfo
+0-4devel/prjpeppercorn111/pkg-descr
+0-1devel/Makefile
+1-0MOVED
+1-576 files

HardenedBSD/src 956acdcsys/net if_loop.c

loopback: Account for packet drops

Make loopback packet drops more obvious by reporting them
in interface stats visable via netstat -ni
Since loopback uses netisr, packets can be dropped if the
netisr queue overflows.  These drops are visible via
netisr -Q, but its not an obvious place to look.

Differential Revision: https://reviews.freebsd.org/D56356
Reviewed by: glebius, tuexen
Sponsored by: Netflix
DeltaFile
+7-3sys/net/if_loop.c
+7-31 files

HardenedBSD/ports b6babbctextproc/pdf-form-filler-mcp Makefile distinfo

textproc/pdf-form-filler-mcp: update 0.1.0 → 0.1.1
DeltaFile
+3-7textproc/pdf-form-filler-mcp/Makefile
+3-3textproc/pdf-form-filler-mcp/distinfo
+6-102 files

HardenedBSD/ports 9ccdefddeskutils/skim distinfo Makefile

deskutils/skim: update 4.5.1 → 4.6.0
DeltaFile
+49-47deskutils/skim/distinfo
+24-23deskutils/skim/Makefile
+73-702 files

HardenedBSD/ports e2ddaa9devel/cargo-deny distinfo Makefile

devel/cargo-deny: update 0.19.1 → 0.19.2
DeltaFile
+3-3devel/cargo-deny/distinfo
+1-1devel/cargo-deny/Makefile
+4-42 files

HardenedBSD/ports 57550acshells/atuin distinfo Makefile

shells/atuin: update 18.13.6 → 18.14.1
DeltaFile
+39-23shells/atuin/distinfo
+19-11shells/atuin/Makefile
+58-342 files