HardenedBSD/src 93cf26esbin/conscontrol conscontrol.8, sys/net if_gre.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+407-66sys/net/if_gre.c
+173-0tests/sys/netlink/test_rtnl_gre.c
+23-0sys/netlink/route/interface.h
+3-1sys/netpfil/pf/pf.c
+1-1sbin/conscontrol/conscontrol.8
+1-1usr.bin/man/manpath.1
+608-697 files not shown
+616-7313 files

HardenedBSD/ports 14d95d2devel/small pkg-plist, textproc/krep Makefile

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+127-8www/matomo/pkg-plist
+41-0devel/small/pkg-plist
+34-0textproc/krep/files/patch-Makefile
+26-0textproc/krep/Makefile
+15-9x11/xwayland-satellite/distinfo
+10-10www/matomo/Makefile
+253-2741 files not shown
+425-11147 files

HardenedBSD/ports 39e0536dns/unbound/files patch-libunbound_python_libunbound.i

HBSD: Bring in candidate patch to fix dns/unbound

This patch fixes the build of dns/unbound. We enable python support for
unbound by default, which is why we're hitting this.

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
Obtained-from:  https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292625
DeltaFile
+11-0dns/unbound/files/patch-libunbound_python_libunbound.i
+11-01 files

HardenedBSD/ports 3a7c49cgraphics/mesa-devel distinfo Makefile

graphics/mesa-devel: update to 26.0.b.1382

Changes:        https://gitlab.freedesktop.org/mesa/mesa/-/compare/b651fd90d2d...7899854e626
DeltaFile
+3-3graphics/mesa-devel/distinfo
+2-2graphics/mesa-devel/Makefile
+5-52 files

HardenedBSD/ports 2ded9abemulators/rpcs3 distinfo Makefile

emulators/rpcs3: update to 0.0.39.18797

Changes:        https://github.com/RPCS3/rpcs3/compare/7cfe96a1d1...2064bd87e3
DeltaFile
+7-7emulators/rpcs3/distinfo
+4-4emulators/rpcs3/Makefile
+11-112 files

HardenedBSD/ports 19543d2games/veloren-weekly distinfo Makefile

games/veloren-weekly: update to s20260218

Changes:        https://gitlab.com/veloren/veloren/-/compare/d82a4a6cf1...bba0ea5ca8
DeltaFile
+3-3games/veloren-weekly/distinfo
+2-2games/veloren-weekly/Makefile
+5-52 files

HardenedBSD/ports 06d0f75x11/xwayland-satellite distinfo Makefile.crates

x11/xwayland-satellite: update to 0.8.1

Changes:        https://github.com/Supreeeme/xwayland-satellite/releases/tag/v0.8.1
Reported by:    GitHub (watch releases)
DeltaFile
+15-9x11/xwayland-satellite/distinfo
+6-3x11/xwayland-satellite/Makefile.crates
+1-2x11/xwayland-satellite/Makefile
+22-143 files

HardenedBSD/ports a945207www/R-cran-httr distinfo Makefile

www/R-cran-httr: Update to 1.4.8

Reported by:    portscout
DeltaFile
+3-3www/R-cran-httr/distinfo
+2-2www/R-cran-httr/Makefile
+5-52 files

HardenedBSD/ports a650f75security/stunnel distinfo Makefile

security/stunnel: Update to 5.77
DeltaFile
+3-3security/stunnel/distinfo
+1-1security/stunnel/Makefile
+4-42 files

HardenedBSD/ports 3aabef0graphics/materialx Makefile, graphics/materialx/files patch-source_MaterialXGraphEditor_RenderView.cpp

graphics/materialx: Enable OpenColorIO support

PR:     293262
DeltaFile
+12-0graphics/materialx/files/patch-source_MaterialXGraphEditor_RenderView.cpp
+3-1graphics/materialx/Makefile
+15-12 files

HardenedBSD/ports 3a5b871www/matomo pkg-plist Makefile

www/matomo: Update 5.6.2 => 5.7.1

Changelogs:
https://matomo.org/changelog/matomo-5-7-0/
https://matomo.org/changelog/matomo-5-7-1/

While here pet portfmt and portclippy.

PR:     293237
DeltaFile
+127-8www/matomo/pkg-plist
+10-10www/matomo/Makefile
+3-3www/matomo/distinfo
+140-213 files

HardenedBSD/ports 46e699ddevel/nextpnr-devel Makefile

devel/nextpnr-devel: Bump after devel/trellis update
DeltaFile
+1-0devel/nextpnr-devel/Makefile
+1-01 files

HardenedBSD/ports 0fed33edevel/nextpnr Makefile

nextpnr/devel: Bump after devel/trellis update
DeltaFile
+1-1devel/nextpnr/Makefile
+1-11 files

HardenedBSD/ports 786c45bdevel/trellis Makefile distinfo, devel/trellis/files patch-libtrellis_CMakeLists.txt

devel/trellis: Update to 20251027

Changes:
https://github.com/YosysHQ/prjtrellis/compare/14ac883fa639b11fdc98f3cdef87a5d01f79e73d...73bd411731808d80ead650bbc9840d9e02911e9e
DeltaFile
+5-8devel/trellis/Makefile
+0-11devel/trellis/files/patch-libtrellis_CMakeLists.txt
+5-5devel/trellis/distinfo
+10-243 files

HardenedBSD/ports 6156198net/nfstrace Makefile, net/nfstrace/files extra-patch-src_protocols_nfs_nfs__procedure.h

net/nfstrace: Fix build on 16.0-CURRENT
DeltaFile
+12-0net/nfstrace/files/extra-patch-src_protocols_nfs_nfs__procedure.h
+7-1net/nfstrace/Makefile
+19-12 files

HardenedBSD/ports 9f07357x11-fonts/cozette Makefile distinfo

x11-fonts/cozette: Update 1.24.1 => 1.30.0

Changelog:
https://github.com/the-moonwitch/Cozette/blob/v.1.30.0/CHANGELOG.md

Update link to upstream: "slavfox/Cozette" redirects to "the-moonwitch/Cozette".

PR:     293263
DeltaFile
+3-3x11-fonts/cozette/Makefile
+3-3x11-fonts/cozette/distinfo
+6-62 files

HardenedBSD/ports fb28dbfsysutils/cbsd distinfo Makefile

sysutils/cbsd: update to 15.0.3 bugfix release

ChangelogL:     https://github.com/cbsd/cbsd/releases/tag/v15.0.3
DeltaFile
+3-3sysutils/cbsd/distinfo
+1-1sysutils/cbsd/Makefile
+4-42 files

HardenedBSD/ports 289aad3x11-fonts/spleen distinfo Makefile

x11-fonts/spleen: Update 2.1.0 => 2.2.0

Changelog:
https://github.com/fcambus/spleen/blob/2.2.0/ChangeLog

PR:     293264
DeltaFile
+3-3x11-fonts/spleen/distinfo
+1-1x11-fonts/spleen/Makefile
+4-42 files

HardenedBSD/src d60082fsys/netpfil/pf pf.c

pf: avoid NULL deref on purged states

States can be invalidated and still be present in the state table for a
while (until the pf_purge thread cleans them up). These states might not
have keys set, so we must make sure a state is not purged before we try
to access those keys.

MFC after:      1 week
Sponsored by:   Rubicon Communications, LLC ("Netgate")
DeltaFile
+3-1sys/netpfil/pf/pf.c
+3-11 files

HardenedBSD/ports 74352eamath Makefile, math/wide-integer Makefile pkg-descr

math/wide-integer: New port: Generic C++ template for extended width unsigned/signed integral types

Wide-integer implements a generic C++ template for extended width
unsigned and signed integral types.
This C++ template header-only library implements drop-in big integer
types such as uint128_t, uint256_t, uint384_t, uint512_t, uint1024_t,
uint1536_t, etc.
These can be used essentially like regular built-in integers.
Corresponding signed integer types such as int128_t, int256_t, and the
like can also be used.

Reuired for net-p2p/transmission 4.1.0.

PR:             292846
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>
DeltaFile
+19-0math/wide-integer/Makefile
+6-0math/wide-integer/pkg-descr
+3-0math/wide-integer/distinfo
+1-0math/Makefile
+29-04 files

HardenedBSD/ports 5af542bdevel Makefile, devel/small pkg-plist Makefile

devel/small: New port: C++ small containers

C++ standard template library optimized small containers.
Reuired by net-p2p/transmission 4.1.0.

PR:             292846
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>
DeltaFile
+41-0devel/small/pkg-plist
+16-0devel/small/Makefile
+3-0devel/small/distinfo
+1-0devel/small/pkg-descr
+1-0devel/Makefile
+62-05 files

HardenedBSD/ports 1e3c0b3sysutils/rundeck distinfo Makefile

sysutils/rundeck: Update 5.18.0 => 5.19.0

Release Notes:
https://docs.rundeck.com/docs/history/5_x/version-5.19.0.html

PR:             293222
Security:       CVE-2025-69223
Security:       CVE-2025-69227
Security:       CVE-2025-69228
Security:       CVE-2025-4673
Security:       CVE-2025-22872
Security:       CVE-2025-47906
MFH:            2026Q1
DeltaFile
+3-3sysutils/rundeck/distinfo
+2-2sysutils/rundeck/Makefile
+5-52 files

HardenedBSD/ports ddd386ctextproc Makefile, textproc/krep Makefile pkg-descr

textproc/krep: [NEW PORT] High-performance string search utility

krep is an optimized string search utility designed for maximum throughput and
efficiency when processing large files and directories. It is built with
performance in mind, offering multiple search algorithms and SIMD acceleration
when available.

Note: Krep is not intended to be a full replacement or direct competitor to
feature-rich tools like grep or ripgrep. Instead, it aims to be a minimal,
efficient, and pragmatic tool focused on speed and simplicity.

Krep provides the essential features needed for fast searching, without the
extensive options and complexity of more comprehensive search utilities. Its
design philosophy is to deliver the fastest possible search for the most common
use cases, with a clean and minimal interface.

WWW: https://github.com/davidesantangelo/krep/

Approved by:            db@, yuri@ (Mentors, implicit)
Differential Revision:  https://reviews.freebsd.org/D55357
DeltaFile
+34-0textproc/krep/files/patch-Makefile
+26-0textproc/krep/Makefile
+13-0textproc/krep/pkg-descr
+3-0textproc/krep/distinfo
+1-0textproc/Makefile
+77-05 files

HardenedBSD/src e1e18ccsys/net if_gre.c if_gre.h, sys/netlink/route interface.h

if_gre: Add netlink support with tests

Migrate to new if_clone KPI and implement netlink support
for gre(4). Also refactor some of the gre specific ioctls.

Reviewed by: glebius, zlei
Differential Revision: https://reviews.freebsd.org/D54443
DeltaFile
+407-66sys/net/if_gre.c
+173-0tests/sys/netlink/test_rtnl_gre.c
+23-0sys/netlink/route/interface.h
+1-0sys/net/if_gre.h
+1-0tests/sys/netlink/Makefile
+605-665 files

HardenedBSD/src 07d29f9sbin/conscontrol conscontrol.8, share/man/man4 ahd.4 smb.4

Correct Identifer typo in SPDX tags
DeltaFile
+1-1sbin/conscontrol/conscontrol.8
+1-1share/man/man4/ahd.4
+1-1share/man/man4/smb.4
+1-1usr.bin/man/manpath.1
+1-1usr.sbin/devinfo/devinfo.8
+1-1usr.sbin/kbdcontrol/kbdcontrol.1
+6-66 files

HardenedBSD/src 7e31358usr.bin/beep beep.c

beep: Add SPDX-License-Identifier tag

Reviewed by: emaste
Sponsored by: The FreeBSD Foundation
DeltaFile
+2-0usr.bin/beep/beep.c
+2-01 files

HardenedBSD/src 859f513bin/sh sh.1, share/man/man7 mitigations.7

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+17-4share/man/man7/mitigations.7
+21-0sys/arm64/include/elf.h
+18-0sys/dev/pci/pci_pci.c
+14-3bin/sh/sh.1
+13-1sys/kern/subr_intr.c
+7-6usr.bin/diff/diffreg_new.c
+90-1478 files not shown
+250-3584 files

HardenedBSD/src df58bc8lib/libfetch common.c, lib/libnv/tests nvlist_send_recv_test.c

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+68-1sys/compat/linux/linux_ioctl.c
+3-8lib/libfetch/common.c
+10-0sys/compat/linux/linux_ioctl.h
+1-1sys/contrib/openzfs/include/os/freebsd/spl/sys/time.h
+0-2lib/libnv/tests/nvlist_send_recv_test.c
+82-125 files

HardenedBSD/ports d9b0527cad/qelectrotech pkg-plist, net-mgmt/geom-exporter distinfo

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+1,073-702cad/qelectrotech/pkg-plist
+60-66x11-wm/fvwm3/pkg-plist
+51-59sysutils/gstat-rs/distinfo
+36-41x11-wm/fvwm3/Makefile
+24-28sysutils/gstat-rs/Makefile.crates
+17-31net-mgmt/geom-exporter/distinfo
+1,261-92744 files not shown
+1,484-1,07950 files

HardenedBSD/src 1e36ee7share/man/man7 mitigations.7

mitigations.7: spell
DeltaFile
+2-2share/man/man7/mitigations.7
+2-21 files