HardenedBSD/src f4be8d1lib/libc/gen posix_spawnattr_getprocdescp_np.3 posix_spawn.c, lib/libsys/amd64 pdrfork_thread.S

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+321-22sys/kern/subr_witness.c
+101-0lib/libsys/i386/pdrfork_thread.S
+94-0lib/libc/gen/posix_spawnattr_getprocdescp_np.3
+83-0lib/libsys/amd64/pdrfork_thread.S
+49-34usr.sbin/bhyve/amd64/pci_lpc.c
+49-5lib/libc/gen/posix_spawn.c
+697-6123 files not shown
+818-13329 files

HardenedBSD/src 9e4dd19lib/libc/gen posix_spawnattr_getprocdescp_np.3 posix_spawn.c, lib/libsys/amd64 pdrfork_thread.S

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+321-22sys/kern/subr_witness.c
+101-0lib/libsys/i386/pdrfork_thread.S
+94-0lib/libc/gen/posix_spawnattr_getprocdescp_np.3
+83-0lib/libsys/amd64/pdrfork_thread.S
+49-34usr.sbin/bhyve/amd64/pci_lpc.c
+49-5lib/libc/gen/posix_spawn.c
+697-6123 files not shown
+818-13329 files

HardenedBSD/src d35385ashare/man/man4 capsicum.4, sys/amd64/include ifunc.h

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+11-2sys/compat/freebsd32/freebsd32.h
+5-5share/man/man4/capsicum.4
+8-2sys/kern/kern_ktrace.c
+9-1sys/sys/abi_compat.h
+5-0sys/i386/include/ifunc.h
+5-0sys/amd64/include/ifunc.h
+43-101 files not shown
+44-107 files

HardenedBSD/ports 2d937d6science/paraview pkg-plist, science/paraview/files patch-qt-6.10.1-fix

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+413-198science/paraview/pkg-plist
+0-351sysutils/nix/pkg-plist
+130-0textproc/libxml2-core/files/patch-xpath.c
+3-114textproc/libxml2/pkg-plist
+40-52textproc/libxml2/Makefile
+0-77science/paraview/files/patch-qt-6.10.1-fix
+586-792108 files not shown
+1,438-1,314114 files

HardenedBSD/src d47c1c2sbin/setkey setkey.c

sbin/setkey: add -Z option to disable receive timeouts

Sponsored by:   NVidia networking
MFC after:      1 week
DeltaFile
+15-9sbin/setkey/setkey.c
+15-91 files

HardenedBSD/src a68d541sys/compat/freebsd32 freebsd32_misc.c

freebsd32_rusage_out(): bzero the compat32 structure

(cherry picked from commit 6af3cf27ed0072f2dcb17380ab63228f9aa28708)
DeltaFile
+1-0sys/compat/freebsd32/freebsd32_misc.c
+1-01 files

HardenedBSD/src 96e697bsys/amd64/include ifunc.h, sys/i386/include ifunc.h

x86: add machine/ifunc.h

(cherry picked from commit 2b1db07bec92e9447e6574a74366d4dd606e80a6)
DeltaFile
+5-0sys/amd64/include/ifunc.h
+5-0sys/i386/include/ifunc.h
+10-02 files

HardenedBSD/src dc46f06sys/compat/freebsd32 freebsd32.h, sys/sys abi_compat.h

sys/abi_compat.h: fix UB for bintime32 handling

(cherry picked from commit be1b2da855cc38531733b5c97891cd4a40a993bc)
DeltaFile
+1-1sys/compat/freebsd32/freebsd32.h
+1-1sys/sys/abi_compat.h
+2-22 files

HardenedBSD/src 3b85009sys/kern kern_ktrace.c

ktrace: do not enqueue request if the process' ktrioparams are freed

(cherry picked from commit 6bb3f208617b58a54e2204eb31bae3f9a86117a7)
DeltaFile
+8-2sys/kern/kern_ktrace.c
+8-21 files

HardenedBSD/src a984c23sys/compat/freebsd32 freebsd32.h, sys/sys abi_compat.h

compat32: provide a type and a macro for (u)int64_t handling on non-x86 arches

(cherry picked from commit 96acaa960023c20e852e04e7cc5c6a5faca36c67)
DeltaFile
+10-1sys/compat/freebsd32/freebsd32.h
+8-0sys/sys/abi_compat.h
+18-12 files

HardenedBSD/ports fc7460ddevel/ruby-build distinfo Makefile

devel/ruby-build: Update to 20260121

Changes:        https://github.com/rbenv/ruby-build/releases/tag/v20260121
DeltaFile
+3-3devel/ruby-build/distinfo
+1-1devel/ruby-build/Makefile
+4-42 files

HardenedBSD/ports 433e539www/filebrowser-quantum Makefile

www/filebrowser-quantum: Mark BROKEN on i386

Cannot use int64(off) (value of type int64) as int32 value in
assignment.

Reported by:    pkg-fallout
DeltaFile
+2-0www/filebrowser-quantum/Makefile
+2-01 files

HardenedBSD/ports c37b2bewww/squid Makefile distinfo, www/squid/files patch-configure

www/squid: Update 7.3 => 7.4

Changelog:
https://github.com/squid-cache/squid/releases/tag/SQUID_7_4

- Rework GSSAPI option a bit to make them more reliable.
- Update files/patch-configure to follow upstream changes.
- Split post-install - create post-install-*-on.

PR:     292732
DeltaFile
+22-22www/squid/files/patch-configure
+20-17www/squid/Makefile
+3-3www/squid/distinfo
+45-423 files

HardenedBSD/src 69de2b4sys/dev/bnxt/bnxt_en if_bnxt.c

bnxt: don't set media status if link is down

When the link is down don't set flags other than IFM_AVALID & IFM_ETHER
This avoids `media: Ethernet autoselect (Unknown <full-duplex>)` on ifconfig

Reviewed by:    zlei, pouria
Approved by:    glebius (mentor)
MFC after:      1 week
Sponsored by:   Stormshield
Differential Revision: https://reviews.freebsd.org/D54573
DeltaFile
+3-4sys/dev/bnxt/bnxt_en/if_bnxt.c
+3-41 files

HardenedBSD/src d1a8f1asys/netpfil/ipfw ip_fw_dynamic.c

ipfw: don't use the upper half lock to walk dynamic states buckets

The lock is sleepable and we can't grab it in dyn_tick().  Use the
individual bucket locks instead.

Fixes:  e3caa360d5d0a73af0de1d293d5b8ff6e900ceb4
DeltaFile
+4-14sys/netpfil/ipfw/ip_fw_dynamic.c
+4-141 files

HardenedBSD/ports ec07986archivers Makefile, archivers/extract-xiso Makefile distinfo

archivers/extract-xiso: Create, modify, and extract XISOs

Extract-iso is a command line utility created by in to allow the
creation, modification, and extraction of XISOs. Currently being
maintained and modernized by the XboxDev organization.

WWW: https://github.com/XboxDev/extract-xiso/

Requested by:   codytherudeguy at tutamail.com
DeltaFile
+23-0archivers/extract-xiso/Makefile
+22-0archivers/extract-xiso/files/patch-extract-xiso.c
+3-0archivers/extract-xiso/distinfo
+3-0archivers/extract-xiso/pkg-descr
+1-0archivers/Makefile
+52-05 files

HardenedBSD/ports 990fea4editors/imhex Makefile, editors/imhex/files patch-main_updater_source_main.cpp patch-cmake_build__helpers.cmake

editors/imhex: fix build on armv7, enable on 32 bit architectures

Seems like int128_t is no longer required.

Approved by:    portmgr (build fix blanket)
MFH:            2026Q1
DeltaFile
+18-0editors/imhex/files/patch-main_updater_source_main.cpp
+4-4editors/imhex/files/patch-cmake_build__helpers.cmake
+0-3editors/imhex/Makefile
+22-73 files

HardenedBSD/ports e2a13bfsysutils/nix pkg-plist Makefile, sysutils/nix/files patch-nix-meson-build-support_libatomic_meson.build

sysutils/nix: fix build on armv7 and powerpc*

No libatomic on FreeBSD.
Also move manuals to PORTDOCS, the file names seem to be somewhat
architecture-dependent.

Approved by:    portmgr (build fix blanket)
MFH:            2026Q1
DeltaFile
+0-351sysutils/nix/pkg-plist
+12-0sysutils/nix/files/patch-nix-meson-build-support_libatomic_meson.build
+3-0sysutils/nix/Makefile
+15-3513 files

HardenedBSD/ports f3623c7sysutils Makefile, sysutils/watchcat Makefile distinfo

sysutils/watchcat: watchcat combines good things about watch and cat

Watchcat is a command-line tool that combines the functionalities of
the 'watch' and 'cat' commands. It allows users to monitor the output
of a command by executing it repeatedly at specified intervals or to
watch a file for changes and display its contents when modified.

Differential Revision:  https://reviews.freebsd.org/D54863
DeltaFile
+38-0sysutils/watchcat/Makefile
+9-0sysutils/watchcat/distinfo
+4-0sysutils/watchcat/pkg-descr
+1-0sysutils/Makefile
+52-04 files

HardenedBSD/ports 84a9f8btextproc/xxdiff distinfo Makefile.master

textproc/xxdiff: update to g20251107

Changelog: https://github.com/blais/xxdiff/commits/4013bd5968140dbd82c930edf8744a00b6e9255d
DeltaFile
+3-3textproc/xxdiff/distinfo
+2-2textproc/xxdiff/Makefile.master
+5-52 files

HardenedBSD/ports 8a6ffe8devel/fnc Makefile, devel/fnc/files patch-fnc.bld.mk

devel/fnc: unbundle sqlite3

PR:             290972
Approved by:    ashish (maintainer)
MFH:            2026Q1
DeltaFile
+31-1devel/fnc/files/patch-fnc.bld.mk
+5-1devel/fnc/Makefile
+36-22 files

HardenedBSD/ports 21a2864audio/qmidiarp Makefile

audio/qmidiarp: fix build on non-x86

The options -msse, -msse2, and -mfpmath=sse only apply to x86 targets.
They are the default on amd64, so only set them on i386.

Approved by:    portmgr (build fix blanket)
MFH:            2026Q1
DeltaFile
+9-1audio/qmidiarp/Makefile
+9-11 files

HardenedBSD/ports e437c6ex11-servers/xlibre-server/files patch-include_meson.build patch-fix-epoll

x11-servers/xlibre-server: fix build on armv7

This ensures USE_DEV_IO=1 is set on armv7.

See also:       b632464b29fc330113280495ef76d0f825058ae8
Approved by:    portmgr (build fix blanket)
MFH:            2026Q1
DeltaFile
+41-0x11-servers/xlibre-server/files/patch-include_meson.build
+0-32x11-servers/xlibre-server/files/patch-fix-epoll
+41-322 files

HardenedBSD/ports 51f037dscience/paraview pkg-plist Makefile, science/paraview/files patch-qt-6.10.1-fix patch-ffmpeg8-fix

science/paraview: upgrade to 6.0.1

Releases notes at https://www.kitware.com/paraview-6-0-0-release-notes/
and https://www.kitware.com/paraview-6-0-1-release-notes/

Also switch from MPICH to OpenMPI, to be consistent with VTK.
DeltaFile
+413-198science/paraview/pkg-plist
+0-77science/paraview/files/patch-qt-6.10.1-fix
+0-36science/paraview/files/patch-ffmpeg8-fix
+18-15science/paraview/Makefile
+33-0science/paraview/files/patch-Qt_Core_pqQVTKWidgetEventTranslator.cxx
+0-20science/paraview/files/patch-VTKExtensions_Core_vtkCLIOptions.cxx
+464-34619 files not shown
+536-47925 files

HardenedBSD/ports 5279493science/ttk Makefile, science/ttk/files patch-core_vtk_ttkWRLExporter_ttkWRLExporter.cpp

science/ttk: chase Paraview 6.0.1

Patch taken from upstream: see
https://github.com/topology-tool-kit/ttk/pull/1113
DeltaFile
+57-0science/ttk/files/patch-core_vtk_ttkWRLExporter_ttkWRLExporter.cpp
+1-1science/ttk/Makefile
+58-12 files

HardenedBSD/ports 37d1ebddevel/py-loguru Makefile

devel/py-loguru: drop maintainership
DeltaFile
+1-1devel/py-loguru/Makefile
+1-11 files

HardenedBSD/ports c4817bex11-fonts/fcft distinfo Makefile

x11-fonts/fcft: update to 3.3.3

Changes:        https://codeberg.org/dnkl/fcft/releases/tag/3.3.3
Reported by:    Repology
DeltaFile
+3-3x11-fonts/fcft/distinfo
+1-1x11-fonts/fcft/Makefile
+1-1x11-fonts/fcft/pkg-plist
+5-53 files

HardenedBSD/ports 1875371www/py-flask-restx distinfo Makefile

www/py-flask-restx: update to 1.3.2

Changes:        https://github.com/python-restx/flask-restx/releases/tag/1.3.2
Reported by:    GitHub (watch releases)
DeltaFile
+3-3www/py-flask-restx/distinfo
+2-3www/py-flask-restx/Makefile
+5-62 files

HardenedBSD/ports 26909f6textproc/meld Makefile

textproc/meld: fix LICENSE

License is GPLv2+.

PR:             260552
Reported by:    Olivier Duchateau <duchateau.olivier at gmail.com>
DeltaFile
+1-1textproc/meld/Makefile
+1-11 files

HardenedBSD/ports fab127baccessibility/accerciser pkg-plist Makefile

accessibility/accerciser: update to 3.48.0

Update accerciser to version 3.48.0.

Trim USE_GNOME=. (truckman)

PR:             290511
DeltaFile
+22-0accessibility/accerciser/pkg-plist
+9-9accessibility/accerciser/Makefile
+3-3accessibility/accerciser/distinfo
+34-123 files