HardenedBSD/src 20f8a79lib/libifconfig libifconfig_sfp.c sfp.lua, share/examples/sound mmap.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+450-0sys/net/cmis.h
+297-0share/examples/sound/mmap.c
+240-47sys/dev/asmc/asmc.c
+241-0tests/sys/cam/ctl/opcodes.sh
+227-1lib/libifconfig/libifconfig_sfp.c
+120-0lib/libifconfig/sfp.lua
+1,575-4843 files not shown
+2,063-19049 files

HardenedBSD/src 6a86eeashare/man/man4 asmc.4, sys/dev/asmc asmc.c asmcvar.h

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+240-47sys/dev/asmc/asmc.c
+29-0share/man/man4/asmc.4
+19-0sys/dev/asmc/asmcvar.h
+288-473 files

HardenedBSD/src 92a1aaclib/msun/aarch64 fenv.c fenv.h, lib/msun/arm Makefile.inc

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+18-0lib/msun/aarch64/fenv.c
+9-5lib/msun/aarch64/fenv.h
+10-0lib/msun/aarch64/Symbol.map
+0-1lib/msun/arm/Makefile.inc
+0-1lib/msun/i387/Makefile.inc
+0-1lib/msun/powerpc/Makefile.inc
+37-83 files not shown
+38-109 files

HardenedBSD/ports 4955ea7Mk/Uses python.mk, security/netbird distinfo Makefile

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+24-0sysutils/unixexec/Makefile
+5-5security/netbird/distinfo
+4-0sysutils/unixexec/pkg-descr
+4-0Mk/Uses/python.mk
+1-2security/netbird/Makefile
+3-0sysutils/unixexec/distinfo
+41-71 files not shown
+42-77 files

HardenedBSD/src 3e27114share/man/man4 asmc.4, sys/dev/asmc asmc.c asmcvar.h

asmc: add raw SMC key read/write interface

This patch adds a debugging interface to read and write arbitrary
Apple SMC keys by name through sysctl, enabling hardware exploration
 and control of undocumented features.

The interface provides four sysctls under dev.asmc.0.raw.*:
  - key - Set the 4-character SMC key name (e.g., "AUPO")
  - value - Read/write key value as a hex string
  - len - Auto-detected key value length (can be overridden)
  - type - Read-only 4-character type string (e.g., "ui8", "flt")

Implementation includes a new asmc_key_getinfo() function using SMC
command 0x13 to query key metadata. The interface automatically
detects key lengths and types, uses hex string encoding for
arbitrary binary values, and is safe for concurrent access via
CTLFLAG_NEEDGIANT.

This interface was essential for discovering that the AUPO key

    [5 lines not shown]
DeltaFile
+240-47sys/dev/asmc/asmc.c
+29-0share/man/man4/asmc.4
+19-0sys/dev/asmc/asmcvar.h
+288-473 files

HardenedBSD/ports 81dc803Mk/Uses python.mk

python.mk: deprecate USE_PYTHON=distutils

setup.py as a command line tool is deprecated. Still a valid
configuration file for setuptools in USE_PYTHON=pep517 mode.

More information: https://packaging.python.org/en/latest/discussions/setup-py-deprecated/
DeltaFile
+4-0Mk/Uses/python.mk
+4-01 files

HardenedBSD/ports 716e7absysutils Makefile, sysutils/unixexec Makefile pkg-descr

sysutils/unixexec: New port: Attach stdin/stdout of a command to a Unix socket

unixexec attaches the stdin/stdout of a command to a Unix socket:

* immediately exec(3)'s the command: the data is not proxied via another process
* does not multiplex access to a socket

WWW: https://github.com/DtxdF/unixexec/
DeltaFile
+24-0sysutils/unixexec/Makefile
+4-0sysutils/unixexec/pkg-descr
+3-0sysutils/unixexec/distinfo
+1-0sysutils/Makefile
+32-04 files

HardenedBSD/ports fa4f157ports-mgmt/poudriere-hbsd distinfo Makefile

HBSD: Bump ports-mgmt/poudriere-hbsd to 3.4.7

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
DeltaFile
+3-3ports-mgmt/poudriere-hbsd/distinfo
+2-3ports-mgmt/poudriere-hbsd/Makefile
+5-62 files

HardenedBSD/ports 84a0bb7security/netbird distinfo Makefile

security/netbird: Update 0.66.3 => 0.68.3

Changelogs:
https://github.com/netbirdio/netbird/releases/tag/v0.66.4
https://github.com/netbirdio/netbird/releases/tag/v0.67.0
https://github.com/netbirdio/netbird/releases/tag/v0.67.1
https://github.com/netbirdio/netbird/releases/tag/v0.67.2
https://github.com/netbirdio/netbird/releases/tag/v0.67.3
https://github.com/netbirdio/netbird/releases/tag/v0.67.4
https://github.com/netbirdio/netbird/releases/tag/v0.68.0
https://github.com/netbirdio/netbird/releases/tag/v0.68.1
https://github.com/netbirdio/netbird/releases/tag/v0.68.2
https://github.com/netbirdio/netbird/releases/tag/v0.68.3

Commit log:
https://github.com/netbirdio/netbird/compare/v0.66.3...v0.68.3

PR:             294523
Sponsored by:   UNIS Labs
DeltaFile
+5-5security/netbird/distinfo
+1-2security/netbird/Makefile
+6-72 files

HardenedBSD/ports 72fd4d6ports-mgmt/pkg distinfo

HBSD: Resolve merge conflict

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
DeltaFile
+0-6ports-mgmt/pkg/distinfo
+0-61 files

HardenedBSD/src bafff9arelease/tools ec2-builder.conf ec2-small.conf

HBSD: Resolve merge conflicts

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
DeltaFile
+0-5release/tools/ec2-builder.conf
+0-5release/tools/ec2-small.conf
+0-102 files

HardenedBSD/src 0c89907lib/libifconfig libifconfig_sfp.c sfp.lua, share/examples/sound mmap.c

Merge remote-tracking branch 'internal/freebsd/current/main' into hardened/current/master

Conflicts:
        release/tools/ec2-builder.conf (unresolved)
        release/tools/ec2-small.conf (unresolved)
DeltaFile
+450-0sys/net/cmis.h
+297-0share/examples/sound/mmap.c
+241-0tests/sys/cam/ctl/opcodes.sh
+227-1lib/libifconfig/libifconfig_sfp.c
+120-0lib/libifconfig/sfp.lua
+52-21sys/netinet/tcp_lro.c
+1,387-2240 files not shown
+1,783-14146 files

HardenedBSD/ports 31c976adatabases/qdrant distinfo Makefile.crates, devel/nextest distinfo

Merge remote-tracking branch 'internal/freebsd/main' into hardenedbsd/main

Conflicts:
        ports-mgmt/pkg/distinfo (unresolved)
DeltaFile
+861-795databases/qdrant/distinfo
+761-567security/agave/distinfo
+430-397databases/qdrant/Makefile.crates
+383-286security/agave/Makefile
+239-23misc/lean-ctx/distinfo
+99-101devel/nextest/distinfo
+2,773-2,16980 files not shown
+3,508-2,80586 files

HardenedBSD/src 68c6a73lib/msun/aarch64 fenv.c fenv.h

lib/msun/aarch64: provide export file for arch-specific fenv methods

(cherry picked from commit 96a685c229f2ce440591f98d33d36776e56dd55c)
DeltaFile
+18-0lib/msun/aarch64/fenv.c
+9-5lib/msun/aarch64/fenv.h
+10-0lib/msun/aarch64/Symbol.map
+37-53 files

HardenedBSD/src 1e7e033lib/msun Makefile, lib/msun/amd64 Makefile.inc

lib/msun: centralize addition of the arch-specific symbol map files

(cherry picked from commit c913dce86e7b6ff9c0c3265631529586aaf8520a)
DeltaFile
+0-1lib/msun/amd64/Makefile.inc
+0-1lib/msun/arm/Makefile.inc
+0-1lib/msun/powerpc/Makefile.inc
+0-1lib/msun/riscv/Makefile.inc
+0-1lib/msun/i387/Makefile.inc
+1-0lib/msun/Makefile
+1-56 files

HardenedBSD/src 6b00c65sys/netinet6 in6_pcb.c

inpcb: make in6_pcbdisconnect() just like in_pcbdisconnect()

Allow to be passed with already unconnected inpcb.

Fixes:  4fadf2466468dd6dcb6cf9e3739ed696a18c1bb4
DeltaFile
+3-0sys/netinet6/in6_pcb.c
+3-01 files

HardenedBSD/ports 7006b75ports-mgmt/pkg distinfo Makefile

HBSD: Bump ports-mgmt/pkg to 2.7.1

This also resolves the merge conflict in ports-mgmt/pkg/distinfo.

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
DeltaFile
+3-9ports-mgmt/pkg/distinfo
+2-2ports-mgmt/pkg/Makefile
+5-112 files

HardenedBSD/ports 6119517deskutils/taskwarrior-tui distinfo Makefile.crates, editors/zed distinfo

Merge remote-tracking branch 'origin/freebsd/main' into hardenedbsd/main

Conflicts:
        ports-mgmt/pkg/distinfo (unresolved)
DeltaFile
+801-487x11/rio/distinfo
+714-161misc/nanocoder/pkg-plist
+400-244x11/rio/Makefile
+247-255deskutils/taskwarrior-tui/distinfo
+137-135editors/zed/distinfo
+122-126deskutils/taskwarrior-tui/Makefile.crates
+2,421-1,408254 files not shown
+3,985-2,851260 files

HardenedBSD/src bf41d86sys/netinet ip_fastfwd.c, sys/netinet6 ip6_fastfwd.c

routing: Make ip[6]_tryforward() FIB-aware for local traffic

`ip_tryforward()` and `ip6_tryforward()` checks whether the destination
address is local or not without considering if it belongs to the current FIB.
If the destination is local but not in our FIB, forward it instead
of returning it to ip_input().

PR:             292319
Reviewed by:    zlei
MFC after:      1 week
MFC to:         stable/15
Differential Revision: https://reviews.freebsd.org/D56353
DeltaFile
+2-2sys/netinet/ip_fastfwd.c
+1-1sys/netinet6/ip6_fastfwd.c
+3-32 files

HardenedBSD/ports 0aac0admultimedia/ffmpeg/files patch-configure

HBSD: Restore accidentally deleted file

I accidentally deleted the patch to the configure script for
multimedia/ffmpeg. This patch is maintained by our upstream, FreeBSD.

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
DeltaFile
+11-0multimedia/ffmpeg/files/patch-configure
+11-01 files

HardenedBSD/ports e1e9fcex11-servers/xwayland distinfo Makefile

x11-servers/xwayland: security update to 24.1.10

PR:             294518
Security:       CVE-2026-33999, CVE-2026-34000, CVE-2026-34001,
                CVE-2026-34002, CVE-2026-34003

Sponsored by:   tipi.work
DeltaFile
+3-3x11-servers/xwayland/distinfo
+1-1x11-servers/xwayland/Makefile
+4-42 files

HardenedBSD/ports 3322a28x11-servers/xorg-server distinfo Makefile

x11-servers/xorg-server: security update: 21.1.20 -> 21.1.22

PR:             294519
Security:       CVE-2026-33999, CVE-2026-34000, CVE-2026-34001,
                CVE-2026-34002, CVE-2026-34003

Sponsored by:   tipi.work
DeltaFile
+3-3x11-servers/xorg-server/distinfo
+1-1x11-servers/xorg-server/Makefile
+4-42 files

HardenedBSD/ports db6e74cdevel/got distinfo Makefile

devel/got: update to 0.124

User-visible changes:
- fix a segfault in tog while using the & search feature
- expand tabs in log messages displayed by tog diff to prevent misalignment
DeltaFile
+3-3devel/got/distinfo
+1-1devel/got/Makefile
+4-42 files

HardenedBSD/ports 060c5f0multimedia/ffmpeg/files patch-libavcodec_ffv1enc__vulkan.c patch-configure

HBSD: Fix build of multimedia/ffmpeg

ffmpeg was recently updated, causing issues with our patches for
_FORTIFY_SOURCE=2 support. Fix the build by rebasing the patches for the
updated version.

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
DeltaFile
+2-11multimedia/ffmpeg/files/patch-libavcodec_ffv1enc__vulkan.c
+0-11multimedia/ffmpeg/files/patch-configure
+2-5multimedia/ffmpeg/files/patch-libavcodec_vulkan__ffv1.c
+4-273 files

HardenedBSD/ports cb4045asecurity/nss distinfo Makefile

security/nss: update to 3.122.1

Announcement:
  https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/q302OZzf8cI
DeltaFile
+3-3security/nss/distinfo
+1-1security/nss/Makefile
+4-42 files

HardenedBSD/ports 1133c5csecurity/agave distinfo Makefile, security/agave/files patch-rust-1.87.0 patch-gossip_src_protocol.rs

security/agave: update 2.2.14 → 3.1.13
DeltaFile
+761-567security/agave/distinfo
+383-286security/agave/Makefile
+0-42security/agave/files/patch-rust-1.87.0
+29-0security/agave/files/patch-gossip_src_protocol.rs
+20-0security/agave/files/patch-core_src_system__monitor__service.rs
+20-0security/agave/files/patch-gossip_src_ping__pong.rs
+1,213-8955 files not shown
+1,258-90711 files

HardenedBSD/ports 41bcc68net-mgmt/prometheus3 distinfo Makefile

net-mgmt/prometheus3: Update to 3.11.2

Changelog:
https://github.com/prometheus/prometheus/releases/tag/v3.11.2
DeltaFile
+7-7net-mgmt/prometheus3/distinfo
+1-2net-mgmt/prometheus3/Makefile
+8-92 files

HardenedBSD/ports d50e153Mk/Uses gnome.mk, deskutils/gnotime Makefile

gnome: retire INSTALLS_OMF

INSTALLS_OMF triggered execution of scrollkeeper-install and -unsinstall
which are script only doing exit 0 so useless.
DeltaFile
+0-15Mk/Uses/gnome.mk
+1-2deskutils/gnotime/Makefile
+1-172 files

HardenedBSD/ports efd4077www/web2ldap Makefile, www/web2ldap/files patch-setup.py

www/web2ldap: Fix build with setuptools 81.0.0

This patch make web2ldap build against both setuptools 63.1.0 (currently
in ports) and 81.0.0.

PR:     294472
DeltaFile
+17-0www/web2ldap/files/patch-setup.py
+1-1www/web2ldap/Makefile
+18-12 files

HardenedBSD/ports 423620acad/yosys pkg-plist distinfo

cad/yosys: Update 0.63 => 0.64

Summary: * Strip all the executables, not only the main one

Approved by:            yuri@ (maintainer, Mentor)
Approved by:            db@, yuri@ (Mentors, implicit)
Differential Revision:  https://reviews.freebsd.org/D56397
DeltaFile
+15-0cad/yosys/pkg-plist
+3-3cad/yosys/distinfo
+2-2cad/yosys/Makefile
+20-53 files