HardenedBSD/src ff2744asys/netpfil/ipfilter/netinet fil.c ip_fil.h

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+2-2sys/netpfil/ipfilter/netinet/fil.c
+1-1sys/netpfil/ipfilter/netinet/ip_fil.h
+1-1sys/netpfil/ipfilter/netinet/ip_state.c
+4-43 files

HardenedBSD/ports d87e0c8www/iridium/files patch-chrome_browser_about__flags.cc patch-third__party_libunwind_src_src_AddressSpace.hpp

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+101-65www/iridium/files/patch-chrome_browser_about__flags.cc
+85-0www/iridium/files/patch-third__party_libunwind_src_src_AddressSpace.hpp
+14-68www/iridium/files/patch-chrome_browser_ui_ui__features.cc
+0-49www/iridium/files/patch-third__party_libaom_source_libaom_aom__ports_aarch64__cpudetect.c
+24-24www/iridium/files/patch-chrome_browser_policy_configuration__policy__handler__list__factory.cc
+47-0www/iridium/files/patch-components_proxy__config_proxy__override__rules__policy__handler.cc
+271-206490 files not shown
+2,649-2,324496 files

HardenedBSD/ports 77a4280x11/contour Makefile

x11/contour: Bump port revision after libunicode-contour shlib version bump (742f17431143)
DeltaFile
+1-1x11/contour/Makefile
+1-11 files

HardenedBSD/ports 742f174devel/libunicode-contour distinfo Makefile, devel/libunicode-contour/files patch-src_libunicode_CMakeLists.txt

devel/libunicode-contour: Update to 0.8.0

Changelog: https://github.com/contour-terminal/libunicode/releases/tag/v0.8.0

Reported by:    GitHub (watch releases)
DeltaFile
+3-3devel/libunicode-contour/distinfo
+2-2devel/libunicode-contour/files/patch-src_libunicode_CMakeLists.txt
+1-1devel/libunicode-contour/Makefile
+2-0devel/libunicode-contour/pkg-plist
+8-64 files

HardenedBSD/ports 80ef9f7mail/py-resend distinfo Makefile

mail/py-resend: Update to 2.22.0

Changelog: https://github.com/resend/resend-python/releases/tag/v2.22.0

Reported by:    portscout
DeltaFile
+3-3mail/py-resend/distinfo
+1-1mail/py-resend/Makefile
+4-42 files

HardenedBSD/ports 4022d4bcomms/direwolf/files patch-scripts_dw-start.sh patch-CMakeLists.txt

comms/direwolf: re-generate patches

PR:                     292181
Reported by:            takefu at airport.fm
Approved by:            hamradio@ (alven@)
Differential Revision:  https://reviews.freebsd.org/D54299
DeltaFile
+3-13comms/direwolf/files/patch-scripts_dw-start.sh
+2-2comms/direwolf/files/patch-CMakeLists.txt
+5-152 files

HardenedBSD/ports b976e25www/iridium/files patch-chrome_browser_about__flags.cc patch-third__party_libunwind_src_src_AddressSpace.hpp

www/iridium: update to 2026.02.145
DeltaFile
+101-65www/iridium/files/patch-chrome_browser_about__flags.cc
+85-0www/iridium/files/patch-third__party_libunwind_src_src_AddressSpace.hpp
+14-68www/iridium/files/patch-chrome_browser_ui_ui__features.cc
+0-49www/iridium/files/patch-third__party_libaom_source_libaom_aom__ports_aarch64__cpudetect.c
+24-24www/iridium/files/patch-chrome_browser_policy_configuration__policy__handler__list__factory.cc
+47-0www/iridium/files/patch-components_proxy__config_proxy__override__rules__policy__handler.cc
+271-206452 files not shown
+2,496-2,154458 files

HardenedBSD/ports d982d56misc Makefile, misc/deark Makefile pkg-descr

misc/deark: [NEW PORT] Utility for data extraction, decompression, and image format decoding

Deark is a portable command-line utility that can decode certain types of files,
and either convert them to a more-modern or more-readable format, or extract
embedded files from them. It also has an option (-d) to display detailed
information about a file’s contents and metadata. It’s Free Software.

The files it writes are usually named "output.*".

When processing "archive" formats that contain other files, it's usually best to
use Deark only to convert to ZIP format, so that the filenames and paths can be
retained. Suggest options "-zip -ka".

WWW:      https://entropymine.com/deark/

Approved by:            yuri@ (Mentor)
Differential Revision:  https://reviews.freebsd.org/D54697
DeltaFile
+33-0misc/deark/Makefile
+10-0misc/deark/pkg-descr
+3-0misc/deark/distinfo
+1-0misc/Makefile
+47-04 files

HardenedBSD/ports 6f7e2bbmultimedia/libmtp distinfo Makefile

multimedia/libmtp: update to 1.1.23

PR:             293195
DeltaFile
+3-3multimedia/libmtp/distinfo
+1-1multimedia/libmtp/Makefile
+4-42 files

HardenedBSD/ports 1726fadx11-toolkits/libadwaita distinfo Makefile

x11-toolkits/libadwaita: update 1.7.7 to 1.7.11

Update to 1.7.11 (this version is for Gtk 4.18.x)

=============
Version 1.7.8
=============

- AdwComboRow
  - Allow selecting items via touchscreen
  - Improve accessibility
- AdwEntryRow
  - Fix title ellipsizing too late
  - Activate the row action when pressing enter
- AdwNavigationView
  - Fix a build warning on some platforms
- AdwTabBar/AdwTabGrid
  - Fix context menu alignment on RTL
- Docs

    [69 lines not shown]
DeltaFile
+3-3x11-toolkits/libadwaita/distinfo
+2-2x11-toolkits/libadwaita/Makefile
+3-0x11-toolkits/libadwaita/pkg-plist
+8-53 files

HardenedBSD/ports fb668a9math/octave-forge-tablicious distinfo Makefile

math/octave-forge-tablicious: Update to 0.4.6.
DeltaFile
+3-3math/octave-forge-tablicious/distinfo
+1-2math/octave-forge-tablicious/Makefile
+4-52 files

HardenedBSD/ports 7e9f887lang/typescript-go distinfo Makefile

lang/typescript-go: Update to 7.0.0.g20260217 (latest GitHub commit)

Changelog: https://github.com/microsoft/typescript-go/compare/f5bcdfc02e6527b774418a26ee817c4397da8546...daa761e5c641bde53ad14a349cc813c3296ae2f2
DeltaFile
+7-7lang/typescript-go/distinfo
+4-5lang/typescript-go/Makefile
+11-122 files

HardenedBSD/ports c7a951ceditors/emacs-devel pkg-plist distinfo

editors/emacs-devel: Update to 2026-02-16 snapshot

Commit log:     https://github.com/emacs-mirror/emacs/compare/b75bfa219ec...988e898749a
Sponsored by:   The FreeBSD Foundation
DeltaFile
+17-0editors/emacs-devel/pkg-plist
+3-3editors/emacs-devel/distinfo
+2-3editors/emacs-devel/Makefile
+22-63 files

HardenedBSD/ports a88a131Mk bsd.sites.mk

Mk/bsd.sites.mk: Prune NXDOMAIN mirrors

The following one-liner was used for the initial NXDOMAIN lookup.

  $ <Mk/bsd.sites.mk grep -o '://[^/]*\/' | sed 's|[:\/]||g' | sort -u | \
    zdns A | jq -r 'select(.results.A.status=="NXDOMAIN") | .name'
DeltaFile
+0-23Mk/bsd.sites.mk
+0-231 files

HardenedBSD/ports ba69270comms/hamlib pkg-plist distinfo, comms/hamlib/files patch-tests_rigtestlibusb.c patch-hamlib.pc.in

comms/hamlib: Update to 4.7.0

- remove patches no longer needed due to FreeBSD changes in upstream
- Add manual page for rigtestmcast and rigtestmcastrx
- Add manual page for rigtestlibusb
- Add rigctltcp manual page
DeltaFile
+0-43comms/hamlib/files/patch-tests_rigtestlibusb.c
+13-7comms/hamlib/pkg-plist
+0-10comms/hamlib/files/patch-hamlib.pc.in
+0-10comms/hamlib/files/patch-rigs_dummy_rot__pstrotator.c
+3-3comms/hamlib/distinfo
+1-1comms/hamlib/Makefile
+17-746 files

HardenedBSD/src 3fdbd8asys/netpfil/ipfilter/netinet fil.c ip_fil.h

ipfilter: Avoid negative array indicies

Array indices must always be posive. We avoid this by making each index
unsigned. This mitigates out-of-bounds reads and writes.

Reported by:            Ilja Van Sprundel <ivansprundel at ioactive.com>
Reviewed by:            glebius
MFC after:              3 days
Differential revision:  https://reviews.freebsd.org/D55260
DeltaFile
+2-2sys/netpfil/ipfilter/netinet/fil.c
+1-1sys/netpfil/ipfilter/netinet/ip_fil.h
+1-1sys/netpfil/ipfilter/netinet/ip_state.c
+4-43 files

HardenedBSD/ports d233e68math/octave-forge-odbc distinfo Makefile, math/octave-forge-odbc/files patch-configure.ac

math/octave-forge-odbc: Update to 0.0.6.
DeltaFile
+11-3math/octave-forge-odbc/files/patch-configure.ac
+3-3math/octave-forge-odbc/distinfo
+1-1math/octave-forge-odbc/Makefile
+15-73 files

HardenedBSD/src eb1c78esys/sys priv.h

HBSD: Resolve merge conflict

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
DeltaFile
+2-7sys/sys/priv.h
+2-71 files

HardenedBSD/src fdac606tests/sys/capsicum capsicum.h syscalls.h, tests/sys/kern pdrfork.c

Merge remote-tracking branch 'origin/freebsd/current/main' into hardened/current/master

Conflicts:
        sys/sys/priv.h (unresolved)
DeltaFile
+4-144tests/sys/capsicum/capsicum.h
+0-144tests/sys/capsicum/syscalls.h
+0-140tests/sys/capsicum/capability-fd-pair.cc
+62-66tests/sys/kern/pdrfork.c
+0-103tests/sys/capsicum/capsicum-rights.h
+76-25usr.sbin/bhyve/rfb.c
+142-62235 files not shown
+350-1,07141 files

HardenedBSD/ports 71bd454security/sudo-rs distinfo Makefile

security/sudo-rs: Update 0.2.11 => 0.2.12

PR:             293077
Approved by:    Marc Schoolderman (maintainer)
DeltaFile
+5-5security/sudo-rs/distinfo
+1-2security/sudo-rs/Makefile
+1-1security/sudo-rs/Makefile.crates
+7-83 files

HardenedBSD/ports a4c6ee2graphics/dcmtk pkg-plist, graphics/materialx pkg-plist

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+816-741graphics/materialx/pkg-plist
+611-426www/firefox/files/patch-libwebrtc-generated
+161-179sysutils/mprocs/distinfo
+79-88sysutils/mprocs/Makefile.crates
+76-58graphics/dcmtk/pkg-plist
+44-52sysutils/py-healthchecks/pkg-plist
+1,787-1,54470 files not shown
+2,227-1,87776 files

HardenedBSD/src fba81b3tests/sys/capsicum capsicum.h syscalls.h

capsicum-tests: remove Linux support

Now that this project is part of freebsd-src, it no longer needs to be
portable.  Remove Linux-only tests, cross-os compatibility code, and
compatibility with older FreeBSD versions.  Leave in place some
originally Linux-only tests that could now be ported to FreeBSD, like the
pipe2 tests.

Sponsored by:   ConnectWise
Reviewed by:    oshogbo
Differential Revision: https://reviews.freebsd.org/D54985
DeltaFile
+4-144tests/sys/capsicum/capsicum.h
+0-144tests/sys/capsicum/syscalls.h
+0-140tests/sys/capsicum/capability-fd-pair.cc
+0-103tests/sys/capsicum/capsicum-rights.h
+5-65tests/sys/capsicum/capability-fd.cc
+15-51tests/sys/capsicum/procdesc.cc
+24-64716 files not shown
+55-93722 files

HardenedBSD/src dc9a8d3tests/sys/aio aio_test.c

aio(4) tests: do not rely on (int *)-1 being invalid address

Explicitly mmap guard and use it as the invalid address instead.

MFC after:      1 week
DeltaFile
+6-1tests/sys/aio/aio_test.c
+6-11 files

HardenedBSD/src 05492fftests/sys/kern pdwait.c

pdwait(2) tests: do not rely on (int *)-1 being invalid address

Explicitly mmap guard and use it as the invalid address instead.

MFC after:      1 week
DeltaFile
+17-3tests/sys/kern/pdwait.c
+17-31 files

HardenedBSD/src 11c1b69sys/netlink netlink_io.c

netlink: force uninline of nl_receive_message()

The entire netlink(4) message processing thread is all inlined into
nl_taskqueue_handler() making it difficult to dtrace(1) on a message
level.
DeltaFile
+1-1sys/netlink/netlink_io.c
+1-11 files

HardenedBSD/ports c41c8e4www/filebrowser distinfo Makefile

www/filebrowser: Update to 2.59.0

ChangeLog: https://github.com/filebrowser/filebrowser/releases/tag/v2.59.0
DeltaFile
+7-7www/filebrowser/distinfo
+1-1www/filebrowser/Makefile
+8-82 files

HardenedBSD/ports 406ab39www Makefile, www/py-dj60-django-stubs-ext Makefile pkg-descr

www/py-dj60-django-stubs-ext: Add new port

Added because sysutils/py-healthchecks now uses www/py-django60.
DeltaFile
+24-0www/py-dj60-django-stubs-ext/Makefile
+11-0www/py-dj60-django-stubs-ext/files/patch-pyproject.toml
+5-0www/py-dj60-django-stubs-ext/pkg-descr
+3-0www/py-dj60-django-stubs-ext/distinfo
+1-0www/Makefile
+44-05 files

HardenedBSD/ports bdd1c91sysutils/py-healthchecks pkg-plist Makefile

sysutils/py-healthchecks: Update to 4.0

ChangeLog: https://github.com/healthchecks/healthchecks/releases/tag/v4.0
DeltaFile
+44-52sysutils/py-healthchecks/pkg-plist
+3-3sysutils/py-healthchecks/Makefile
+3-3sysutils/py-healthchecks/distinfo
+50-583 files

HardenedBSD/ports 968ee81sysutils/mprocs distinfo Makefile.crates

sysutils/mprocs: Update to 0.8.3

ChangeLogs:
https://github.com/pvolok/mprocs/compare/v0.7.3...v0.8.3
DeltaFile
+161-179sysutils/mprocs/distinfo
+79-88sysutils/mprocs/Makefile.crates
+1-2sysutils/mprocs/Makefile
+241-2693 files

HardenedBSD/ports 045870dnet/nbdkit distinfo Makefile

net/nbdkit: Update to 1.46.2
DeltaFile
+3-3net/nbdkit/distinfo
+1-1net/nbdkit/Makefile
+4-42 files