HardenedBSD/src 0be0796sys/sys priv.h

HBSD: Resolve merge conflict

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
DeltaFile
+5-10sys/sys/priv.h
+5-101 files

HardenedBSD/src 28ddc54sys/contrib/dev/athk/ath12k mac.c debugfs_htt_stats.c

Merge remote-tracking branch 'origin/freebsd/15-stable/main' into hardened/15-stable/main

Conflicts:
        sys/sys/priv.h (unresolved)
DeltaFile
+9,336-1,825sys/contrib/dev/athk/ath12k/mac.c
+6,178-0sys/contrib/dev/athk/ath12k/debugfs_htt_stats.c
+4,684-353sys/contrib/dev/athk/ath12k/wmi.c
+2,346-505sys/contrib/dev/athk/ath12k/dp_mon.c
+2,076-0sys/contrib/dev/athk/ath12k/debugfs_htt_stats.h
+1,814-206sys/contrib/dev/athk/ath12k/wmi.h
+26,434-2,889171 files not shown
+46,377-8,560177 files

HardenedBSD/src 9a86008sys/compat/linux linux_socket.c linux_socket.h, sys/kern kern_event.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+61-0sys/compat/linux/linux_socket.c
+23-15sys/kern/kern_event.c
+5-5usr.sbin/bhyve/iov.c
+2-2usr.sbin/bhyve/iov.h
+1-0sys/compat/linux/linux_socket.h
+92-225 files

HardenedBSD/src 75ff0b3sys/compat/linux linux_socket.c linux_socket.h, sys/kern kern_event.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+61-0sys/compat/linux/linux_socket.c
+23-15sys/kern/kern_event.c
+5-5usr.sbin/bhyve/iov.c
+2-2usr.sbin/bhyve/iov.h
+1-0sys/compat/linux/linux_socket.h
+92-225 files

HardenedBSD/ports 553ce4bgames/libretro-shaders-glsl pkg-plist, security/arti distinfo Makefile.crates

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+1,479-1,367games/libretro-shaders-glsl/pkg-plist
+751-0www/static-api/distinfo
+229-227security/arti/distinfo
+374-0www/static-api/Makefile.crates
+113-112security/arti/Makefile.crates
+86-0security/vuxml/vuln/2026.xml
+3,032-1,706105 files not shown
+3,613-2,116111 files

HardenedBSD/src 0b4f0e0sys/kern kern_event.c

kqueue: compare against the size in kqueue_expand

This is a cosmetic change, rather than a functional one: comparing the
knlistsize against the fd requires a little bit of mental gymnastics to
confirm that this is fine and not doing unnecessary work in some cases.

Notably, one must consider that kq_knlistsize only grows in KQEXTENT
chunks, which means that concurrent threads trying to grow the kqueue
to consecutive fds will usually not result in the list being replaced
twice.  One can also more clearly rule out classes of arithmetic
problems in the final `else` branch.

Reviewed by:    kib, markj
Differential Revision:  https://reviews.freebsd.org/D56209
DeltaFile
+6-4sys/kern/kern_event.c
+6-41 files

HardenedBSD/src 306c904sys/kern kern_event.c

kqueue: add some kn_knlist assertions around knlist_(add|remove)

We currently assert that kn_status is accurate, but there's more room
for error.  Neither of these are very likely, but currently we'd blow up
in SLIST*() macros instead of providing more obvious diagnostics.  It's
perhaps only worth testing these because knlist_remove() requires
getting logic across both f_attach() and f_detach() correct.

Reviewed by:    kib, markj
Differential Revision:  https://reviews.freebsd.org/D56211
DeltaFile
+4-0sys/kern/kern_event.c
+4-01 files

HardenedBSD/src ff1050dsys/kern kern_event.c

kqueue: simplify knote_fdclose()

The influx logic in knote_fdclose() is a little misguided, the resulting
wakeup() call should always be redundant: knote_drop_detached() will
always issue a wakeup before it returns, so anything waiting on *that*
knote that had entered fluxwait should have been woken up then.  This is
the obvious divergence from the other influx/wakeup pattern in the
implementation, which will kn_influx-- and then issue the wakeup after
it has processed all of the knotes it can make progress on.

While we're here, the kq_knlist cannot shrink, so we can avoid that
condition in the loop and avoid potentially excessive wakeups from
fluxwait on kqueues that we didn't touch.

Reviewed by:    kib, markj
Differential Revision:  https://reviews.freebsd.org/D56210
DeltaFile
+12-10sys/kern/kern_event.c
+12-101 files

HardenedBSD/src 14d0bafsys/kern kern_event.c

kqueue: avoid a possible fork-deadlock

kqueue_fork_copy() is likely to have transitioned at least one knote
through a flux state, so we should check whether we need to wake
anything up on the way out to avoid a possible deadlock.

This was a part of D56210, but we'll close the review with the next
commit.

Fixes:  b11289f87123f ("kqueuex(2): add KQUEUE_CPONFORK")
Reviewed by:    kib, markj
DeltaFile
+1-1sys/kern/kern_event.c
+1-11 files

HardenedBSD/ports ef62587archivers/appscript distinfo Makefile

archivers/appscript: Update to 0.2.0

ChangeLog: https://github.com/DtxdF/appscript/releases/tag/v0.2.0
DeltaFile
+3-3archivers/appscript/distinfo
+1-1archivers/appscript/Makefile
+4-42 files

HardenedBSD/src 5d4a39dsys/compat/linux linux_socket.c linux_socket.h

compat/linux: map TCP_USER_TIMEOUT sockopt into TCP_MAXUNACKTIME

After reading both manual pages, our TCP_MAXUNACKTIME is fairly
similar to the TCP_USER_TIMEOUT, the only considerable difference
is ours is in seconds and linux's in milliseconds.

Round up linux's in setsockopt(2) to a next whole second and
clamp ours getter to UINT_MAX ms.

Reviewed by:    tuexen, glebius
Differential Revision: https://reviews.freebsd.org/D56168
MFC after:      2 weeks
Sponsored by:   Sippy Software, Inc.
DeltaFile
+61-0sys/compat/linux/linux_socket.c
+1-0sys/compat/linux/linux_socket.h
+62-02 files

HardenedBSD/ports f74e004games/libretro-shaders-glsl pkg-plist Makefile, games/libretro-shaders-glsl/files patch-Makefile

games/libretro-shaders-glsl: Update to g20260330 and adopt port

* Adopt port
* Update COMMENT and pkg-descr to point out that the shaders originate
  from the libretro project, but that they can also be used by other
  projects, e.g. ScummVM.
* Use short hash for GH_TAGNAME. This follows the Porter's Handbook more
  closely.
* Set DATADIR to its actual non-standard directory.
* The shaders are architecture-independend and there's nothing to build,
  so set NO_ARCH and NO_BUILD.
* Use COPYTREE_SHARE for installing to ensure proper file ownership and
  permissions, and to not require the make binary. In this case do not
  extract unneeded build and CI files by excluding them via
  EXTRACT_AFTER_ARGS.
* Remove obsolete Makefile patch.

Changelog:
https://github.com/libretro/glsl-shaders/compare/e66776c...bf52cc8

    [2 lines not shown]
DeltaFile
+1,479-1,367games/libretro-shaders-glsl/pkg-plist
+18-4games/libretro-shaders-glsl/Makefile
+0-16games/libretro-shaders-glsl/files/patch-Makefile
+3-3games/libretro-shaders-glsl/distinfo
+2-2games/libretro-shaders-glsl/pkg-descr
+1,502-1,3925 files

HardenedBSD/ports 5d5dab2security/vuxml/vuln 2026.xml

security/vuxml: Document Python security issues

Security:       CVE-2025-15366
Security:       CVE-2025-15367
Security:       CVE-2026-4519
DeltaFile
+86-0security/vuxml/vuln/2026.xml
+86-01 files

HardenedBSD/ports 0924a9cnet-p2p/mkbrr distinfo Makefile

net-p2p/mkbrr: Update to 1.21.0

Changelog: https://github.com/autobrr/mkbrr/releases/tag/v1.21.0
DeltaFile
+5-5net-p2p/mkbrr/distinfo
+1-2net-p2p/mkbrr/Makefile
+6-72 files

HardenedBSD/ports 2eb7d3emultimedia/mediamtx distinfo Makefile

multimedia/mediamtx: Update to 1.17.1

Changelog: https://github.com/bluenviron/mediamtx/releases/tag/v1.17.1
DeltaFile
+7-7multimedia/mediamtx/distinfo
+1-1multimedia/mediamtx/Makefile
+8-82 files

HardenedBSD/ports 9e691aawww Makefile, www/static-api distinfo Makefile.crates

www/static-api: [NEW PORT] Simple application emulating a basic REST API

WWW: https://github.com/josejachuf/static-api-rs/

PR:             276675
Reviewed by:            yuri@ (Mentor)
Approved by:            db@, yuri@ (Mentors, implicit)
DeltaFile
+751-0www/static-api/distinfo
+374-0www/static-api/Makefile.crates
+21-0www/static-api/Makefile
+12-0www/static-api/pkg-descr
+1-0www/Makefile
+1,159-05 files

HardenedBSD/ports 64b5edcwww/py-hyperkitty pkg-message Makefile, www/py-hyperkitty/files mailman-qcluster.in

www/py-hyperkitty: Add rc.d script for mailman-qcluster

* Add sysrc script for mailman-qcluster

To improve performance, HyperKitty uses a distributed task queue
that offloads long operations to separate processes called “workers”

* Add pkg-message

PR:                     292013
Approved by:            Einar Bjarni Halldórsson <einar at isnic.is> (maintainer)
Approved by:            yuri@ (Mentor)
DeltaFile
+42-0www/py-hyperkitty/files/mailman-qcluster.in
+30-0www/py-hyperkitty/pkg-message
+2-0www/py-hyperkitty/Makefile
+74-03 files

HardenedBSD/ports 4e150f7science/py-xbout Makefile distinfo, science/py-xbout/files patch-pyproject.toml

science/py-xbout: update 0.3.5 → 0.3.8
DeltaFile
+9-10science/py-xbout/Makefile
+13-0science/py-xbout/files/patch-pyproject.toml
+3-3science/py-xbout/distinfo
+25-133 files

HardenedBSD/ports e3b4fc1math/py-resample distinfo Makefile

math/py-resample: update 1.7.1 → 1.10.2
DeltaFile
+3-3math/py-resample/distinfo
+1-1math/py-resample/Makefile
+4-42 files

HardenedBSD/ports def64a9math/py-numba-stats Makefile distinfo

math/py-numba-stats: update 1.4.1 → 1.11.0
DeltaFile
+5-2math/py-numba-stats/Makefile
+3-3math/py-numba-stats/distinfo
+8-52 files

HardenedBSD/ports 3600286math/py-pytensor Makefile distinfo, math/py-pytensor/files patch-pyproject.toml

math/py-pytensor: update 2.26.4 → 2.34.0
DeltaFile
+19-0math/py-pytensor/files/patch-pyproject.toml
+5-3math/py-pytensor/Makefile
+3-3math/py-pytensor/distinfo
+27-63 files

HardenedBSD/ports 89f3624devel/py-qutip-qip Makefile distinfo

devel/py-qutip-qip: update 0.3.0 → 0.4.1
DeltaFile
+3-4devel/py-qutip-qip/Makefile
+3-3devel/py-qutip-qip/distinfo
+6-72 files

HardenedBSD/ports 23e3d72devel/py-qcs-api-client Makefile distinfo

devel/py-qcs-api-client: update 0.23.4 → 0.26.5
DeltaFile
+4-3devel/py-qcs-api-client/Makefile
+3-3devel/py-qcs-api-client/distinfo
+7-62 files

HardenedBSD/ports a2c3693science/py-dwave-ocean-sdk Makefile distinfo

science/py-dwave-ocean-sdk: update 9.0.0 → 9.3.0
DeltaFile
+7-7science/py-dwave-ocean-sdk/Makefile
+3-3science/py-dwave-ocean-sdk/distinfo
+10-102 files

HardenedBSD/ports 18e1bbdscience/py-boututils Makefile distinfo

science/py-boututils: update 0.1.9 → 0.2.1
DeltaFile
+6-8science/py-boututils/Makefile
+3-3science/py-boututils/distinfo
+9-112 files

HardenedBSD/ports 24b501bscience/py-asap3 Makefile distinfo

science/py-asap3: update 3.12.8 → 3.13.11
DeltaFile
+7-3science/py-asap3/Makefile
+3-3science/py-asap3/distinfo
+10-62 files

HardenedBSD/ports 109fa49science/py-boutdata Makefile distinfo

science/py-boutdata: update 0.1.10 → 0.4.0
DeltaFile
+12-6science/py-boutdata/Makefile
+3-3science/py-boutdata/distinfo
+15-92 files

HardenedBSD/ports 7d1fcf3misc/py-lightgbm distinfo Makefile

misc/py-lightgbm: update 4.4.0 → 4.6.0
DeltaFile
+3-3misc/py-lightgbm/distinfo
+1-1misc/py-lightgbm/Makefile
+4-42 files

HardenedBSD/ports 78de6cex11-toolkits/py-AnyQt distinfo Makefile

x11-toolkits/py-AnyQt: update 0.1.1 → 0.2.1
DeltaFile
+3-3x11-toolkits/py-AnyQt/distinfo
+2-2x11-toolkits/py-AnyQt/Makefile
+5-52 files

HardenedBSD/ports 5df9f4amath/py-pygslodeiv2 distinfo Makefile

math/py-pygslodeiv2: update 0.9.4 → 0.9.7
DeltaFile
+3-3math/py-pygslodeiv2/distinfo
+1-2math/py-pygslodeiv2/Makefile
+4-52 files