HardenedBSD/src 6ca91bdsys/amd64/amd64 apic_vector.S, sys/i386/i386 mp_machdep.c apic_vector.S

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+14-0sys/i386/i386/mp_machdep.c
+5-5sys/x86/x86/mp_x86.c
+2-2sys/i386/i386/apic_vector.S
+2-2sys/x86/include/x86_smp.h
+2-2sys/x86/xen/xen_apic.c
+2-0sys/amd64/amd64/apic_vector.S
+27-116 files

HardenedBSD/src 05f6434sys/amd64/amd64 apic_vector.S, sys/i386/i386 mp_machdep.c apic_vector.S

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+14-0sys/i386/i386/mp_machdep.c
+5-5sys/x86/x86/mp_x86.c
+2-2sys/x86/xen/xen_apic.c
+2-2sys/i386/i386/apic_vector.S
+2-2sys/x86/include/x86_smp.h
+2-0sys/amd64/amd64/apic_vector.S
+27-116 files

HardenedBSD/ports 3591e63databases/cargo-pgrx distinfo Makefile.crates, databases/vchord distinfo Makefile.crates

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+887-0databases/cargo-pgrx/distinfo
+449-0databases/vchord/distinfo
+442-0databases/cargo-pgrx/Makefile.crates
+271-95editors/dz6/distinfo
+223-0databases/vchord/Makefile.crates
+135-47editors/dz6/Makefile.crates
+2,407-14217 files not shown
+2,560-16523 files

HardenedBSD/ports 09a2cf2textproc/rubygem-nokogiri Makefile

textproc/rubygem-nokogiri: bump for libxml update
DeltaFile
+1-0textproc/rubygem-nokogiri/Makefile
+1-01 files

HardenedBSD/ports 963373dsecurity/trivy distinfo Makefile

security/trivy: update to 0.69.3

Changes:        https://github.com/aquasecurity/trivy/releases/tag/v0.69.3
DeltaFile
+5-5security/trivy/distinfo
+1-2security/trivy/Makefile
+6-72 files

HardenedBSD/ports 94446d1devel/p5-TimeDate pkg-plist Makefile

devel/p5-TimeDate: Update to 2.34

Changelog:      https://metacpan.org/changes/distribution/TimeDate

PR:             293624
Reported by:    Sergei Vyshenski <svysh.fbsd at gmail.com> (maintainer)
DeltaFile
+36-0devel/p5-TimeDate/pkg-plist
+4-3devel/p5-TimeDate/Makefile
+3-3devel/p5-TimeDate/distinfo
+43-63 files

HardenedBSD/ports adce8acdatabases Makefile, databases/vchord distinfo Makefile.crates

databases/vchord: New port

Extension for vector similarity search

PR:             293187
DeltaFile
+449-0databases/vchord/distinfo
+223-0databases/vchord/Makefile.crates
+35-0databases/vchord/Makefile
+17-0databases/vchord/pkg-plist
+10-0databases/vchord/pkg-descr
+1-0databases/Makefile
+735-06 files

HardenedBSD/ports 6d807c3databases Makefile, databases/cargo-pgrx distinfo Makefile.crates

databases/cargo-pgrx: New port

Framework for developing PostgreSQL extensions in Rust

PR:             293134
DeltaFile
+887-0databases/cargo-pgrx/distinfo
+442-0databases/cargo-pgrx/Makefile.crates
+28-0databases/cargo-pgrx/Makefile
+2-0databases/cargo-pgrx/pkg-descr
+1-0databases/Makefile
+1,360-05 files

HardenedBSD/src fdc1f34sys/amd64/amd64 apic_vector.S, sys/i386/i386 mp_machdep.c apic_vector.S

x86: change signatures of ipi_{bitmap,swi}_handler() to take pointer

to the frame instead of the frame itself. It is some stretch of the
amd64 ABI, and is not easily fullfilled when handlers are called from C
and not asm. In particular, the struct frame is passed by value but is
modified by callees, with the expectation that the caller will see the
modifications.

Reviewed by:    markj
Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Differential revision:  https://reviews.freebsd.org/D55679
DeltaFile
+14-0sys/i386/i386/mp_machdep.c
+5-5sys/x86/x86/mp_x86.c
+2-2sys/i386/i386/apic_vector.S
+2-2sys/x86/include/x86_smp.h
+2-2sys/x86/xen/xen_apic.c
+2-0sys/amd64/amd64/apic_vector.S
+27-116 files

HardenedBSD/ports 0f48a01editors/dz6 distinfo Makefile.crates

editors/dz6: Update to 0.5.1

ChangeLog:
https://github.com/mentebinaria/dz6/releases/tag/v0.5.1
DeltaFile
+271-95editors/dz6/distinfo
+135-47editors/dz6/Makefile.crates
+1-1editors/dz6/Makefile
+407-1433 files

HardenedBSD/ports fbfbd55net/keycloak distinfo Makefile

net/keycloak: Update 26.5.4 => 26.5.5

Release Notes:
https://www.keycloak.org/2026/03/keycloak-2655-released

PR:             293618
Security:       CVE-2026-3047
Security:       CVE-2026-3009
Security:       CVE-2026-2603
Security:       CVE-2026-2092
MFH:            2026Q1
DeltaFile
+3-3net/keycloak/distinfo
+1-2net/keycloak/Makefile
+4-52 files

HardenedBSD/src feecd6fsys/contrib/dev/iwlwifi/fw/api rx.h, sys/contrib/dev/iwlwifi/mld rx.c d3.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+931-804sys/contrib/dev/iwlwifi/mld/rx.c
+0-809sys/contrib/dev/iwlwifi/mvm/link.c
+359-200sys/contrib/dev/iwlwifi/mld/d3.c
+49-347sys/contrib/dev/iwlwifi/mvm/d3.c
+286-0sys/contrib/dev/iwlwifi/fw/api/rx.h
+175-77sys/contrib/dev/iwlwifi/pcie/gen1_2/trans.c
+1,800-2,237115 files not shown
+3,332-4,485121 files

HardenedBSD/src b3aa8cdsys/contrib/dev/iwlwifi/fw/api rx.h, sys/contrib/dev/iwlwifi/mld rx.c d3.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+931-804sys/contrib/dev/iwlwifi/mld/rx.c
+0-809sys/contrib/dev/iwlwifi/mvm/link.c
+359-200sys/contrib/dev/iwlwifi/mld/d3.c
+49-347sys/contrib/dev/iwlwifi/mvm/d3.c
+286-0sys/contrib/dev/iwlwifi/fw/api/rx.h
+175-77sys/contrib/dev/iwlwifi/pcie/gen1_2/trans.c
+1,800-2,237109 files not shown
+3,215-4,445115 files

HardenedBSD/ports 8a79022misc/sff distinfo Makefile

misc/sff: Update 1.2 => 1.3

Changelog:
https://codeberg.org/sylphenix/sff/src/tag/1.3/CHANGELOG.md

PR:     293617
DeltaFile
+3-3misc/sff/distinfo
+1-1misc/sff/Makefile
+4-42 files

HardenedBSD/src f2b6a8clib/libc/gen uexterr_format.c err.3

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+20-8lib/libc/gen/uexterr_format.c
+7-1lib/libc/gen/err.3
+27-92 files

HardenedBSD/ports 575d62baudio/spiralsynthmodular Makefile, audio/spiralsynthmodular/files patch-SpiralSound_SpiralInfo.h patch-SpiralSound_SpiralInfo.C

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+914-34devel/stdman/pkg-plist
+25-53mail/davmail/pkg-plist
+70-0audio/spiralsynthmodular/files/patch-SpiralSound_SpiralInfo.h
+64-0audio/spiralsynthmodular/files/patch-SpiralSound_SpiralInfo.C
+20-20mail/davmail/Makefile
+12-12audio/spiralsynthmodular/Makefile
+1,105-11915 files not shown
+1,143-15621 files

HardenedBSD/ports 49ef88csecurity/crowdsec Makefile, security/crowdsec-blocklist-mirror Makefile

security/crowdsec{,-blocklist-mirror,-firewall-bouncer}: Transfer maintainership

PR:     293616
DeltaFile
+1-1security/crowdsec/Makefile
+1-1security/crowdsec-blocklist-mirror/Makefile
+1-1security/crowdsec-firewall-bouncer/Makefile
+3-33 files

HardenedBSD/src 74aec9fshare/man/man7 ports.7

ports.7: Document DEFAULT_VERSIONS

MFC after:              3 days
Co-authored-by:         Adam Weinberger <adamw at FreeBSD.org>
Differential Revision:  https://reviews.freebsd.org/D55443
DeltaFile
+4-0share/man/man7/ports.7
+4-01 files

HardenedBSD/ports a3f2aa7devel/stdman pkg-plist distinfo

devel/stdman: Update to 2024.07.05
DeltaFile
+914-34devel/stdman/pkg-plist
+3-3devel/stdman/distinfo
+1-1devel/stdman/Makefile
+918-383 files

HardenedBSD/ports d454980mail/thunderbird distinfo Makefile

mail/thunderbird: update to 148.0.1 (rc1)

Release Notes:
  https://www.thunderbird.net/en-US/thunderbird/148.0.1/releasenotes/
DeltaFile
+3-3mail/thunderbird/distinfo
+1-1mail/thunderbird/Makefile
+4-42 files

HardenedBSD/ports a0a0115sysutils/storcli Makefile distinfo

sysutils/storcli: Update 7.3503 => 7.3603

PR:     293539
DeltaFile
+5-5sysutils/storcli/Makefile
+3-3sysutils/storcli/distinfo
+8-82 files

HardenedBSD/src 1e4086dshare/man/man9 bus_alloc_resource.9, sys/arm/nvidia tegra_pcie.c

sys: Don't pass RF_ALLOCATED to bus_alloc_resource*

This is a nop as eventually these flags are passed to rman_reserve_resource
which unconditionally sets RF_ALLOCATED in the new flags for a region.
However, it's really a layering violation to use RF_ALLOCATED in relation
to struct resource objects outside of subr_rman.c as subr_rman.c uses
this flag to manage it's internal tracking of allocated vs free regions.

In addition, don't document this as a valid flag in the manual.  I
think the intention here was that if a caller didn't want to pass
RF_ACTIVE or RF_SHAREABLE, they could pass RF_ALLOCATED instead of 0,
but given the layering violation, I think it's best to just pass 0
instead in that case.

NB: The bhnd bus uses RF_ALLOCATED (along with RF_ACTIVE) in a
separate API to manage resource regions that are not struct resource
objects (but a separate wrapper object).  It would perhaps be cleaner
if the chipc_retain_region and chipc_release_region functions used
their own flag constants instead of reusing the rman(9) flags.

    [3 lines not shown]
DeltaFile
+3-7share/man/man9/bus_alloc_resource.9
+2-3sys/arm/nvidia/tegra_pcie.c
+1-1sys/x86/iommu/amd_drv.c
+6-113 files

HardenedBSD/ports a9052c7sysutils/py-hcloud distinfo Makefile

sysutils/py-hcloud: update to 2.17.0

Changes:        https://github.com/hetznercloud/hcloud-python/blob/v2.17.0/CHANGELOG.md
Reported by:    portscout, repology
DeltaFile
+3-3sysutils/py-hcloud/distinfo
+1-1sysutils/py-hcloud/Makefile
+4-42 files

HardenedBSD/src b7a7d51lib/libc/gen uexterr_format.c err.3

Refinements to the output when the EXTERROR_VERBOSE environment is set

Reviewed by: kib
Differential Revision: https://reviews.freebsd.org/D55494
Sponsored-by: Netflix

(cherry picked from commit 6fd98877de633f5ec6f028e78d5a2d94527d63d0)
DeltaFile
+20-8lib/libc/gen/uexterr_format.c
+7-1lib/libc/gen/err.3
+27-92 files

HardenedBSD/ports 8fedf8caudio/spiralsynthmodular Makefile, audio/spiralsynthmodular/files patch-SpiralSound_SpiralInfo.h patch-SpiralSound_SpiralInfo.C

audio/spiralsynthmodular: Fix "undefined symbol" errors at runtime

* Behavior *
- At runtime, for each synth plugin, we got:
dlerror() output:
/usr/local/lib/SpiralPlugins/AmpPlugin.so: Undefined symbol "_ZN10SpiralInfo6LOCALEE"

* Why *
- It seems this comes from the way newer compiler manage static
  properties. (SSM is 25yo).
- This error has already been reported long times ago on Linux distro.

* Fix *
- A way to fix it without rewriting the wheel is to inline static
  properties in the header.

While here improve port:
- Add LICENSE.
- Register dependiencies.

    [8 lines not shown]
DeltaFile
+70-0audio/spiralsynthmodular/files/patch-SpiralSound_SpiralInfo.h
+64-0audio/spiralsynthmodular/files/patch-SpiralSound_SpiralInfo.C
+12-12audio/spiralsynthmodular/Makefile
+146-123 files

HardenedBSD/ports 9b7ade6mail/thunderbird-esr distinfo Makefile

mail/thunderbird-esr: update to 140.8.1 (rc1)

Release Notes:
  https://www.thunderbird.net/en-US/thunderbird/140.8.1esr/releasenotes/
DeltaFile
+3-3mail/thunderbird-esr/distinfo
+1-1mail/thunderbird-esr/Makefile
+4-42 files

HardenedBSD/src ca25b1busr.sbin/devinfo devinfo.c devinfo.8

devinfo: Support PCI DBSF and ACPI handles for -p

When matching on a name of a device, match on ACPI handles and PCI
selectors in addition to device names.  This can be useful for
matching on devices without an attached driver.

For example: devinfo -p pci0:0:31:0

Reviewed by:    imp
Sponsored by:   Chelsio Communications
Differential Revision:  https://reviews.freebsd.org/D55673
DeltaFile
+57-1usr.sbin/devinfo/devinfo.c
+21-1usr.sbin/devinfo/devinfo.8
+78-22 files

HardenedBSD/src 95dd873sys/contrib/dev/iwlwifi/fw/api rx.h, sys/contrib/dev/iwlwifi/mld rx.c d3.c

iwlwifi: update Intel's mvm/mld drivers

This version is based on
git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
05f7e89ab9731565d8a62e3b5d1ec206485eeb0b ( tag: v6.19 ).

Sponsored by:   The FreeBSD Foundation
MFC after:      3 days
DeltaFile
+931-804sys/contrib/dev/iwlwifi/mld/rx.c
+0-809sys/contrib/dev/iwlwifi/mvm/link.c
+359-200sys/contrib/dev/iwlwifi/mld/d3.c
+49-347sys/contrib/dev/iwlwifi/mvm/d3.c
+286-0sys/contrib/dev/iwlwifi/fw/api/rx.h
+175-77sys/contrib/dev/iwlwifi/pcie/gen1_2/trans.c
+1,800-2,237103 files not shown
+3,127-4,432109 files

HardenedBSD/ports 26b198email/davmail pkg-plist Makefile, mail/davmail/files patch-build.xml

mail/davmail: Update 6.1.0 => 6.5.1

Release Notes:
https://sourceforge.net/p/davmail/code/HEAD/tree/tags/6.5.1/RELEASE-NOTES.md

Improve port:
- Reordered Makefile variables per portclippy.
- Parametrize davmail with PORTNAME.
- Replace PORTVERSION with DISTVERSION.

PR:             293568
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>
DeltaFile
+25-53mail/davmail/pkg-plist
+20-20mail/davmail/Makefile
+8-7mail/davmail/files/patch-build.xml
+3-3mail/davmail/distinfo
+56-834 files

HardenedBSD/src be35d1eusr.bin Makefile

HBSD: Resolve merge conflict

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
DeltaFile
+0-8usr.bin/Makefile
+0-81 files