HardenedBSD/src 8243aa2. ObsoleteFiles.inc, sys/netinet tcp_usrreq.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+113-0tests/sys/netinet/tcp_socket.c
+0-80tests/sys/netinet/tcp_implied_connect.c
+8-8sys/netinet/tcp_usrreq.c
+5-4sys/security/mac_do/mac_do.c
+3-0ObsoleteFiles.inc
+1-1tests/sys/netinet/Makefile
+130-936 files

HardenedBSD/src d6f1ba1. ObsoleteFiles.inc, sys/netinet tcp_usrreq.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+113-0tests/sys/netinet/tcp_socket.c
+0-80tests/sys/netinet/tcp_implied_connect.c
+8-8sys/netinet/tcp_usrreq.c
+5-4sys/security/mac_do/mac_do.c
+3-0ObsoleteFiles.inc
+1-1tests/sys/netinet/Makefile
+130-936 files

HardenedBSD/ports e99596cdeskutils/readur distinfo Makefile.crates, graphics/colmap pkg-plist

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+95-93deskutils/readur/distinfo
+116-34graphics/colmap/pkg-plist
+45-44deskutils/readur/Makefile.crates
+0-51net/kamailio/files/patch-cmake_compiler-specific.cmake
+39-0textproc/krep/files/patch-krep.c
+34-0net/kamailio/files/patch-cmake_modules_FindUnistring.cmake
+329-22272 files not shown
+674-51178 files

HardenedBSD/ports 780c77adeskutils/readur distinfo Makefile.crates

deskutils/readur: Update to 2.7.8

ChangeLog: https://github.com/readur/readur/releases/tag/v2.7.8
DeltaFile
+95-93deskutils/readur/distinfo
+45-44deskutils/readur/Makefile.crates
+2-2deskutils/readur/pkg-plist
+1-2deskutils/readur/Makefile
+143-1414 files

HardenedBSD/ports ac0b41bdevel/lace distinfo Makefile, devel/lace/files patch-CMakeLists.txt patch-benchmarks_CMakeLists.txt

devel/lace: update 2.2.2 → 2.2.3
DeltaFile
+0-31devel/lace/files/patch-CMakeLists.txt
+0-10devel/lace/files/patch-benchmarks_CMakeLists.txt
+3-3devel/lace/distinfo
+1-4devel/lace/Makefile
+4-484 files

HardenedBSD/ports d1d6704finance/hs-hledger-ui Makefile

finance/hs-hledger-ui: Broken on 16: ghc SEGVs

Reported by:    fallout
DeltaFile
+2-0finance/hs-hledger-ui/Makefile
+2-01 files

HardenedBSD/ports 68d022bscience/sirius distinfo Makefile

science/sirius: update 7.9.0 → 7.10.0
DeltaFile
+3-3science/sirius/distinfo
+2-2science/sirius/Makefile
+5-52 files

HardenedBSD/src 769a6f8sys/netinet tcp_usrreq.c

tcp_usrreq: Only allocate TFO counter when required

During tcp_usr_listen(), only allocate TFO counter when required.

Reviewed by: tuexen, glebius
Differential Revision: https://reviews.freebsd.org/D56067
DeltaFile
+8-8sys/netinet/tcp_usrreq.c
+8-81 files

HardenedBSD/ports 6825e6ex11/xcursorgen Makefile

x11/xcursorgen: Concise description

Substitute file for theme, remove "a collection of" to eliminate jarring
line wrapping at reference console width, and improve search keywords.

Differential Revision:  https://reviews.freebsd.org/D55699
DeltaFile
+2-1x11/xcursorgen/Makefile
+2-11 files

HardenedBSD/src cd05c88. ObsoleteFiles.inc, tests/sys/netinet tcp_socket.c tcp_implied_connect.c

tests/netinet: add test for getsockname() on a disconnected TCP socket

Stack it into existing file that exercises an other corner case of our
TCP and rename the file to a more generic name.
DeltaFile
+113-0tests/sys/netinet/tcp_socket.c
+0-80tests/sys/netinet/tcp_implied_connect.c
+3-0ObsoleteFiles.inc
+1-1tests/sys/netinet/Makefile
+117-814 files

HardenedBSD/ports 5588918databases/mysql80-client pkg-plist Makefile

databases/mysql80-client: install the man pages

PR:             279234
Approved by:    maintainer (maintainer timeout)
DeltaFile
+16-16databases/mysql80-client/pkg-plist
+1-1databases/mysql80-client/Makefile
+17-172 files

HardenedBSD/ports 239d04ewww/tomcat-native2 Makefile distinfo

www/tomcat-native2: Update to 2.0.14

MFH:            2026Q1
Changelog:      https://tomcat.apache.org/native-doc/miscellaneous/changelog.html#2.0.14
DeltaFile
+5-6www/tomcat-native2/Makefile
+3-3www/tomcat-native2/distinfo
+8-92 files

HardenedBSD/ports c52bedawww/tomcat-native Makefile distinfo

www/tomcat-native: Update to 1.3.7

MFH:            2026Q1
Changelog:      https://tomcat.apache.org/native-1.3-doc/miscellaneous/changelog.html#1.3.7
DeltaFile
+8-8www/tomcat-native/Makefile
+3-3www/tomcat-native/distinfo
+11-112 files

HardenedBSD/ports cefe7aedevel Makefile, devel/py-array-api-strict Makefile pkg-descr

devel/py-array-api-strict: add

To be used as TEST_DEPENDS
DeltaFile
+32-0devel/py-array-api-strict/Makefile
+14-0devel/py-array-api-strict/pkg-descr
+3-0devel/py-array-api-strict/distinfo
+1-0devel/Makefile
+50-04 files

HardenedBSD/ports 294b919www/py-yt-dlp distinfo Makefile, www/yt-dlp distinfo Makefile

www/{,py-}yt-dlp: update 2026.02.21 → 2026.03.17
DeltaFile
+3-3www/yt-dlp/distinfo
+3-3www/py-yt-dlp/distinfo
+1-1www/py-yt-dlp/Makefile
+1-1www/yt-dlp/Makefile
+1-0www/py-yt-dlp/pkg-plist
+9-85 files

HardenedBSD/ports 97cd097devel/lace/files patch-benchmarks_dfs_dfs-lace.c patch-benchmarks_fib_fib-lace.c

devel/lace: remove unnecessary patches
DeltaFile
+0-11devel/lace/files/patch-benchmarks_dfs_dfs-lace.c
+0-11devel/lace/files/patch-benchmarks_fib_fib-lace.c
+0-11devel/lace/files/patch-benchmarks_fib_fib-lace.cpp
+0-11devel/lace/files/patch-benchmarks_knapsack_knapsack-lace.c
+0-11devel/lace/files/patch-benchmarks_matmul_matmul-lace.c
+0-11devel/lace/files/patch-benchmarks_matmul_matmul-seq.c
+0-663 files not shown
+0-999 files

HardenedBSD/ports 1ad1c52www/py-yt-dlp-ejs distinfo Makefile

www/py-yt-dlp-ejs: update 0.7.0 → 0.8.0
DeltaFile
+5-5www/py-yt-dlp-ejs/distinfo
+3-2www/py-yt-dlp-ejs/Makefile
+8-72 files

HardenedBSD/ports 4f43e12net/kamailio Makefile, net/kamailio/files patch-cmake_compiler-specific.cmake patch-cmake_modules_FindUnistring.cmake

net/kamailio: Update 6.0.4 => 6.1.1

Changelog:
https://www.kamailio.org/pub/kamailio/6.1.1/ChangeLog

Release Notes:
https://www.kamailio.org/w/kamailio-v6-1-0-release-notes/
https://www.kamailio.org/w/2026/03/kamailio-v6-1-1-released/

PR:     293745
DeltaFile
+0-51net/kamailio/files/patch-cmake_compiler-specific.cmake
+34-0net/kamailio/files/patch-cmake_modules_FindUnistring.cmake
+15-7net/kamailio/Makefile
+8-9net/kamailio/files/extra-patch-cmake_modules-docs.cmake
+15-0net/kamailio/files/patch-src_modules_phonenum_CMakeLists.txt
+14-0net/kamailio/files/patch-src_modules_websocket_CMakeLists.txt
+86-672 files not shown
+99-728 files

HardenedBSD/ports 0739152lang/perl5-devel distinfo pkg-plist, lang/perl5-devel/files patch-perl.c

lang/perl5-devel: update to 5.43.9                                                                                                                                                                               
DeltaFile
+3-3lang/perl5-devel/distinfo
+2-2lang/perl5-devel/files/patch-perl.c
+4-0lang/perl5-devel/pkg-plist
+1-1lang/perl5-devel/version.mk
+10-64 files

HardenedBSD/ports d8dc359misc/onnxruntime Makefile, misc/onnxruntime/files patch-onnxruntime_core_platform_posix_env.cc

misc/onnxruntime: fix build on armv7 and aarch64

A linux-only structure member of the cpuinfo.h API is used to determine
CPU affinity on some architectures.  Use the fallback on FreeBSD, as on
platforms that do not support cpuinfo.h at all.

See also:       https://github.com/microsoft/onnxruntime/issues/23181
Approved by:    portmgr (build fix blanket)
MFH:            2026Q1
DeltaFile
+9-0misc/onnxruntime/files/patch-onnxruntime_core_platform_posix_env.cc
+0-2misc/onnxruntime/Makefile
+9-22 files

HardenedBSD/ports 4a0e97ebiology/iolib/files patch-htscodecs_htscodecs_rANS__static32x16pr.h patch-htscodecs_htscodecs_rANS__static32x16pr__neon.c

biology/iolib: fix build on armv7

This port tries to use NEON if __ARM_NEON is defined.  Unfortunately it
now requires a bunch of intrinsics available on AArch64 only, breaking
the armv7 build.  Fix the build by disabling NEON on armv7.

Approved by:    portmgr (build fix blanket)
MFH:            2026Q1
DeltaFile
+11-0biology/iolib/files/patch-htscodecs_htscodecs_rANS__static32x16pr.h
+11-0biology/iolib/files/patch-htscodecs_htscodecs_rANS__static32x16pr__neon.c
+11-0biology/iolib/files/patch-htscodecs_htscodecs_rANS__static4x16pr.c
+33-03 files

HardenedBSD/ports 3fa4c05games/wyrmgus Makefile

games/wyrmgus: broken everywhere

Please fix.  Perhaps the C++ standard version can be changed?

Approved by:    portmgr (build fix blanket)
DeltaFile
+1-1games/wyrmgus/Makefile
+1-11 files

HardenedBSD/ports 177047agraphics/colmap pkg-plist Makefile

graphics/colmap: update to 4.0.2

 - now uses OpenImageIO instead of FreeImage
 - new option ONNX to use ONNX Runtime
 - added USES=display:test, fixing one unit test

Changelog: https://github.com/colmap/colmap/releases/tag/4.0.0
Changelog: https://github.com/colmap/colmap/releases/tag/4.0.1
Changelog: https://github.com/colmap/colmap/releases/tag/4.0.2
DeltaFile
+116-34graphics/colmap/pkg-plist
+13-8graphics/colmap/Makefile
+3-3graphics/colmap/distinfo
+132-453 files

HardenedBSD/ports 63a68d9net/ucx/files patch-src_uct_ib_base_ib__device.c

net/ucx: fix build on FreeBSD 13.5 by defining s6_addr32 shim

FreeBSD's struct in6_addr does not provide s6_addr32 directly. Add a small
shim in src/uct/ib/base/ib_device.c to map s6_addr32 to the FreeBSD layout
(__u6_addr.__u6_addr32) when s6_addr32 is not already available.

PR:             293429
Tested by:      kib
MFH:            2026Q1
DeltaFile
+17-0net/ucx/files/patch-src_uct_ib_base_ib__device.c
+17-01 files

HardenedBSD/ports 6424f57databases/goose Makefile, devel/git-pkgs Makefile

*/*: Go ports that use modernc.org/sqlite are for aarch64, amd64 only

The module modernc.org/sqlite (and dependencies such as modernc.org/libc)
are only available on aarch64 and amd64 FreeBSD.  Other platforms are
not supported on FreeBSD right now.

Consistently mark ports using these with ONLY_FOR_ARCHS.

See also:       b1e7e12428e07a6f36afdc91b21ae044f4c4db3c
Approved by:    portmgr (build fix blanket)
DeltaFile
+3-0devel/git-pkgs/Makefile
+3-0databases/goose/Makefile
+3-0devel/gogs/Makefile
+3-0www/surge/Makefile
+3-0x11/histui/Makefile
+15-05 files

HardenedBSD/ports c12639csysutils/runwhen Makefile, sysutils/runwhen/files patch-src_rw-sleep.c patch-src_rw-touch.c

sysutils/runwhen: Patch compatibility with skalibs 2.14.5.1

The exec0() function has been replaced by a macro. If the <skalibs/exec.h>
header isn't included the old *exec*() function names become missing symbols.

PR:             293916
DeltaFile
+10-2sysutils/runwhen/files/patch-src_rw-sleep.c
+10-2sysutils/runwhen/files/patch-src_rw-touch.c
+10-2sysutils/runwhen/files/patch-src_rw__pass.c
+2-2sysutils/runwhen/Makefile
+32-84 files

HardenedBSD/ports a002d84textproc/krep/files patch-krep.c

textproc/krep: fix build on armv7

Add polyfill for the vmaxvq_u8() intrinsic only available on AArch64.
This should probably be upstreamed.

Approved by:    portmgr (build fix blanket)
DeltaFile
+39-0textproc/krep/files/patch-krep.c
+39-01 files

HardenedBSD/ports 02a5adetextproc/sonic Makefile

textproc/sonic: Make tokenizer features optional via OPTIONS, adopt port

This patch makes the Japanese and Chinese word segmentation features
optional via FreeBSD OPTIONS helpers, and adopts the port.
Currently the port unconditionally downloads a ~100MB UniDic Japanese
dictionary (unidic-mecab-2.1.2_src.zip) for every build, regardless of
whether the user needs Japanese tokenization. Upstream removed
tokenizer-japanese from default cargo features in v1.4.2 because it
10x'd the final binary size. This patch brings the port in line with
upstream's intent.

Changes:

 - MAINTAINER changed to wadegimpbc at tuta.com
 - Added CHINESE and JAPANESE OPTIONS using OPTIONS helpers
 - OPTIONS_DEFAULT includes CHINESE (matching upstream's default features)
 - UniDic download now conditional on JAPANESE option
 - CARGO_FEATURES uses --no-default-features with allocator-jemalloc as
   base, per cargo.mk convention (lines 23-26, 192, 197-200)

    [3 lines not shown]
DeltaFile
+11-5textproc/sonic/Makefile
+11-51 files

HardenedBSD/ports d17d38bdevel/simdjson distinfo Makefile

devel/simdjson: update to 4.4.2

Changelog: https://github.com/simdjson/simdjson/releases/tag/v4.4.1
Changelog: https://github.com/simdjson/simdjson/releases/tag/v4.4.2
DeltaFile
+3-3devel/simdjson/distinfo
+1-1devel/simdjson/Makefile
+4-42 files

HardenedBSD/ports fecd903net-mgmt/cacti88-spine Makefile

net-mgmt/cacti88-spine: fix build

net-snmp-config --cflags returns some bogus cflags, including some
dreaded -Werror flags (?!), preventing the build.  Filter those out
as a stop gap measure.

PR:             293905
MFH:            2026Q1
Approved by:    portmgr (build fix blanket)
Sponsored by:   Raptor Computing Systems, LLC
DeltaFile
+1-1net-mgmt/cacti88-spine/Makefile
+1-11 files