HardenedBSD/src fdc5ff6lib/libnetbsd/sys cdefs.h, sbin/route route_netlink.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+30-0lib/libnetbsd/sys/cdefs.h
+6-6sbin/route/route_netlink.c
+11-1sys/netlink/route/rt.c
+3-2usr.bin/netstat/route_netlink.c
+5-0share/man/man5/style.mdoc.5
+2-0sys/netlink/netlink_snl_route_parsers.h
+57-96 files

HardenedBSD/src d5d56c4lib/libnetbsd/sys cdefs.h, sbin/route route_netlink.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+30-0lib/libnetbsd/sys/cdefs.h
+6-6sbin/route/route_netlink.c
+11-1sys/netlink/route/rt.c
+3-2usr.bin/netstat/route_netlink.c
+5-0share/man/man5/style.mdoc.5
+2-0sys/netlink/netlink_snl_route_parsers.h
+57-96 files

HardenedBSD/ports 13216cddevel/py-yamlloader Makefile pkg-descr, editors/zed distinfo Makefile.crates

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+77-59editors/zed/distinfo
+37-28editors/zed/Makefile.crates
+26-0devel/py-yamlloader/Makefile
+8-8editors/zed/files/patch-Cargo.lock
+14-0www/py-django-photologue/files/patch-setup.py
+12-0devel/py-yamlloader/pkg-descr
+174-95516 files not shown
+731-355522 files

HardenedBSD/ports 64cc754astro/traccar distinfo Makefile

astro/traccar: update to 6.12.1
DeltaFile
+3-3astro/traccar/distinfo
+1-2astro/traccar/Makefile
+1-1astro/traccar/pkg-plist
+5-63 files

HardenedBSD/ports ac0b421dns Makefile

dns/knot-resolver6: Connect to build

Reported by:    antoine (via email)
Fixes:          36bded72682c (Add new port)
MFH:            2026Q1
DeltaFile
+1-0dns/Makefile
+1-01 files

HardenedBSD/ports aa90efedevel/apache-commons-configuration Makefile

devel/apache-commons-configuration: deprecate

Multiple reasons to deprecate:
https://commons.apache.org/proper/commons-configuration/#Commons_Configuration_1.x_and_2.x
- 'The 1.x codebase no longer receives updates.'
- 'Denial of service issues that rely on loading untrusted data from
  configuration files, or passing untrusted data to the API, are outside
  the scope of the 1.x security model and will not be fixed.'
- Version 2 exists since 2016
- the port just installs the jar, it does not build anything
- nothing in the ports tree uses this
- no maintainer

Approved-by:    no maintainer
DeltaFile
+4-1devel/apache-commons-configuration/Makefile
+4-11 files

HardenedBSD/src b5366f8sbin/route route_netlink.c

route(8): show expire time of each nexthop in monitor

Reviewed by: glebius
Differential Revision: https://reviews.freebsd.org/D55514
DeltaFile
+2-0sbin/route/route_netlink.c
+2-01 files

HardenedBSD/src 8230cf1sbin/route route_netlink.c

route(8): Fix -expire argument when using netlink

Also fixes nexthop expire value on route get using netlink.

Reviewed by: glebius
MFC after: 3 weeks
Differential Revision: https://reviews.freebsd.org/D55444
DeltaFile
+4-6sbin/route/route_netlink.c
+4-61 files

HardenedBSD/src 2f7cfeeusr.bin/netstat route_netlink.c

netstat(1): Fix expire column in -r flag using netlink

Reviewed by: glebius
MFC after: 3 weeks
Differential Revision: https://reviews.freebsd.org/D55440
DeltaFile
+3-2usr.bin/netstat/route_netlink.c
+3-21 files

HardenedBSD/src ff6d1fasys/netlink netlink_snl_route_parsers.h, sys/netlink/route rt.c

rtnetlink: Add support for nexthop expiration in new/get route

Before this change, netlink only shows nexthop
expire value if route is not multipath.
Now it can set expire time during route creation.
Also, show expire time of multipath nexthops.

Reviewed by: glebius
MFC after: 3 weeks
Differential Revision: https://reviews.freebsd.org/D55442
DeltaFile
+11-1sys/netlink/route/rt.c
+2-0sys/netlink/netlink_snl_route_parsers.h
+13-12 files

HardenedBSD/ports 85333a2net-im/py-matrix-synapse pkg-descr Makefile

net-im/py-matrix-synapse: Update WWW and description

PR:             274257
Approved by:    Sascha Biberhofer <ports at skyforge.at> (maintainer,
timeout > 2 weeks)
Approved by:    db@, yuri@ (Mentors, implicit)
DeltaFile
+2-2net-im/py-matrix-synapse/pkg-descr
+1-1net-im/py-matrix-synapse/Makefile
+3-32 files

HardenedBSD/ports 2ea0d37editors/zed distinfo Makefile.crates, editors/zed/files patch-Cargo.lock patch-crates_gpui_src_platform_blade_blade__renderer.rs

editors/zed: Update to 0.225.9

Changelog: https://github.com/zed-industries/zed/releases/tag/v0.225.9

Reported by:    GitHub (watch releases)
DeltaFile
+77-59editors/zed/distinfo
+37-28editors/zed/Makefile.crates
+8-8editors/zed/files/patch-Cargo.lock
+0-11editors/zed/files/patch-crates_gpui_src_platform_blade_blade__renderer.rs
+11-0editors/zed/files/patch-crates_audio_src_audio.rs
+4-4editors/zed/files/patch-crates_project_src_agent__server__store.rs
+137-1106 files not shown
+150-12312 files

HardenedBSD/ports ed534f0math/R-cran-pls distinfo Makefile

math/R-cran-pls: Update to 2.9-0

Reported by:    portscout
DeltaFile
+3-3math/R-cran-pls/distinfo
+1-1math/R-cran-pls/Makefile
+4-42 files

HardenedBSD/ports f69201fwww/py-django-photologue Makefile, www/py-django-photologue/files patch-setup.py

www/py-django-photologue: Fix stage QA

* This was overlooked in 21900d66eda3 and was then noticed
  retrospectively during a bulk run after stage QA was extended in
  f35f902eb8f1:

[...]
====> Running Q/A tests (stage-qa)
Error: Python package installs top-level 'scripts/' directory in site-packages
Error:   Location: lib/python3.11/site-packages/scripts
[...]

* Bump PORTREVISION due changed package contents.

Approved by:    portmgr (build fix blanket)
Fixes:  21900d66eda3 www/py-django-photologue: Update to 3.18
DeltaFile
+14-0www/py-django-photologue/files/patch-setup.py
+1-0www/py-django-photologue/Makefile
+15-02 files

HardenedBSD/ports 95e059fdevel Makefile, devel/py-yamlloader Makefile pkg-descr

devel/py-yamlloader: New port

This module provides loaders and dumpers for PyYAML.

Currently, an OrderedDict loader/dumper is implemented, allowing to keep
items order when loading respective dumping a file from/to an
OrderedDict.

(Python 3.8+: Also regular dicts are supported and are the default items
to be loaded to.  As of Python 3.7 preservation of insertion order is a
language feature of regular dicts.)

This project was originally mirrored from "yamlordereddict" and contains
several improvements including automated testing and the much faster
C-versions of the Loaders/Dumpers.
DeltaFile
+26-0devel/py-yamlloader/Makefile
+12-0devel/py-yamlloader/pkg-descr
+3-0devel/py-yamlloader/distinfo
+1-0devel/Makefile
+42-04 files

HardenedBSD/ports 2baaf16archivers/javatar Makefile, audio/atunes Makefile

*/*: bump portrevision after java_default=21 update

PR:     272855
DeltaFile
+2-2java/java-subversion/Makefile
+1-1comms/java-simple-serial-connector/Makefile
+1-1archivers/javatar/Makefile
+1-1audio/atunes/Makefile
+1-1audio/jid3lib/Makefile
+1-1audio/musiccontrol/Makefile
+7-7488 files not shown
+495-218494 files

HardenedBSD/ports 17e021a. UPDATING, Mk bsd.default-versions.mk

Mk/bsd.default-versions.mk: bump java default to 21

After an extensive time of testing OpenJDK 21 LTS is now the default
java version on FreeBSD.
Some major ports already used Java 21 and some olders ports are now
pinned to OpenJDK 8 or other versions.

For armv6/armv7 OpenJDK 11 is the latest version with support
for these platforms on FreeBSD.

Thanks to everybody involved in making Java a vivid environment on
FreeBSD.

PR:     272855
Relnotes:       yes
DeltaFile
+8-0UPDATING
+5-1Mk/bsd.default-versions.mk
+13-12 files

HardenedBSD/src db5344alib/libnetbsd/sys cdefs.h

lib/libnetbsd: bring in `__type_m{ax,in}*` macro family

These macros are used by some of the NetBSD tests which calculate the
size of types, e.g., `__type_max(time_t)`.

This wraps up the set of macros needed in order to update to the a
netbsd-tests snapshot from this past month.

Obtained from:  https://github.com/netbsd/src (55b4b44)
MFC after:      1 week
DeltaFile
+30-0lib/libnetbsd/sys/cdefs.h
+30-01 files

HardenedBSD/src 2abdbe9share/man/man5 style.mdoc.5

style.mdoc: Add example manuals to FILES

This is the OG meat and potatoes.

MFC after:              3 days
Reviewed by:            0mp, carlavilla
Differential Revision:  https://reviews.freebsd.org/D55301
DeltaFile
+5-0share/man/man5/style.mdoc.5
+5-01 files

HardenedBSD/src b53c5cblib/libc/gen uexterr_format.c, share/man/man4 rge.4

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+189-102usr.sbin/lpr/lpd/recvjob.c
+25-9sys/dev/ath/if_ath_keycache.c
+20-12usr.sbin/lpr/lpd/lpd.c
+20-8lib/libc/gen/uexterr_format.c
+18-8sys/dev/mwl/if_mwl.c
+8-8share/man/man4/rge.4
+280-1475 files not shown
+306-15611 files

HardenedBSD/src 0ddb183lib/libc/gen uexterr_format.c, share/man/man4 rge.4

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+189-102usr.sbin/lpr/lpd/recvjob.c
+25-9sys/dev/ath/if_ath_keycache.c
+20-12usr.sbin/lpr/lpd/lpd.c
+20-8lib/libc/gen/uexterr_format.c
+18-8sys/dev/mwl/if_mwl.c
+8-8share/man/man4/rge.4
+280-1475 files not shown
+306-15611 files

HardenedBSD/ports c37b01esysutils/py-salt Makefile

sysutils/py-salt: unbreak the ports tree
DeltaFile
+1-1sysutils/py-salt/Makefile
+1-11 files

HardenedBSD/src b126abclib/libfetch common.c, sys/kern subr_module.c

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+46-56lib/libfetch/common.c
+14-11usr.sbin/bsdinstall/scripts/bootconfig
+18-0tools/build/mk/OptionalObsoleteFiles.inc
+7-6usr.bin/diff/diffreg_new.c
+4-4usr.bin/m4/eval.c
+0-8sys/kern/subr_module.c
+89-8518 files not shown
+133-9524 files

HardenedBSD/ports 61eaad0devel/electron40 distinfo, devel/electron40/files patch-electron_spec_api-browser-window-spec.ts

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+562-135www/drupal11/pkg-plist
+40-0security/py-unicode-show/Makefile
+27-9devel/electron40/files/patch-electron_spec_api-browser-window-spec.ts
+22-0security/py-unicode-show/pkg-plist
+11-11devel/electron40/distinfo
+7-7www/pocket-id/distinfo
+669-16238 files not shown
+748-23244 files

HardenedBSD/src 6fd9887lib/libc/gen uexterr_format.c err.3

Refinements to the output when the EXTERROR_VERBOSE environment is set

When kernel external errors are available they are included in the
err(3) library function messages. In addition to the extended error
itself, the kernel also tracks the kernel file and line number at
which the error was generated. This additional information is not
included in the err(3) messages unless the EXTERROR_VERBOSE environment
variable is present. Currently, when EXTERROR_VERBOSE is present,
all the internal extended error information associated with the
error is printed most of which is redundant with the formatted error
message printed by err(3). This change will add only the kernel
file and line number to the err(3) message when EXTERROR_VERBOSE
is present and set to "brief".

Sample output with bad protection bits to mmap:

guest_16 % ./Example bigfile
Example: mmap bigfile: Invalid argument (unknown PROT bits 0x8)


    [12 lines not shown]
DeltaFile
+20-8lib/libc/gen/uexterr_format.c
+7-1lib/libc/gen/err.3
+27-92 files

HardenedBSD/src 56fbfd1usr.sbin/lpr/lpd lpd.c lpd.8

lpd: Add timeout option

Set a 120-second receive timeout on all client connections, and add a
command-line option to change that value.

MFC after:      1 week
Reviewed by:    markj
Differential Revision:  https://reviews.freebsd.org/D55400
DeltaFile
+20-12usr.sbin/lpr/lpd/lpd.c
+7-1usr.sbin/lpr/lpd/lpd.8
+27-132 files

HardenedBSD/src 9065be0usr.sbin/lpr/lpd recvjob.c

lpd: Improve robustness

* Check for integer overflow when receiving file sizes.

* Check for buffer overflow when receiving file names, and fully
  validate the names.

* Check for integer overflow when checking for available disk space.

* Check for I/O errors when sending status codes.

* Enforce one job per connection and one control file per job (see
  code comments for additional details).

* Simplify readfile(), avoiding constructs vulnerable to integer
  overflow.

* Don't delete files we didn't create.


    [9 lines not shown]
DeltaFile
+189-102usr.sbin/lpr/lpd/recvjob.c
+189-1021 files

HardenedBSD/ports f625d43deskutils/podman-desktop Makefile

deskutils/podman-desktop: Bump port revision after electron40 update (1d5f6b6a85af)
DeltaFile
+1-1deskutils/podman-desktop/Makefile
+1-11 files

HardenedBSD/ports 1d5f6b6devel/electron40 distinfo Makefile, devel/electron40/files patch-electron_spec_api-browser-window-spec.ts patch-chrome_common_chrome__features.cc

devel/electron40: Update to 40.6.1

Changelog: https://github.com/electron/electron/releases/tag/v40.6.1

Reported by:    GitHub (watch releases)
DeltaFile
+27-9devel/electron40/files/patch-electron_spec_api-browser-window-spec.ts
+11-11devel/electron40/distinfo
+4-4devel/electron40/files/patch-chrome_common_chrome__features.cc
+3-3devel/electron40/files/patch-chrome_common_chrome__features.h
+2-2devel/electron40/Makefile
+1-1devel/electron40/Makefile.version
+48-301 files not shown
+49-317 files

HardenedBSD/ports fe3650awww/pocket-id distinfo Makefile

www/pocket-id: Update to 2.3.0

ChangeLog: https://github.com/pocket-id/pocket-id/releases/tag/v2.3.0
DeltaFile
+7-7www/pocket-id/distinfo
+1-1www/pocket-id/Makefile
+8-82 files