HardenedBSD/src b7a8e9asys/amd64/amd64 initcpu.c, usr.sbin/bhyveload bhyveload.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+12-14usr.sbin/bhyveload/bhyveload.c
+1-1sys/amd64/amd64/initcpu.c
+13-152 files

HardenedBSD/src 79ecf4csys/amd64/amd64 initcpu.c, usr.sbin/bhyveload bhyveload.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+12-14usr.sbin/bhyveload/bhyveload.c
+1-1sys/amd64/amd64/initcpu.c
+13-152 files

HardenedBSD/ports 2068444x11/waveterm distinfo Makefile.crates, x11/waveterm/files patch-swc_bindings_Cargo.lock

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+33,735-0x11/waveterm/files/packagejsons/package-lock.json
+1,281-0x11/waveterm/distinfo
+995-0x11/waveterm/files/packagejsons/tsunami/templates/package-lock.json
+635-0x11/waveterm/Makefile.crates
+497-0x11/waveterm/pkg-plist
+329-0x11/waveterm/files/patch-swc_bindings_Cargo.lock
+37,472-046 files not shown
+38,513-13052 files

HardenedBSD/ports f2d6224net/dhcpd/files patch-pfutils.c patch-dhcp-options.5

net/dhcpd: Remove unnecessary patches

Forgot to remove in previous commit.

PR:             293480
Reported by:    Sulev-Madis Silber <bugs-freebsd-org916 at ketas.si.pri.ee>
DeltaFile
+0-34net/dhcpd/files/patch-pfutils.c
+0-13net/dhcpd/files/patch-dhcp-options.5
+0-11net/dhcpd/files/patch-tables.c
+0-583 files

HardenedBSD/ports 2f8ffd7sysutils/terraform distinfo Makefile

sysutils/terraform: Update to 1.14.6

ChangeLog:
https://github.com/hashicorp/terraform/releases/tag/v1.14.6
DeltaFile
+27-27sysutils/terraform/distinfo
+1-2sysutils/terraform/Makefile
+28-292 files

HardenedBSD/ports aa7199egames/openttd distinfo Makefile

games/openttd: update OpenTTD to bugfix version 15.2

PR:     292716
DeltaFile
+3-3games/openttd/distinfo
+1-1games/openttd/Makefile
+1-1games/openttd/pkg-plist
+5-53 files

HardenedBSD/ports 1b057b6x11/waveterm distinfo Makefile.crates, x11/waveterm/files patch-swc_bindings_Cargo.lock

x11/waveterm: Add port: Open source, AI-native terminal that sees your entire workspace

Wave is an open-source AI-native terminal built for seamless
workflows.

Wave isn't just another terminal emulator; it's a rethink on how
terminals are built. Wave combines command line with the power of the
open web to help veteran CLI users and new developers alike.

WWW: https://www.waveterm.dev/
DeltaFile
+33,735-0x11/waveterm/files/packagejsons/package-lock.json
+1,281-0x11/waveterm/distinfo
+995-0x11/waveterm/files/packagejsons/tsunami/templates/package-lock.json
+635-0x11/waveterm/Makefile.crates
+497-0x11/waveterm/pkg-plist
+329-0x11/waveterm/files/patch-swc_bindings_Cargo.lock
+37,472-017 files not shown
+38,145-023 files

HardenedBSD/src 6da9d46usr.sbin/bhyveload bhyveload.c

bhyveload: simplify cb_open() and eliminate minor TOCTOU

It's not at all clear why I wrote it like this, but we can do better.

I wouldn't think this really has any meaningful security implications
since the hierarchy in question can't really be modified by the guest
scripts, but it would seem to make it a little more robust.

Fixes:  6779d44bd878e3c ("bhyveload: use a dirfd to support -h")
Reviewed by:    bnovkov, markj
Differential Revision:  https://reviews.freebsd.org/D55379
DeltaFile
+12-14usr.sbin/bhyveload/bhyveload.c
+12-141 files

HardenedBSD/ports 014d770print/lyx pkg-plist distinfo

print/lyx: Update to 2.4.5
DeltaFile
+4-4print/lyx/pkg-plist
+3-3print/lyx/distinfo
+1-2print/lyx/Makefile
+8-93 files

HardenedBSD/ports bf7ece9multimedia/olive Makefile, multimedia/olive/files patch-app_codec_ffmpeg_ffmpegdecoder.cpp patch-app_codec_ffmpeg_ffmpegencoder.cpp

multimedia/olive: Unbreak
DeltaFile
+123-0multimedia/olive/files/patch-app_codec_ffmpeg_ffmpegdecoder.cpp
+108-0multimedia/olive/files/patch-app_codec_ffmpeg_ffmpegencoder.cpp
+23-0multimedia/olive/files/patch-app_codec_oiio_oiiodecoder.cpp
+22-0multimedia/olive/files/patch-ext_core_src_render_audioparams.cpp
+15-0multimedia/olive/files/patch-app_audio_audioprocessor.cpp
+0-2multimedia/olive/Makefile
+291-26 files

HardenedBSD/ports c84c766science/py-scikit-learn distinfo Makefile, science/py-scikit-learn/files patch-pyproject.toml

science/py-scikit-learn: Update to 1.8.0
DeltaFile
+15-7science/py-scikit-learn/files/patch-pyproject.toml
+3-3science/py-scikit-learn/distinfo
+1-1science/py-scikit-learn/Makefile
+19-113 files

HardenedBSD/ports 6ae2e77textproc/p5-utf8-all distinfo Makefile

textproc/p5-utf8-all: Update to 0.026
DeltaFile
+3-3textproc/p5-utf8-all/distinfo
+1-1textproc/p5-utf8-all/Makefile
+4-42 files

HardenedBSD/ports a836bbetextproc/py-elementpath distinfo Makefile

textproc/py-elementpath: Update to 5.1.1
DeltaFile
+3-3textproc/py-elementpath/distinfo
+1-1textproc/py-elementpath/Makefile
+4-42 files

HardenedBSD/ports 4ddcbffwww/py-asgiref distinfo Makefile

www/py-asgiref: Update to 3.11.1
DeltaFile
+3-3www/py-asgiref/distinfo
+1-1www/py-asgiref/Makefile
+4-42 files

HardenedBSD/ports 95ec2a8www/py-fastapi distinfo Makefile

www/py-fastapi: Update to 0.134.0
DeltaFile
+3-3www/py-fastapi/distinfo
+1-1www/py-fastapi/Makefile
+4-42 files

HardenedBSD/src 6099b46sys/amd64/amd64 initcpu.c

amd64 initializecpu(): use 64bit type for rcr4() result

Right now %cr4 defined bits fit into the low word, but this is not true
with FRED.

Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
DeltaFile
+1-1sys/amd64/amd64/initcpu.c
+1-11 files

HardenedBSD/ports 3b0d87dnet/mosquitto pkg-plist Makefile

net/mosquitto: Revert 6345b479ec4b

I read the diff backwards...
DeltaFile
+4-4net/mosquitto/pkg-plist
+1-1net/mosquitto/Makefile
+5-52 files

HardenedBSD/ports 6345b47net/mosquitto pkg-plist Makefile

net/mosquitto: Add @sample

(As suggested by makeplist)
DeltaFile
+4-4net/mosquitto/pkg-plist
+1-0net/mosquitto/Makefile
+5-42 files

HardenedBSD/ports e09b77bdns/bind9-devel/files extrapatch-bind-min-override-ttl, dns/bind918 pkg-plist

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+56-0security/clamtk/Makefile
+22-0security/clamtk/pkg-plist
+6-14multimedia/guvcview/files/patch-guvcview_video__capture.c
+17-0math/py-mpmath/files/patch-pyproject.toml
+8-8dns/bind9-devel/files/extrapatch-bind-min-override-ttl
+7-7dns/bind918/pkg-plist
+116-29170 files not shown
+734-640176 files

HardenedBSD/ports 5b01c66math/py-mpmath Makefile distinfo, math/py-mpmath/files patch-pyproject.toml

math/py-mpmath: Update to 1.4.0
DeltaFile
+17-0math/py-mpmath/files/patch-pyproject.toml
+4-4math/py-mpmath/Makefile
+3-3math/py-mpmath/distinfo
+24-73 files

HardenedBSD/ports 0cf45c1x11-wm/labwc distinfo Makefile

x11-wm/labwc: update to 0.9.4

Changes:        https://github.com/labwc/labwc/releases/tag/0.9.4
Reported by:    GitHub (watch releases)
DeltaFile
+3-3x11-wm/labwc/distinfo
+3-1x11-wm/labwc/Makefile
+6-42 files

HardenedBSD/ports df1c888devel/p5-ExtUtils-HasCompiler Makefile

devel/p5-ExtUtils-HasCompiler: Fix download location

- Respect change of distribution location @CPAN,
  so that portscout can spot future versions.

PR:     293514
DeltaFile
+1-0devel/p5-ExtUtils-HasCompiler/Makefile
+1-01 files

HardenedBSD/ports e4dc1d8devel/p5-ExtUtils-Builder-Compiler Makefile pkg-plist

devel/p5-ExtUtils-Builder-Compiler: Update 0.032 => 0.035

ChangeLog:
https://metacpan.org/release/LEONT/ExtUtils-Builder-Compiler-0.035/source/Changes

PR:     293513
DeltaFile
+4-3devel/p5-ExtUtils-Builder-Compiler/Makefile
+4-3devel/p5-ExtUtils-Builder-Compiler/pkg-plist
+3-3devel/p5-ExtUtils-Builder-Compiler/distinfo
+11-93 files

HardenedBSD/ports 7c54488devel/p5-ExtUtils-Builder Makefile distinfo

devel/p5-ExtUtils-Builder: Update 0.017 => 0.020

ChangeLog:
https://metacpan.org/release/LEONT/ExtUtils-Builder-0.020/source/Changes

PR:     293512
DeltaFile
+4-2devel/p5-ExtUtils-Builder/Makefile
+3-3devel/p5-ExtUtils-Builder/distinfo
+2-0devel/p5-ExtUtils-Builder/pkg-plist
+9-53 files

HardenedBSD/ports f076286security/clamtk Makefile distinfo

security/clamtk: Update 6.18 => 6.19, take maintainership, switch upstream, improve port

Changelog:
https://github.com/piposeimandi/clamtk/blob/32cc526/CHANGES

Switch upstream to most active fork.
Improve port, fix warnings from portclippy.

Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>
DeltaFile
+16-23security/clamtk/Makefile
+3-3security/clamtk/distinfo
+1-4security/clamtk/pkg-plist
+2-2security/clamtk/pkg-descr
+22-324 files

HardenedBSD/ports 06330a9. MOVED, security Makefile

security/clamtk: Resurect port: Revert "security/clamtk: Remove expired port"

This reverts commit 8ee1e427d19133777036384a3b1415f470304227.
DeltaFile
+63-0security/clamtk/Makefile
+25-0security/clamtk/pkg-plist
+3-0security/clamtk/distinfo
+2-0security/clamtk/pkg-descr
+0-1MOVED
+1-0security/Makefile
+94-16 files

HardenedBSD/ports 0f21dc0devel/reposilite distinfo Makefile, devel/reposilite/files reposilite.in

devel/reposilite: Update to 3.5.27

* Disable colors in logs and interaction in the daemon

Co-authored-by: Michael Osipov <michaelo at FreeBSD.org>
PR:             293486
DeltaFile
+3-3devel/reposilite/distinfo
+1-2devel/reposilite/Makefile
+1-1devel/reposilite/files/reposilite.in
+5-63 files

HardenedBSD/ports 429b9cearabic/libreoffice distinfo, chinese/libreoffice-zh_CN distinfo

editors/libreoffice: update to 26.2.1 release (+)

LibreOffice 26.2.1, the first maintenance update to the LibreOffice 26.2 branch,
delivers targeted bug fixes and stability improvements contributed by a global
community of developers, QA engineers, and ecosystem companies.

Announce:       https://blog.documentfoundation.org/blog/2026/02/26/tdf-releases-libreoffice-2621/
Release notes:  https://wiki.documentfoundation.org/ReleaseNotes/26.2
Changelog:      https://wiki.documentfoundation.org/Releases/26.2.1/RC1 \
                https://wiki.documentfoundation.org/Releases/26.2.1/RC2
DeltaFile
+5-7editors/libreoffice/distinfo
+5-5editors/libreoffice-dz/distinfo
+5-5arabic/libreoffice/distinfo
+5-5chinese/libreoffice-zh_CN/distinfo
+5-5chinese/libreoffice-zh_TW/distinfo
+5-5editors/libreoffice-am/distinfo
+30-32116 files not shown
+500-502122 files

HardenedBSD/ports 9b79935net/xrdp Makefile

net/xrdp: unbreak build WITH=FUSE (+)

FUSE now requires USES=fuse:3 instead of old library

Reported by:    bulk -t
Approved by:    portmgr blanket
DeltaFile
+1-1net/xrdp/Makefile
+1-11 files

HardenedBSD/ports eed35canet/mosquitto pkg-plist

net/mosquitto: pet stage-qa, plist entry for rc.d script is always handled by USE_RC_SUBR

Reported by:    bulk -t
Approved by:    portmgr blanket
DeltaFile
+0-1net/mosquitto/pkg-plist
+0-11 files