HardenedBSD/src b84418fsys/dev/usb usbdevs, usr.sbin/syslogd syslogd.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+22-0usr.sbin/syslogd/tests/syslogd_test.sh
+7-0sys/dev/usb/usbdevs
+1-1usr.sbin/syslogd/syslogd.c
+30-13 files

HardenedBSD/src cda272asys/dev/usb usbdevs, usr.sbin/syslogd syslogd.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+22-0usr.sbin/syslogd/tests/syslogd_test.sh
+7-0sys/dev/usb/usbdevs
+1-1usr.sbin/syslogd/syslogd.c
+30-13 files

HardenedBSD/ports 24ca5a0deskutils/skim distinfo Makefile, multimedia/termusic distinfo Makefile

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+1,307-0multimedia/termusic/distinfo
+692-0multimedia/termusic/Makefile
+87-91deskutils/skim/distinfo
+99-25textproc/jsongrep/distinfo
+43-45deskutils/skim/Makefile
+50-13textproc/jsongrep/Makefile
+2,278-17429 files not shown
+2,408-30835 files

HardenedBSD/ports 176b5c9security/vuxml/vuln 2026.xml

security/vuxml: document gitlab vulnerabilities
DeltaFile
+51-0security/vuxml/vuln/2026.xml
+51-01 files

HardenedBSD/ports da5a426science/phonopy distinfo Makefile, science/py-phonopy Makefile distinfo

science/{,py-}phonopy: update 3.0.1 → 3.4.0
DeltaFile
+8-1science/py-phonopy/Makefile
+3-3science/py-phonopy/distinfo
+3-3science/phonopy/distinfo
+1-1science/phonopy/Makefile
+15-84 files

HardenedBSD/ports 71ac25btextproc/cpp-peglib distinfo Makefile

textproc/cpp-peglib: update 1.10.1 → 1.10.2
DeltaFile
+3-3textproc/cpp-peglib/distinfo
+2-2textproc/cpp-peglib/Makefile
+5-52 files

HardenedBSD/ports f799474www/cpp-httplib Makefile distinfo

www/cpp-httplib: update 0.37.2 → 0.40.0
DeltaFile
+7-1www/cpp-httplib/Makefile
+3-3www/cpp-httplib/distinfo
+10-42 files

HardenedBSD/ports 165c6e6textproc/jsongrep distinfo Makefile

textproc/jsongrep: update 0.7.0 → 0.8.0
DeltaFile
+99-25textproc/jsongrep/distinfo
+50-13textproc/jsongrep/Makefile
+149-382 files

HardenedBSD/ports 0d3f05bdeskutils/skim distinfo Makefile

deskutils/skim: update 4.0.0 → 4.0.1
DeltaFile
+87-91deskutils/skim/distinfo
+43-45deskutils/skim/Makefile
+130-1362 files

HardenedBSD/ports ad8a777multimedia Makefile, multimedia/termusic distinfo Makefile

multimedia/termusic: New port: Music Player TUI
DeltaFile
+1,307-0multimedia/termusic/distinfo
+692-0multimedia/termusic/Makefile
+11-0multimedia/termusic/pkg-descr
+1-0multimedia/Makefile
+2,011-04 files

HardenedBSD/src 6904270usr.sbin/syslogd syslogd.c, usr.sbin/syslogd/tests syslogd_test.sh

syslogd: Fix ereregex property filters and add test

This change fixes Bug 293879, where ereregex filters in syslogd
did not handle alternation correctly.

The issue appears to come from mixing up two different kinds of
flags: syslogd's internal serialized filter flags in
usr.sbin/syslogd/syslogd.h, and the regex compilation flags from
include/regex.h. ereregex was storing REG_EXTENDED in cmp_flags,
even though cmp_flags is meant to carry syslogd's own FILT_FLAG_*
values for configuration serialization and reconstruction.

REG_EXTENDED has the same bit value as FILT_FLAG_EXCLUDE, so the
filter could be reconstructed with the wrong semantics.

The fix stores FILT_FLAG_EXTENDED instead, allowing syslogd to
correctly REG_EXTENDED when compiling the regex.

A test was also added for both ereregex and !ereregex filters.

    [7 lines not shown]
DeltaFile
+22-0usr.sbin/syslogd/tests/syslogd_test.sh
+1-1usr.sbin/syslogd/syslogd.c
+23-12 files

HardenedBSD/ports 70c8688security/nmap/files patch-libdnet-stripped_configure patch-nping_Crypto.cc

security/nmap: Update to 7.99
DeltaFile
+0-29security/nmap/files/patch-libdnet-stripped_configure
+0-13security/nmap/files/patch-nping_Crypto.cc
+0-13security/nmap/files/patch-nse__openssl.cc
+0-13security/nmap/files/patch-nse__ssl__cert.cc
+0-11security/nmap/files/patch-libdnet-stripped_src_intf.c
+3-3security/nmap/files/patch-liblua_Makefile
+3-822 files not shown
+7-878 files

HardenedBSD/ports 79b10aesecurity/nmap-devel Makefile distinfo

security/nmap-devel: Update to the latest GH commit
DeltaFile
+3-4security/nmap-devel/Makefile
+3-3security/nmap-devel/distinfo
+6-72 files

HardenedBSD/src e7de7fesys/dev/usb usbdevs

usbdevs: Add USB device IDs for Nuand bladeRF SDR

Add vendor and product IDs for bladeRF family of USB software defined radios manufactured by Nuand LLC.

Reviewed by:    imp, adrian
Differential Revision:  https://reviews.freebsd.org/D54733
DeltaFile
+7-0sys/dev/usb/usbdevs
+7-01 files

HardenedBSD/ports eba9e07accessibility/py-atspi distinfo Makefile

accessibility/py-atspi: update to 2.58.2

Update to 2.58.2

NO_ARCH= yes (truckman)

PR:             293976
DeltaFile
+3-3accessibility/py-atspi/distinfo
+2-3accessibility/py-atspi/Makefile
+5-62 files

HardenedBSD/ports 8a410b3x11-toolkits/libadwaita distinfo Makefile

x11-toolkits/libadwaita: update to 1.8.5.1

Update to 1.8.5.1

  ===============
  Version 1.8.5.1
  ===============

  - Translation updates
    - Czech

Pet portclippy (truckman)

PR:             293982
DeltaFile
+3-3x11-toolkits/libadwaita/distinfo
+1-1x11-toolkits/libadwaita/Makefile
+4-42 files

HardenedBSD/ports 9b61aedx11/zenity4 Makefile distinfo

x11/zenity4: update to 4.2.2

Update to 4.2.2

  Zenity 4.2.2
    Bugfix release for Zenity 4.2.x.

    Changes and fixes since 4.2.1:
    - colview: Actually hide header via --hide-header when possible (Logan
      Rathbone) (!58)

PR:             293975
DeltaFile
+4-4x11/zenity4/Makefile
+3-3x11/zenity4/distinfo
+7-72 files

HardenedBSD/ports 79b49besecurity/py-argon2-cffi Makefile distinfo

security/py-argon2-cffi: Update to 25.1.0

PR:             293712
Reported by:    wen@
Approved by:    maintainer(timeout, > 14 days)
DeltaFile
+5-3security/py-argon2-cffi/Makefile
+3-3security/py-argon2-cffi/distinfo
+8-62 files

HardenedBSD/src 528c683sys/fs/nfsserver nfs_nfsdsocket.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+2-1sys/fs/nfsserver/nfs_nfsdsocket.c
+2-11 files

HardenedBSD/src 77d0196sys/fs/nfsserver nfs_nfsdsocket.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+2-1sys/fs/nfsserver/nfs_nfsdsocket.c
+2-11 files

HardenedBSD/ports aa9e1e3misc/gemini-cli pkg-plist, misc/gemini-cli/files package-lock.json

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+3,465-74misc/gemini-cli/pkg-plist
+0-1,105science/py-tensorflow/pkg-plist
+702-100misc/gemini-cli/files/package-lock.json
+91-173www/nginx-acme/distinfo
+146-84science/py-tensorflow/Makefile.MASTER_SITES
+132-56science/py-tensorflow/Makefile
+4,536-1,592152 files not shown
+7,171-2,535158 files

HardenedBSD/ports 32b965ascience/orthanc Makefile

science/orthanc: Use unversioned dcmtk DATADIR

The dcmtk port's DATADIR includes PKGVERSION in the directory
name, e.g. PREFIX/share/dcmtk-3.7.0.  Starting with dcmtk-3.7.0_1,
a symlink to PREFIX/share/dcmtk is also installed, so that consumers
like orthanc, which need to access the dcmtk dictionary files, won't
break every time dcmtk is upgraded.

This commit removes the dcmtk version from the orthanc config to
use the symlink and avoid future breakage.
DeltaFile
+4-4science/orthanc/Makefile
+4-41 files

HardenedBSD/ports a0b10ffaudio/noson distinfo pkg-plist

audio/noson: Update to 2.12.27
DeltaFile
+3-3audio/noson/distinfo
+1-1audio/noson/pkg-plist
+1-1audio/noson/Makefile
+5-53 files

HardenedBSD/ports e28222faudio/noson-app distinfo Makefile

audio/noson-app: Update to 5.6.19
DeltaFile
+3-3audio/noson-app/distinfo
+1-1audio/noson-app/Makefile
+4-42 files

HardenedBSD/ports 84e3ba6net-im/gotosocial distinfo Makefile

net-im/gotosocial: update to 0.21.2

PR: 293987
DeltaFile
+5-5net-im/gotosocial/distinfo
+1-1net-im/gotosocial/Makefile
+6-62 files

HardenedBSD/ports f94407feditors/neovim distinfo Makefile

editors/neovim: Update to 0.11.7
DeltaFile
+9-9editors/neovim/distinfo
+4-4editors/neovim/Makefile
+13-132 files

HardenedBSD/ports f6eba67audio/cantata distinfo Makefile, audio/cantata/files patch-models_streamsmodel.cpp

audio/cantata: Update to 3.4.0
DeltaFile
+14-0audio/cantata/files/patch-models_streamsmodel.cpp
+3-7audio/cantata/distinfo
+3-5audio/cantata/Makefile
+20-123 files

HardenedBSD/src b65e7b4sys/fs/nfsserver nfs_nfsdsocket.c

nfs_nfsdsocket.c: All Copy and Clone across file systems

For some server file system types, such as ZFS, a Copy/Clone
operation can be done across file systems of the same file
system type.

As such, this patch allows the Copy/Clone to be attempted
when the file handles are for files on different file systems.

This fixes a problem for exported ZFS file systems when a
copy_files on file_range(2) between file systems in the same
NFSv4 mount is attempted.

PR:     294010
MFC after:      2 weeks
DeltaFile
+2-1sys/fs/nfsserver/nfs_nfsdsocket.c
+2-11 files

HardenedBSD/ports eafbc24www/nginx-acme distinfo Makefile.cargo, www/nginx-acme/files extra-patch-src_conf_order.rs-devel

www/nginx-acme: Update to 0.3.1

Changelog: https://github.com/nginx/nginx-acme/releases

Sponsored by:   Netzkommune GmbH
DeltaFile
+91-173www/nginx-acme/distinfo
+44-85www/nginx-acme/Makefile.cargo
+0-11www/nginx-acme/files/extra-patch-src_conf_order.rs-devel
+2-3www/nginx-acme/Makefile
+137-2724 files

HardenedBSD/ports b3698bbmath/lean4 Makefile

math/lean4: Add comment
DeltaFile
+1-1math/lean4/Makefile
+1-11 files