HardenedBSD/src df99d3fsys/amd64/amd64 pmap.c, sys/dev/acpica acpi_spmc.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+25-5sys/dev/acpica/acpi_spmc.c
+11-5sys/dev/vmm/vmm_dev.c
+8-0sys/kern/kern_jail.c
+1-1sys/riscv/riscv/pmap.c
+1-1sys/powerpc/booke/pmap.c
+1-1sys/amd64/amd64/pmap.c
+47-138 files not shown
+55-2114 files

HardenedBSD/src 88c0e00sys/dev/acpica acpi_spmc.c, sys/dev/bce if_bce.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+25-5sys/dev/acpica/acpi_spmc.c
+11-5sys/dev/vmm/vmm_dev.c
+8-0sys/kern/kern_jail.c
+1-1sys/dev/bce/if_bce.c
+1-1sys/i386/i386/pmap.c
+1-1sys/netinet6/ip6_mroute.c
+47-138 files not shown
+55-2114 files

HardenedBSD/ports 9bfdb2dcad/OrcaSlicer pkg-plist, cad/magic/files patch-textio__txInput.c

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+2,934-318cad/OrcaSlicer/pkg-plist
+193-329editors/fresh/distinfo
+251-42science/axom/pkg-plist
+176-99science/serac/pkg-plist
+95-163editors/fresh/Makefile.crates
+3-89cad/magic/files/patch-textio__txInput.c
+3,652-1,040145 files not shown
+4,520-1,741151 files

HardenedBSD/src 683f7a8sys/dev/acpica acpi_spmc.c

acpi_spmc: Call new MS turn on display DSM

Microsoft added a new function index (turn on display, 9) to their DSM
set. This revision calls this, which fixes S0ix on certain machines,
such as the Lenovo Yoga Slim 7i Aura, who's ECs use this method as a
trigger to restore power to certain devices.

See commit 229ecbaac6b3 ("ACPI: x86: s2idle: Invoke Microsoft _DSM
Function 9 (Turn On Display)") on Linux.

Also see the following:
https://learn.microsoft.com/en-us/windows-hardware/design/device-experiences/modern-standby-firmware-notifications#turn-on-display-notification-function-9

Reviewed by:    olce
Approved by:    olce
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D56062
DeltaFile
+20-5sys/dev/acpica/acpi_spmc.c
+20-51 files

HardenedBSD/src 0307db7sys/dev/acpica acpi_spmc.c

acpi_spmc: Fail probe if acpi_spmc device already attached

We cannot have more than one SPMC device.

Reviewed by:    olce
Approved by:    olce
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D56062
DeltaFile
+5-0sys/dev/acpica/acpi_spmc.c
+5-01 files

HardenedBSD/ports 650d46atextproc/bookokrat distinfo Makefile.crates

textproc/bookokrat: Update to 3.9.0

ChangeLog:      https://github.com/bugzmanov/bookokrat/releases/tag/v0.3.9
Reported by:    "github-actions[bot]" <notifications at github.com>
DeltaFile
+17-3textproc/bookokrat/distinfo
+7-0textproc/bookokrat/Makefile.crates
+2-2textproc/bookokrat/Makefile
+26-53 files

HardenedBSD/ports 3ce1f36www/linux-freetube distinfo Makefile

www/linux-freetube: Update to 0.24.0.b

ChangeLog:      https://github.com/FreeTubeApp/FreeTube/releases/tag/v0.24.0-beta
Reported by:    efb4f5ff-1298-471a-8973-3d47447115dc <notifications at github.com>
DeltaFile
+3-3www/linux-freetube/distinfo
+1-1www/linux-freetube/Makefile
+4-42 files

HardenedBSD/ports d8d62c7biology/ugene Makefile

biology/ugene: adopt
DeltaFile
+1-1biology/ugene/Makefile
+1-11 files

HardenedBSD/src 0dbbed2sys/netinet6 ip6_mroute.c

ip6_mroute: Fix the type name in sysctl_mfctable()

No functional change since apparently it's fine to compute the size of
a pointer type when the base type is undefined.

Fixes:  0bb9c2b665d9 ("ip6_mroute: FIBify")
DeltaFile
+1-1sys/netinet6/ip6_mroute.c
+1-11 files

HardenedBSD/src f3c7723sys/dev/vmm vmm_dev.c, sys/kern kern_jail.c

vmm: Restore the ability to create VMs as root in a jail

The new PRIV_VMM_CREATE and DESTROY permissions should be allowed by
jails, so need to be added to the list in prison_priv_check().  Then,
modify vmmdev_create() to verify that the jail was created with the
allow.vmm flag.  This is already verified when opening /dev/vmmctl, but
checking again doesn't hurt and ensures that one can't pass the
allow.vmm policy by passing a vmmctl fd along a unix domain socket from
outside the jail.

Rename vmm_priv_check() to vmm_jail_priv_check() to make the function's
purpose more clear.

Reported by:    novel
Reviewed by:    bnovkov
Fixes:          d4c05edd410e ("vmm: Add privilege checks to vmmctl operations")
Differential Revision:  https://reviews.freebsd.org/D56119
DeltaFile
+11-5sys/dev/vmm/vmm_dev.c
+8-0sys/kern/kern_jail.c
+19-52 files

HardenedBSD/src c6a1c12sys/amd64/amd64 pmap.c, sys/arm/arm pmap-v6.c

pmap: Do not use PMAP_LOCK_INIT with kernel_pmap

The kernel_pmap lock is a bit special: it does not need the DUPOK flag,
and it really belongs to a different lock class.  If it belongs to the
same class as regular pmap locks, then witness may report warnings when
performing UMA allocations under a regular pmap lock, if the allocation
triggers a pmap_growkernel() call.

Replace instances of PMAP_LOCK_INIT(kernel_pmap) with inline mtx_init()
calls to silence some witness warnings for harmless behaviour I see with
some uncommitted test programs.

Reviewed by:    alc, kib
MFC after:      2 weeks
Differential Revision:  https://reviews.freebsd.org/D56185
DeltaFile
+1-1sys/riscv/riscv/pmap.c
+1-1sys/amd64/amd64/pmap.c
+1-1sys/arm/arm/pmap-v6.c
+1-1sys/arm64/arm64/pmap.c
+1-1sys/i386/i386/pmap.c
+1-1sys/powerpc/aim/mmu_oea.c
+6-63 files not shown
+9-99 files

HardenedBSD/ports 1b0d5ddwww/lexbor pkg-plist distinfo

www/lexbor: Update 2.7.0 => 3.0.0

Approved by:            db@, yuri@ (Mentors, implicit)
DeltaFile
+15-2www/lexbor/pkg-plist
+3-3www/lexbor/distinfo
+1-2www/lexbor/Makefile
+19-73 files

HardenedBSD/ports 49d9108net-im/py-zapzap Makefile distinfo

net-im/py-zapzap: Update to 6.4.0

- Update list of build dependencies
- Add a post-patch target to fix the program version that does not match
  the distribution version. This discrepancy causes the following error:

===>   Generating temporary packing list
Traceback (most recent call last):
  File "<frozen runpy>", line 198, in _run_module_as_main
  File "<frozen runpy>", line 88, in _run_code
  File "/usr/local/lib/python3.11/site-packages/installer/__main__.py", line 98, in <module>
    _main(sys.argv[1:], "python -m installer")
  File "/usr/local/lib/python3.11/site-packages/installer/__main__.py", line 86, in _main
    with WheelFile.open(args.wheel) as source:
  File "/usr/local/lib/python3.11/contextlib.py", line 137, in __enter__
    return next(self.gen)
           ^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/installer/sources.py", line 162, in open
    with zipfile.ZipFile(path) as f:

    [12 lines not shown]
DeltaFile
+7-2net-im/py-zapzap/Makefile
+3-3net-im/py-zapzap/distinfo
+10-52 files

HardenedBSD/ports af412b8cad/magic distinfo Makefile, cad/magic/files patch-textio__txInput.c patch-textio__textioInt.h

cad/magic: Update 8.3.570 => 8.3.629

Approved by:            yuri@ (maintainer, Mentor)
Approved by:            db@, yuri@ (Mentors, implicit)
Differential Revision:  https://reviews.freebsd.org/D56206
DeltaFile
+3-89cad/magic/files/patch-textio__txInput.c
+0-11cad/magic/files/patch-textio__textioInt.h
+3-3cad/magic/distinfo
+1-1cad/magic/Makefile
+1-0cad/magic/pkg-plist
+8-1045 files

HardenedBSD/ports 16a903edevel/py-mypy-boto3-s3 Makefile distinfo, devel/py-mypy-boto3-s3/files patch-pyproject.toml

devel/py-mypy-boto3-s3: update 1.34.120 → 1.42.79
DeltaFile
+11-0devel/py-mypy-boto3-s3/files/patch-pyproject.toml
+5-3devel/py-mypy-boto3-s3/Makefile
+3-3devel/py-mypy-boto3-s3/distinfo
+19-63 files

HardenedBSD/ports c307e3ddevel/py-types-python-dateutil distinfo Makefile, devel/py-types-python-dateutil/files patch-pyproject.toml

devel/py-types-python-dateutil: update 2.8.19.14 → 2.9.0.20260323
DeltaFile
+17-0devel/py-types-python-dateutil/files/patch-pyproject.toml
+3-3devel/py-types-python-dateutil/distinfo
+2-2devel/py-types-python-dateutil/Makefile
+22-53 files

HardenedBSD/ports 34247b3science/serac pkg-plist Makefile, science/serac/files patch-cmake_thirdparty_SetupSmithThirdParty.cmake patch-src_smith_physics_solid_mechanics_contact.hpp

science/serac: update g20220823 → g20260327
DeltaFile
+176-99science/serac/pkg-plist
+15-12science/serac/Makefile
+11-9science/serac/distinfo
+18-0science/serac/files/patch-cmake_thirdparty_SetupSmithThirdParty.cmake
+17-0science/serac/files/patch-src_smith_physics_solid_mechanics_contact.hpp
+0-11science/serac/files/patch-src_serac_numerics_functional_functional.hpp
+237-1313 files not shown
+257-1419 files

HardenedBSD/ports 2d98cb0graphics/glvis distinfo Makefile

graphics/glvis: update 4.4 → 4.5
DeltaFile
+3-3graphics/glvis/distinfo
+3-2graphics/glvis/Makefile
+6-52 files

HardenedBSD/ports ffe085emath/mfem pkg-plist Makefile

math/mfem: update 4.8 → 4.9
DeltaFile
+40-2math/mfem/pkg-plist
+5-4math/mfem/Makefile
+3-3math/mfem/distinfo
+48-93 files

HardenedBSD/ports ec083c1science/axom pkg-plist distinfo

science/axom: update 0.10.1 → 0.13.0
DeltaFile
+251-42science/axom/pkg-plist
+9-9science/axom/distinfo
+7-7science/axom/Makefile
+267-583 files

HardenedBSD/ports 19672aescience/spheral pkg-plist Makefile, science/spheral/files patch-cmake_InstallTPLs.cmake patch-cmake_spheral__cxx-config.cmake.in

science/spheral: update 2025.06.1 → 2025.12.0
DeltaFile
+64-28science/spheral/files/patch-cmake_InstallTPLs.cmake
+29-29science/spheral/pkg-plist
+12-9science/spheral/Makefile
+13-0science/spheral/files/patch-cmake_spheral__cxx-config.cmake.in
+11-0science/spheral/files/patch-cmake_SpheralConfig.cmake
+11-0science/spheral/files/patch-cmake_spheral_SpheralHandleTPL.cmake
+140-663 files not shown
+156-719 files

HardenedBSD/ports b15c4f6misc/github-copilot-cli distinfo Makefile, misc/github-copilot-cli/files package-lock.json

misc/github-copilot-cli: update 1.0.13 → 1.0.14
DeltaFile
+28-28misc/github-copilot-cli/files/package-lock.json
+3-3misc/github-copilot-cli/distinfo
+1-1misc/github-copilot-cli/Makefile
+32-323 files

HardenedBSD/ports ebaa0a8math/sundials Makefile, science/code_saturne Makefile

science/hypre: update 2.33.0 → 3.1.0
DeltaFile
+17-29science/hypre/pkg-plist
+3-3science/hypre/distinfo
+1-2science/hypre/Makefile
+1-1science/code_saturne/Makefile
+1-1math/sundials/Makefile
+23-365 files

HardenedBSD/ports a47d0e5misc/claude-code distinfo Makefile, misc/claude-code/files package-lock.json

misc/claude-code: update 2.1.86 → 2.1.89
DeltaFile
+4-4misc/claude-code/files/package-lock.json
+3-3misc/claude-code/distinfo
+1-1misc/claude-code/Makefile
+8-83 files

HardenedBSD/ports c32b707x11/py-waypaper Makefile distinfo

x11/py-waypaper: Update to 2.8

- Update pkg-descr
- Pet portfmt

ChangeLog:      https://github.com/anufrievroman/waypaper/releases/tag/2.8
Reported by:    Roman <notifications at github.com>
DeltaFile
+5-5x11/py-waypaper/Makefile
+3-3x11/py-waypaper/distinfo
+2-2x11/py-waypaper/pkg-descr
+10-103 files

HardenedBSD/ports 8129845www/py-gunicorn distinfo Makefile

www/py-gunicorn: Update version 25.1.0=>25.2.0

Changelog: https://github.com/benoitc/gunicorn/releases/tag/25.2.0
DeltaFile
+3-3www/py-gunicorn/distinfo
+1-1www/py-gunicorn/Makefile
+4-42 files

HardenedBSD/ports f74d42csysutils/httm distinfo Makefile

sysutils/httm: Update version 0.49.2=>0.49.3

Changelog: https://github.com/kimono-koans/httm/releases/tag/0.49.3
DeltaFile
+3-3sysutils/httm/distinfo
+1-1sysutils/httm/Makefile
+4-42 files

HardenedBSD/ports 1bf7ddcnet/google-cloud-sdk distinfo Makefile

net/google-cloud-sdk: Update version 562.0.0=>563.0.0
DeltaFile
+3-3net/google-cloud-sdk/distinfo
+1-1net/google-cloud-sdk/Makefile
+4-42 files

HardenedBSD/ports 869e6dasecurity/trillian distinfo Makefile

security/trillian: Update version 1.7.2=>1.7.3

Changelog: https://github.com/google/trillian/releases/tag/v1.7.3
DeltaFile
+5-5security/trillian/distinfo
+2-3security/trillian/Makefile
+7-82 files

HardenedBSD/ports 00124b9devel/cirrus-cli distinfo Makefile

devel/cirrus-cli: Update version 0.165.0=>0.165.1

Changelog: https://github.com/cirruslabs/cirrus-cli/releases/tag/v0.165.1
DeltaFile
+5-5devel/cirrus-cli/distinfo
+1-1devel/cirrus-cli/Makefile
+6-62 files