HardenedBSD/src 1863ff8sys/compat/lindebugfs lindebugfs.c, sys/compat/linuxkpi/common/include/linux fs.h seq_file.h

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+54-27sys/compat/lindebugfs/lindebugfs.c
+23-12sys/compat/linuxkpi/common/src/linux_simple_attr.c
+15-17sys/compat/linuxkpi/common/include/linux/fs.h
+1-1sys/compat/linuxkpi/common/include/linux/seq_file.h
+1-1sys/compat/linuxkpi/common/src/linux_seq_file.c
+94-585 files

HardenedBSD/src d7380bfsys/compat/lindebugfs lindebugfs.c, sys/compat/linuxkpi/common/include/linux fs.h seq_file.h

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+54-27sys/compat/lindebugfs/lindebugfs.c
+23-12sys/compat/linuxkpi/common/src/linux_simple_attr.c
+15-17sys/compat/linuxkpi/common/include/linux/fs.h
+1-1sys/compat/linuxkpi/common/include/linux/seq_file.h
+1-1sys/compat/linuxkpi/common/src/linux_seq_file.c
+94-585 files

HardenedBSD/ports 91b5d10sysutils/beats91 Makefile, sysutils/beats91/files patch-go-sysinfo

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+1,314-0sysutils/beats91/files/patch-go-sysinfo
+1,314-0sysutils/beats93/files/patch-go-sysinfo
+1,314-0sysutils/beats92/files/patch-go-sysinfo
+143-0sysutils/beats91/Makefile
+143-0sysutils/beats93/Makefile
+143-0sysutils/beats92/Makefile
+4,371-0184 files not shown
+6,677-252190 files

HardenedBSD/ports db5c385databases/postgresql-cstore_fdw Makefile

databases/postgresql-cstore_fdw: Mark for removal

This port is not supported on postgresql versions > 13. PostgreSQL-13
was recently removed from the ports tree since it is EoL.

Please migrate to pg_citus using the migration instructions at
https://github.com/citusdata/cstore_fdw.
DeltaFile
+3-0databases/postgresql-cstore_fdw/Makefile
+3-01 files

HardenedBSD/ports 18a2d75audio/festalon Makefile, audio/simplemod Makefile

*: Fix WWW with broken anchors-as-comments

Case 1: WWW=https://example.com#foo

 Here #foo is not part of the value of WWW since # introduces a comment
 whether it's part of a word or not (quoting the word+# makes no
 difference either).  # needs to be escaped:

   WWW=https://example.com\#foo

Case 2: WWW=https://example.com #foo

 This is probably fallout from when WWW was moved from pkg-descr to
 Makefile.

The anchors still exist on the actual websites too or I removed them.
DeltaFile
+1-1textproc/R-cran-xmlparsedata/Makefile
+1-1audio/festalon/Makefile
+1-1audio/simplemod/Makefile
+1-1biology/gffread/Makefile
+1-1deskutils/jlj/Makefile
+1-1devel/R-cran-prettycode/Makefile
+6-649 files not shown
+55-5555 files

HardenedBSD/ports de94a3esecurity/vuxml/vuln 2026.xml

security/vuxml: Add homebox < 0.24.0
DeltaFile
+29-0security/vuxml/vuln/2026.xml
+29-01 files

HardenedBSD/ports 1c6411cfinance/homebox distinfo Makefile

finance/homebox: Update to 0.24.2

ChangeLog:
https://github.com/sysadminsmedia/homebox/compare/v0.23.1...v0.24.2

Security:       db3bdcc6-377f-47d9-9ce8-4bdede4fdafe
MFH:            2026Q1
DeltaFile
+7-7finance/homebox/distinfo
+2-3finance/homebox/Makefile
+9-102 files

HardenedBSD/ports 77de7e9sysutils Makefile

sysutils/beats9{1,2,3}: Connect to build

PR:             291018 291019 293759
Approved by:    elastic (maintainer, implicit - inactive for more than 6 months)
DeltaFile
+3-0sysutils/Makefile
+3-01 files

HardenedBSD/ports 25b420bsysutils/beats93 distinfo Makefile, sysutils/beats93/files patch-filebeat_filebeat.reference.yml patch-vendor_github.com_elastic_elastic-agent-system-metrics_metric_cpu_metrics__procfs__common.go

sysutils/beats93: New port: Send logs, network, metrics and heartbeat to Elasticsearch or Logstash 9.3.x

Release Notes:
https://www.elastic.co/docs/release-notes/beats#beats-release-notes-9.3.1

PR:             293759
Approved by:    elastic (maintainer, implicit - inactive for more than 6 months)
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>
DeltaFile
+15-15sysutils/beats93/distinfo
+4-4sysutils/beats93/Makefile
+3-3sysutils/beats93/files/patch-filebeat_filebeat.reference.yml
+3-3sysutils/beats93/files/patch-vendor_github.com_elastic_elastic-agent-system-metrics_metric_cpu_metrics__procfs__common.go
+2-2sysutils/beats93/files/patch-vendor_github.com_elastic_elastic-agent-system-metrics_metric_system_filesystem_filesystem__unix.go
+2-2sysutils/beats93/files/patch-libbeat_scripts_Makefile
+29-2916 files not shown
+45-4522 files

HardenedBSD/ports c2dcfa5sysutils/beats92 distinfo Makefile, sysutils/beats92/files patch-filebeat_filebeat.reference.yml patch-packetbeat_packetbeat.reference.yml

sysutils/beats92: New port: Send logs, network, metrics and heartbeat to Elasticsearch or Logstash 9.2.x

Release Notes:
https://www.elastic.co/docs/release-notes/beats#beats-release-notes-9.2.6

PR:             291019
Approved by:    elastic (maintainer, implicit - inactive for more than 6 months)
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>
DeltaFile
+15-15sysutils/beats92/distinfo
+4-4sysutils/beats92/Makefile
+3-3sysutils/beats92/files/patch-filebeat_filebeat.reference.yml
+2-2sysutils/beats92/files/patch-packetbeat_packetbeat.reference.yml
+1-1sysutils/beats92/files/patch-libbeat_scripts_Makefile
+1-1sysutils/beats92/files/patch-auditbeat_auditbeat.reference.yml
+26-2617 files not shown
+43-4323 files

HardenedBSD/ports 3a195c3sysutils/beats93 Makefile, sysutils/beats93/files patch-go-sysinfo metricbeat.in

sysutils/beats93: Repocopy from sysutils/beats92

PR:             293759
Approved by:    elastic (maintainer, implicit - inactive for more than 6 months)
DeltaFile
+1,314-0sysutils/beats93/files/patch-go-sysinfo
+143-0sysutils/beats93/Makefile
+51-0sysutils/beats93/files/metricbeat.in
+50-0sysutils/beats93/files/auditbeat.in
+43-0sysutils/beats93/files/filebeat.in
+43-0sysutils/beats93/files/heartbeat.in
+1,644-026 files not shown
+2,120-032 files

HardenedBSD/ports 5b13406sysutils/beats92 Makefile, sysutils/beats92/files patch-go-sysinfo metricbeat.in

sysutils/beats92: Repocopy from beats91

PR:     291019
DeltaFile
+1,314-0sysutils/beats92/files/patch-go-sysinfo
+143-0sysutils/beats92/Makefile
+51-0sysutils/beats92/files/metricbeat.in
+50-0sysutils/beats92/files/auditbeat.in
+43-0sysutils/beats92/files/filebeat.in
+43-0sysutils/beats92/files/packetbeat.in
+1,644-026 files not shown
+2,120-032 files

HardenedBSD/ports 649f198sysutils/beats91 distinfo Makefile, sysutils/beats91/files patch-filebeat_filebeat.reference.yml patch-metricbeat_metricbeat.reference.yml

sysutils/beats91: New port: Send logs, network, metrics and heartbeat to Elasticsearch or Logstash 9.1.x

Release Notes:
https://www.elastic.co/docs/release-notes/beats#beats-release-notes-9.1.10

PR:             291018
Approved by:    elastic (maintainer, implicit - inactive for more than 6 months)
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>
DeltaFile
+15-15sysutils/beats91/distinfo
+5-5sysutils/beats91/Makefile
+3-3sysutils/beats91/files/patch-filebeat_filebeat.reference.yml
+2-2sysutils/beats91/files/patch-metricbeat_metricbeat.reference.yml
+2-2sysutils/beats91/files/patch-heartbeat_heartbeat.yml
+2-2sysutils/beats91/files/patch-libbeat_scripts_Makefile
+29-2917 files not shown
+47-4723 files

HardenedBSD/ports fae0cd1sysutils/beats8 Makefile distinfo, sysutils/beats8/files patch-go-sysinfo patch-vendor_github.com_insomniacslk_dhcp_dhcpv4_bindtodevice__bsd.go

sysutils/beats8: Update 8.14.3 => 8.19.12

Release Notes (42 new versions):
https://www.elastic.co/guide/en/beats/libbeat/current/release-notes-8.15.0.html
 . . .
https://www.elastic.co/guide/en/beats/libbeat/current/release-notes-8.19.12.html

- Remove unnecessary '?' in "PKGNAMESUFFIX?=8".
- Adjust COMMENT.
- Simplify removing "./" from GO_TARGET.
- Remove unnecessary '+' in "MAKE_ENV+=".
- Fix GO_MODULE - must be "v7" instead of "v8".
- Adjust CONFLICTS.
- Use ".ifmake makesum" for generate distfiles with non-default modules too.
- Add LOCAL/vvd/elastic to MASTER_SITES for those who can't download due
  to the HTTP error "Forbidden 403".
- Replace PORTVERSION with DISTVERSION.
- Add '(' and ')' around the block that is executed in the shell.
- Refresh patches.

    [5 lines not shown]
DeltaFile
+27-40sysutils/beats8/files/patch-go-sysinfo
+28-18sysutils/beats8/Makefile
+15-15sysutils/beats8/distinfo
+0-22sysutils/beats8/files/patch-vendor_github.com_insomniacslk_dhcp_dhcpv4_bindtodevice__bsd.go
+8-8sysutils/beats8/files/patch-dev-tools_mage_settings.go
+0-12sysutils/beats8/files/patch-vendor_github.com_godbus_dbus_transport__unixcred__freebsd.go
+78-11521 files not shown
+143-17127 files

HardenedBSD/ports c2987acsysutils/beats91 Makefile, sysutils/beats91/files patch-go-sysinfo metricbeat.in

sysutils/beats91: Repocopy from sysutils/beats8

PR:     291018
DeltaFile
+1,314-0sysutils/beats91/files/patch-go-sysinfo
+143-0sysutils/beats91/Makefile
+51-0sysutils/beats91/files/metricbeat.in
+50-0sysutils/beats91/files/auditbeat.in
+43-0sysutils/beats91/files/packetbeat.in
+43-0sysutils/beats91/files/heartbeat.in
+1,644-027 files not shown
+2,142-033 files

HardenedBSD/ports 5b5e671sysutils/backrest distinfo Makefile

sysutils/backrest: Update to 1.12.1

ChangeLog: https://github.com/garethgeorge/backrest/releases/tag/v1.12.1
DeltaFile
+7-7sysutils/backrest/distinfo
+2-3sysutils/backrest/Makefile
+9-102 files

HardenedBSD/src 2353fa1sys/compat/linuxkpi/common/include/linux fs.h

LinuxKPI: Fix simple_read_from_buffer for zero-size and off-the-end reads

I noticed that the buf_size < 0 check can never be true (it's a
size_t) and decided to check for this condition by an alternate
expression, and I also noticed that a read_size of 0 would incorrectly
return -EFAULT.  Instead, return success for both of these cases as
reading beyond the EOF of a normal file also returns EOF, not EINVAL.

Reviewed by:    bz
Sponsored by:   AFRL, DARPA
Differential Revision:  https://reviews.freebsd.org/D55845
DeltaFile
+2-2sys/compat/linuxkpi/common/include/linux/fs.h
+2-21 files

HardenedBSD/src 2cf1514sys/compat/lindebugfs lindebugfs.c, sys/compat/linuxkpi/common/include/linux fs.h seq_file.h

lindebugfs: Pass user buffer pointers to the read/write file operations

The Linux file_operations API expects the read and write operations
to take a single user buffer pointer (along with the length and the
file offset as an in/out parameter).

However, the debugfs_fill function was violating this part of the
contract as it was passing down kernel pointers instead.  An earlier
commit (5668c22a13c6befa9b8486387d38457c40ce7af4) hacked around this
by modifying simple_read_from_buffer() to treat its user pointer
argument as a kernel pointer instead.  However, other commits keep
tripping over this same API mismatch
(e.g. 78e25e65bf381303c8bdac9a713ab7b26a854b8c passes a kernel pointer
to copy_from_user in fops_str_write).

Instead, change debugfs_fill to use the "raw" pseudofs mode where the
uio is passed down to directly to the fill callback rather than an
sbuf.  debufs_fill now iterates over the iovec in the uio similar to
the implementation of uiomove invoking the read or write operation on

    [24 lines not shown]
DeltaFile
+54-27sys/compat/lindebugfs/lindebugfs.c
+23-12sys/compat/linuxkpi/common/src/linux_simple_attr.c
+13-15sys/compat/linuxkpi/common/include/linux/fs.h
+1-1sys/compat/linuxkpi/common/include/linux/seq_file.h
+1-1sys/compat/linuxkpi/common/src/linux_seq_file.c
+92-565 files

HardenedBSD/ports 04535dcmail/postfix Makefile

mail/postfix: Enable CDB and LMDB by default

Adding these solves a cross-compatibility problem with Linux distros
that have dropped bdb support.  Per Postfix's document[1] on it, lmdb
and cdb are the replacements for hash and btree, respectively.

[1] http://www.postfix.org/NON_BERKELEYDB_README.html

PR:             293852
DeltaFile
+2-2mail/postfix/Makefile
+2-21 files

HardenedBSD/ports 7842c4fsecurity/py-badkeys distinfo Makefile, security/py-badkeys/files patch-pyproject.toml

security/py-badkeys: Update to 0.0.17

PR:             293757
DeltaFile
+38-0security/py-badkeys/files/patch-pyproject.toml
+3-3security/py-badkeys/distinfo
+1-1security/py-badkeys/Makefile
+42-43 files

HardenedBSD/src 0ccd224sys/arm64/arm64 trap.c, sys/compat/linuxkpi/common/src linux_simple_attr.c linux_seq_file.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+9-21sys/arm64/arm64/trap.c
+2-11sys/compat/linuxkpi/common/src/linux_simple_attr.c
+3-9sys/compat/linuxkpi/common/src/linux_seq_file.c
+14-413 files

HardenedBSD/src e720e42sys/arm64/arm64 trap.c, sys/compat/linuxkpi/common/src linux_simple_attr.c linux_seq_file.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+9-21sys/arm64/arm64/trap.c
+2-11sys/compat/linuxkpi/common/src/linux_simple_attr.c
+3-9sys/compat/linuxkpi/common/src/linux_seq_file.c
+14-413 files

HardenedBSD/src 6aeddadusr.sbin/virtual_oss/virtual_oss main.c

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+3-21usr.sbin/virtual_oss/virtual_oss/main.c
+3-211 files

HardenedBSD/ports 1a0b989math/sprng/files patch-TESTS_wolff.cpp patch-TESTS_mpitests_wolff.cpp, security/susshi distinfo Makefile

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+1,314-0sysutils/beats9/files/patch-go-sysinfo
+529-0security/susshi/distinfo
+292-0security/susshi/Makefile
+133-0sysutils/beats9/Makefile
+28-28math/sprng/files/patch-TESTS_wolff.cpp
+28-28math/sprng/files/patch-TESTS_mpitests_wolff.cpp
+2,324-5670 files not shown
+3,227-19576 files

HardenedBSD/ports 9105908math/sprng pkg-plist distinfo, math/sprng/files patch-TESTS_wolff.cpp patch-TESTS_mpitests_wolff.cpp

math/sprng: make fetchable again with a silent update

The tarball for SPRNG 5.0 has been rerolled.
This includes several minor points:
- format change (dos to unix);
- code reformat and linting;
- code cleaning;

but also some other modifications.

Full diff available at https://people.freebsd.org/~thierry/sprng5.diff .

PR:             293802
Reported by:    Daniel Engberg
DeltaFile
+28-28math/sprng/files/patch-TESTS_wolff.cpp
+28-28math/sprng/files/patch-TESTS_mpitests_wolff.cpp
+28-28math/sprng/files/patch-TESTS_wolfftest.cpp
+13-17math/sprng/files/patch-SRC_pmlcg_pmlcg.cpp
+0-24math/sprng/pkg-plist
+3-3math/sprng/distinfo
+100-1282 files not shown
+103-1328 files

HardenedBSD/ports 6fec3f4math/mpfi distinfo Makefile

math/mpfi: make fetchable again with a silent update

MASTER_SITES moved to ENS Lyon.

Meanwhile the tarball has been rerolled:
- many auto* stuff: configure is now pre-generated;
- mpfi.pc is available
- change tests

but also some code has been modified.

Full diff available at https://people.freebsd.org/~thierry/mpfi-1.5.4.diff

PR:             293803
Reported by:    Daniel Engberg
DeltaFile
+3-3math/mpfi/distinfo
+3-2math/mpfi/Makefile
+0-2math/mpfi/pkg-descr
+1-0math/mpfi/pkg-plist
+7-74 files

HardenedBSD/ports e451e6atextproc/libtextcat Makefile

textproc/libtextcat: deprecate

Upstream disapeared, and LibreOffice adopted and adapted this program.
It has been renamed as libexttextcat, and can be replaced by the port
textproc/libexttextcat.

PR:             293799
Reported by:    Daniel Engberg
DeltaFile
+3-0textproc/libtextcat/Makefile
+3-01 files

HardenedBSD/ports 997c9bascience/medit Makefile

science/medit: make fetchable again

Université Pierre et Marie Curie merged with Sorbonne University, and
upstream site has been reorganized.

PR:             293800
Reported by:    Daniel Engberg
DeltaFile
+4-3science/medit/Makefile
+4-31 files

HardenedBSD/src 14e9744sys/arm64/arm64 trap.c

arm64: Have a common call to userret

Rather than each exception calling userret use a common copy. As
syscallret already calls userret we need to skip it in that case.

Reviewed by:    kib
Sponsored by:   Arm Ltd
Differential Revision:  https://reviews.freebsd.org/D55250
DeltaFile
+9-21sys/arm64/arm64/trap.c
+9-211 files

HardenedBSD/ports fdd1de0misc/py-misaki Makefile

misc/py-misaki: Correct maintainer field
DeltaFile
+1-1misc/py-misaki/Makefile
+1-11 files