hwpstate: Add CPPC enable tunable
The Framework 13 runs very hot the maximum frequency is possible. By
disabling CPPC (reverting to Cool`n'Quiet 2.0) we can use powerd to
limit the CPU frequency to 2200, thereby reducing the CPU temperature.
Some systems may run slower with CPPC enabled. See PR/292615 for that
bug.
Those experiencing either of these issues may add the following to
their loader.conf or device.hints to disable CPPC:
machdep.hwpstate_amd_cppc_enable="0"
PR: 292615
Reviewed by: lwhsu, olce
Differential revision: https://reviews.freebsd.org/D54803
net/krill: Update to 0.15.1
Version 0.15.1 'Contains Adult Language'
Bug fixes
* Fixed a bug introduced in 0.15.0 where CAs do to not clear fulfilled
certification requests causing them to re-request a certificate every
time they contact their parent. ([#1345])
Other changes
* Updated dependencies.
Release Announcement: https://nlnetlabs.nl/news/2026/Jan/19/krill-0.15.1-released/
Changelog: https://github.com/NLnetLabs/krill/releases/tag/v0.15.1
PR: 292605
Reported by: Jaap Akkerhuis <jaap at NLnetLabs.nl> (maintainer)
HBSD: Resolve merge conflict
This port was updated upstream. We no longer need to carry a patch
downstream to support our HARDCFLAGS option.
Signed-off-by: Shawn Webb <shawn.webb at hardenedbsd.org>
security/himitsu: create new port
Himitsu is a secure secret storage system for Unix-like systems. It provides an
arbitrary key/value store (where values may be secret) and a query language for
manipulating the key store.
WWW: https://himitsustore.org
PR: 292475
multimedia/ccextractor-gui: remove port
The ccextractor GUI has been rewritten in flutter, which requires Dart.
We do not support Dart, so that means no GUI for us for now.
net-mgmt/nagios-pf-plugin: broken on FreeBSD 15, deprecate
This port requires the obsolete ioctl(DIOCGETSTATUS), which is no
longer supported on FreeBSD 15. Upstream is dead, so deprecate.
It also has some questionable warnings.
See also: D41651
MFH: 2026Q1
archivers/zip: apply Debian patches
These patches fix some security and other issues:
- ( 7) zipnote.c: Close in_file instead of undefined file x
- ( 8) Use format specifier %s to print strings, not the string itself
- (14) Fix buffer overflow when filename contains unicode characters
- (15) Fix buffer overflow when using '-T -TT'
- (16) Fix symlink update detection
Obtained from: https://salsa.debian.org/sanvila/zip
Reported by: diizzy
Reviewed by: diizzy
Security: CVE-2018-13410
MFH: 2026Q1
security/snortsam: broken on FreeBSD 15, deprecate
This port requires the obsolete ioctl(DIOCGETSTATUS), which is no
longer supported on FreeBSD 15. Upstream is dead, so deprecate.
It also has some questionable warnings.
See also: D41651
MFH: 2026Q1
