HardenedBSD/src fa87979sys/dev/acpi_support acpi_system76.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+11-10sys/dev/acpi_support/acpi_system76.c
+11-101 files

HardenedBSD/src 115f719sys/dev/acpi_support acpi_system76.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+11-10sys/dev/acpi_support/acpi_system76.c
+11-101 files

HardenedBSD/src 7df7171lib/libc/riscv/string Makefile.inc, tools/build depend-cleanup.sh

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+4-1tools/build/depend-cleanup.sh
+0-1lib/libc/riscv/string/Makefile.inc
+4-22 files

HardenedBSD/ports e07daa5databases/diesel distinfo Makefile, editors/vscode pkg-plist

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+2,103-132editors/vscode/pkg-plist
+1,415-0net/rustconn/distinfo
+706-0net/rustconn/Makefile.crates
+177-139databases/diesel/distinfo
+88-70databases/diesel/Makefile
+60-66security/clamav/pkg-plist
+4,549-40742 files not shown
+4,954-54748 files

HardenedBSD/ports bce6552editors Makefile, editors/hxavi pkg-plist Makefile

editors/hxavi: Add new port

hxavi is a lightweight binary (hex) editor for vi and Vim users.

PR:             293555
Reported by:    Michihiro Satoh <satoumc at hxavi.net>
DeltaFile
+41-0editors/hxavi/pkg-plist
+40-0editors/hxavi/Makefile
+4-0editors/hxavi/pkg-descr
+3-0editors/hxavi/distinfo
+1-0editors/Makefile
+89-05 files

HardenedBSD/ports 6594020net/py-pypacker Makefile distinfo

net/py-pypacker: Update to 6.0

PR:             293783
Reported by:    vishwin
DeltaFile
+10-5net/py-pypacker/Makefile
+3-3net/py-pypacker/distinfo
+13-82 files

HardenedBSD/src f914641sys/dev/acpi_support acpi_system76.c

acpi_system76: Improve sysctl names

* Improve sysctl descriptions.
* Rename battery charging-threshold sysctl for clarity.
* Fix mis-spelled words.
* Style: sort headers.

Reported by: olce, jhb
Reviewed by: olce
Differential Revision: https://reviews.freebsd.org/D55848
DeltaFile
+11-10sys/dev/acpi_support/acpi_system76.c
+11-101 files

HardenedBSD/src 521519ftools/build depend-cleanup.sh

depend-cleanup.sh: rebuild strnlen.o on riscv64 if it came from strnlen.S

We have to switch back to the previous rule once the temporary
build fix has been replaced with a permanent fix.

MFC after:      1 week
See also:       2a4e3112c811b9892e14e15cfd23538e7e47329c
PR:             293353, 293296

(cherry picked from commit b5514e1c6d9e7ec09b299a983d1ce32852e0d9dc)
DeltaFile
+4-1tools/build/depend-cleanup.sh
+4-11 files

HardenedBSD/src 0536513lib/libc/riscv/string Makefile.inc

libc/riscv64: temporarily disable strnlen() implementation until a fix is developed

strnlen() doesn't seem to cope well with a length argument such that
string pointer plus length overflows past the end of the address space.

Reviewed by:    fuz
MFC after:      1 week
PR:             293353, 293296
Differential Revision:  https://reviews.freebsd.org/D55714

(cherry picked from commit 2a4e3112c811b9892e14e15cfd23538e7e47329c)
DeltaFile
+0-1lib/libc/riscv/string/Makefile.inc
+0-11 files

HardenedBSD/ports 5c715efnet Makefile, net/rustconn distinfo Makefile.crates

net/rustconn: Add new port

RustConn is a connection orchestrator for Linux/FreeBSD with a
GTK4/Wayland-native interface. It brings SSH, RDP, VNC, SPICE, Telnet,
Serial, Kubernetes, and Zero Trust connections under one roof — with
embedded Rust clients where possible and seamless integration with
external tools where needed.

https://github.com/totoshko88/RustConn
DeltaFile
+1,415-0net/rustconn/distinfo
+706-0net/rustconn/Makefile.crates
+76-0net/rustconn/Makefile
+23-0net/rustconn/pkg-plist
+5-0net/rustconn/pkg-descr
+1-0net/Makefile
+2,226-06 files

HardenedBSD/ports b1b2eebeditors/vscode pkg-plist distinfo, editors/vscode/files patch-node__modules__at_typescript_native-preview_lib_getExePath.js patch-extensions_microsoft-authentication_extension.webpack.config.js

editors/vscode: Update to 1.111.0

While here, update product.json for popular extensions. [1]

Changelog:
- https://code.visualstudio.com/updates/v1_110
- https://code.visualstudio.com/updates/v1_111

Reported by:    GitHub (watch releases)
Obtained from:  https://github.com/VSCodium/vscodium/blob/1.110.11631/product.json [1]
DeltaFile
+2,103-132editors/vscode/pkg-plist
+44-0editors/vscode/files/patch-node__modules__at_typescript_native-preview_lib_getExePath.js
+0-34editors/vscode/files/patch-extensions_microsoft-authentication_extension.webpack.config.js
+19-2editors/vscode/files/product.json.extensions
+8-8editors/vscode/files/patch-build_gulpfile.reh.ts
+7-7editors/vscode/distinfo
+2,181-18315 files not shown
+2,231-22821 files

HardenedBSD/ports bf21cd4security/clamav pkg-plist distinfo

security/clamav: update 1.5.1 -> 1.5.2

Reported by:    Andrea Venturoli <ml at netfence.it>
Changes:        https://blog.clamav.net/2026/03/clamav-152-and-144-security-patch.html
Security:       CVE-2026-20031
MFH:            2026Q1
DeltaFile
+60-66security/clamav/pkg-plist
+3-3security/clamav/distinfo
+1-2security/clamav/Makefile
+64-713 files

HardenedBSD/ports 1a244demath/R-cran-SQUAREM distinfo Makefile

math/R-cran-SQUAREM: Update to 2026.1

Reported by:    portscout
DeltaFile
+3-3math/R-cran-SQUAREM/distinfo
+1-2math/R-cran-SQUAREM/Makefile
+4-52 files

HardenedBSD/ports 3cf790bdatabases/diesel distinfo Makefile

databases/diesel: update 2.3.6 → 2.3.7

Reported by:    portscout
DeltaFile
+177-139databases/diesel/distinfo
+88-70databases/diesel/Makefile
+265-2092 files

HardenedBSD/ports b28fb48www/py-yt-dlp-ejs distinfo Makefile

www/py-yt-dlp-ejs: update 0.5.0 → 0.7.0

Reported by:    portscout
DeltaFile
+5-5www/py-yt-dlp-ejs/distinfo
+1-1www/py-yt-dlp-ejs/Makefile
+6-62 files

HardenedBSD/ports 5aa0e65misc/ollama Makefile distinfo

misc/ollama: update 0.17.7 → 0.18.0
DeltaFile
+35-4misc/ollama/Makefile
+5-5misc/ollama/distinfo
+40-92 files

HardenedBSD/ports a271777devel/cargo-about Makefile

devel/cargo-about: Broken on i386

Reported by:    fallout
DeltaFile
+2-0devel/cargo-about/Makefile
+2-01 files

HardenedBSD/ports 6771b1dnet/v2ray Makefile, net/v2ray/files v2ray.in

net/v2ray: Lint and improve rc file

* Sort stances
* Expand variables

Approved by:    db@, yuri@ (Mentors, implicit)
DeltaFile
+12-10net/v2ray/files/v2ray.in
+1-1net/v2ray/Makefile
+13-112 files

HardenedBSD/ports 3265e88net/v2ray Makefile, net/v2ray/files v2ray.in

net/v2ray: Fix incorrect order of rc file stances

PR:             293795
Reported by:    Shamaz Mazum <shamaz.mazum at gmail.com>
Approved by:    db@, yuri@ (Mentors, implicit)
DeltaFile
+1-1net/v2ray/files/v2ray.in
+1-0net/v2ray/Makefile
+2-12 files

HardenedBSD/src 8724e17lib/libc/stdlib cxa_thread_atexit_impl.c, sys/kern kern_time.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+3-3sys/netinet/in_pcb.h
+2-2lib/libc/stdlib/cxa_thread_atexit_impl.c
+3-1sys/kern/kern_time.c
+2-1sys/netinet/tcp_stacks/sack_filter.c
+10-74 files

HardenedBSD/src a17be34lib/libc/stdlib cxa_thread_atexit_impl.c, sys/kern kern_time.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+3-3sys/netinet/in_pcb.h
+3-1sys/kern/kern_time.c
+2-2lib/libc/stdlib/cxa_thread_atexit_impl.c
+2-1sys/netinet/tcp_stacks/sack_filter.c
+10-74 files

HardenedBSD/ports 613d984lang/dotnet distinfo Makefile, lang/dotnet-host distinfo

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+113-113shells/powershell/distinfo
+5-9lang/dotnet/distinfo
+7-7shells/powershell/Makefile
+11-0security/sssd2/files/patch-src_sss__client_common.c
+4-4lang/dotnet/Makefile
+3-3lang/dotnet-host/distinfo
+143-1363 files not shown
+146-1399 files

HardenedBSD/ports 30713b8shells/powershell distinfo Makefile

shells/powershell: Update to 7.5.5
DeltaFile
+113-113shells/powershell/distinfo
+7-7shells/powershell/Makefile
+120-1202 files

HardenedBSD/ports 155c42dlang/dotnet distinfo Makefile

lang/dotnet: Update to 9.0.14
DeltaFile
+5-9lang/dotnet/distinfo
+4-4lang/dotnet/Makefile
+1-1lang/dotnet/pkg-plist
+10-143 files

HardenedBSD/ports 0b3363clang/dotnet-host distinfo Makefile

lang/dotnet-host: Update to 9.0.14
DeltaFile
+3-3lang/dotnet-host/distinfo
+1-1lang/dotnet-host/Makefile
+4-42 files

HardenedBSD/ports 975b3e6security/sssd2 Makefile, security/sssd2/files patch-src_sss__client_common.c

security/sssd2: Fix LDAP authentication

PR:             293728
DeltaFile
+11-0security/sssd2/files/patch-src_sss__client_common.c
+1-1security/sssd2/Makefile
+12-12 files

HardenedBSD/src 9d26b82lib/libc/stdlib cxa_thread_atexit_impl.c

libc: Fix dtor order in __cxa_thread_atexit

The thread_local variable may creates another thread_local variable
inside its dtor. This new object is immediately be registered in
__cxa_thread_atexit() and need to be freed before processing another
variable.

This fixes the libcxx test thread_local_destruction_order.pass.cpp.

Reported by:    kib
Approved by:    lwhsu (mentor)
MFC after:      2 weeks
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D55826
DeltaFile
+2-2lib/libc/stdlib/cxa_thread_atexit_impl.c
+2-21 files

HardenedBSD/src 728ae49sys/kern kern_time.c

kern_time: Honor the precise option when counting diff

When preecise option is used, the true elapsed time should also use the
precise timer.

This fixes the test case sleep_for.signals.pass.cpp in libcxx.

Reviewed by:    kib, imp
Approved by:    lwhsu (mentor)
MFC after:      2 weeks
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D55824
DeltaFile
+3-1sys/kern/kern_time.c
+3-11 files

HardenedBSD/src 4f59a7esys/netinet/tcp_stacks sack_filter.c

tcp: fix up !VIMAGE builds

The tcp_seq.h uses getmicrouptime() in an inline function, but it doesn't
include <sys/time.h>.  This was usually masked by having tcp_var.h always
before tcp_seq.h, so restore that.

Fixes:  c0462c2deafdcfe885e8d6f91b529d8cbddc6014
DeltaFile
+2-1sys/netinet/tcp_stacks/sack_filter.c
+2-11 files

HardenedBSD/src a47c870sys/netinet in_pcb.h

inpcb: fix up !VIMAGE builds

There are some files that don't include mutex.h and rwlock.h, but use
inpcb locking macros.  With VIMAGE the net/vnet.h pulls half of the
possible kernel includes, masking the problem.  The in_pcb.h also used to
mask the problem, so restore that.

Fixes:  041e9eb1ae094a81e55fbcaba37eb2ac194658cc
DeltaFile
+3-3sys/netinet/in_pcb.h
+3-31 files