HardenedBSD/ports 696cdb4security/pgpin Makefile

HBSD: Disable HARDCFLAGS for security/pgpin

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
DeltaFile
+2-0security/pgpin/Makefile
+2-01 files

HardenedBSD/src 8f2a9f8share/man/man4 nvmf_che.4, sys/dev/cxgbe adapter.h

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+80-0share/man/man4/nvmf_che.4
+35-45sys/kern/subr_rman.c
+8-10sys/dev/cxgbe/adapter.h
+13-3usr.sbin/trim/trim.8
+12-2sys/net/if_ovpn.c
+5-6sys/modules/zfs/Makefile
+153-669 files not shown
+171-8315 files

HardenedBSD/src c49a2a0contrib/llvm-project/lldb/source/Host/freebsd Host.cpp, contrib/llvm-project/lldb/source/Plugins/Process/Utility RegisterContextFreeBSD_x86_64.cpp

Merge branch 'freebsd/14-stable/main' into hardened/14-stable/master
DeltaFile
+20-24contrib/llvm-project/lldb/source/Plugins/Process/Utility/RegisterContextFreeBSD_x86_64.cpp
+28-13contrib/llvm-project/lldb/source/Host/freebsd/Host.cpp
+4-0sys/kgssapi/gss_impl.c
+52-373 files

HardenedBSD/src 27f2c03contrib/diff/lib getopt.h, contrib/llvm-project/lldb/source/Host/freebsd Host.cpp

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+0-176contrib/diff/lib/getopt.h
+20-24contrib/llvm-project/lldb/source/Plugins/Process/Utility/RegisterContextFreeBSD_x86_64.cpp
+28-13contrib/llvm-project/lldb/source/Host/freebsd/Host.cpp
+13-5share/man/man4/fdc.4
+4-4share/man/man5/boot.config.5
+8-0sys/modules/mqueue/Makefile
+73-22210 files not shown
+112-23616 files

HardenedBSD/ports 81710cdaudio/supercollider/files patch-boost, devel/pycharm pkg-plist

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+2,281-1,849devel/pycharm/pkg-plist
+237-357textproc/mdbook/distinfo
+0-531audio/supercollider/files/patch-boost
+117-177textproc/mdbook/Makefile.crates
+68-63www/element-web/pkg-plist
+44-49sysutils/nix/pkg-plist
+2,747-3,02673 files not shown
+2,966-3,26379 files

HardenedBSD/ports dd22b31devel/ivykis pkg-plist

HBSD: Fix build of devel/ivykis on 14-stable

HardenedBSD 14-STABLE does not support inotify.

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
DeltaFile
+8-8devel/ivykis/pkg-plist
+8-81 files

HardenedBSD/src cf39b51sys/compat/linuxkpi/common/include/linux radix-tree.h, sys/compat/linuxkpi/common/src linux_radix.c

linuxkpi: Take const root in read-only radix tree functions

This is a preparation step for a future addition to this file. This is
also closer to what Linux does.

Reviewed by:    emaste
Sponsored by:   The FreeBSD Foundation
DeltaFile
+4-4sys/compat/linuxkpi/common/src/linux_radix.c
+2-2sys/compat/linuxkpi/common/include/linux/radix-tree.h
+6-62 files

HardenedBSD/ports 895dcaedevel/pycharm pkg-plist Makefile

devel/pycharm: update to 2025.3

Release notes:
https://www.jetbrains.com/pycharm/whatsnew/2025-3/
DeltaFile
+2,281-1,849devel/pycharm/pkg-plist
+2-5devel/pycharm/Makefile
+3-3devel/pycharm/distinfo
+2,286-1,8573 files

HardenedBSD/src 0f12ee8sys/compat/linux linux_if.c

linux: fix build without VIMAGE

Fixes:  fbf05d2147b1add8b760be166c4b1fd4499ebce8
DeltaFile
+1-0sys/compat/linux/linux_if.c
+1-01 files

HardenedBSD/ports 03729e9audio/supercollider distinfo Makefile, audio/supercollider/files patch-boost

audio/supercollider: Update 3.14.0 => 3.14.1

Release Notes:
https://github.com/supercollider/supercollider/releases/tag/Version-3.14.1

Changelog:
https://github.com/supercollider/supercollider/blob/3.14/CHANGELOG.md

Fix WEBENGINE option name in OPTIONS_DEFAULT_i386.

PR:     291517
DeltaFile
+0-531audio/supercollider/files/patch-boost
+3-3audio/supercollider/distinfo
+2-3audio/supercollider/Makefile
+5-5373 files

HardenedBSD/ports 1944f44www/element-web pkg-plist distinfo

www/element-web: Update to 1.12.6

Approved by:    maintainer (implicit, version bump, as per PR 258262)
DeltaFile
+68-63www/element-web/pkg-plist
+3-3www/element-web/distinfo
+2-2www/element-web/Makefile
+73-683 files

HardenedBSD/ports 5818fa5security/tailscale distinfo Makefile

security/tailscale: Update to 1.90.9

MFH:            2025Q4
DeltaFile
+5-5security/tailscale/distinfo
+1-2security/tailscale/Makefile
+6-72 files

HardenedBSD/ports d0dde23misc/freebsd-release-manifests pkg-plist, misc/freebsd-release-manifests/files/MANIFESTS powerpc-powerpc64-14.2-RELEASE arm64-aarch64-14.2-RELEASE

misc/freebsd-release-manifests: Remove EoL releases

Approved by:    re (implicit)
DeltaFile
+0-16misc/freebsd-release-manifests/pkg-plist
+0-9misc/freebsd-release-manifests/files/MANIFESTS/powerpc-powerpc64-14.2-RELEASE
+0-9misc/freebsd-release-manifests/files/MANIFESTS/arm64-aarch64-14.2-RELEASE
+0-9misc/freebsd-release-manifests/files/MANIFESTS/powerpc-powerpc64-13.4-RELEASE
+0-9misc/freebsd-release-manifests/files/MANIFESTS/amd64-amd64-13.4-RELEASE
+0-9misc/freebsd-release-manifests/files/MANIFESTS/amd64-amd64-14.2-RELEASE
+0-6112 files not shown
+1-13918 files

HardenedBSD/ports 29427fasecurity/netbird distinfo Makefile

security/netbird: Update 0.60.4 => 0.60.7

Changelogs:
https://github.com/netbirdio/netbird/releases/tag/v0.60.5
https://github.com/netbirdio/netbird/releases/tag/v0.60.6
https://github.com/netbirdio/netbird/releases/tag/v0.60.7

Commit log:
https://github.com/netbirdio/netbird/compare/v0.60.4...v0.60.7

PR:     291498
DeltaFile
+5-5security/netbird/distinfo
+1-2security/netbird/Makefile
+6-72 files

HardenedBSD/ports a8dfbc2security/go-cve-dictionary distinfo Makefile

security/go-cve-dictionary: Update to 0.15.0

Release notes:  https://github.com/vulsio/go-cve-dictionary/releases/tag/v0.15.0
DeltaFile
+5-5security/go-cve-dictionary/distinfo
+1-2security/go-cve-dictionary/Makefile
+6-72 files

HardenedBSD/ports 84cd641devel/wasi-compiler-rt21 Makefile, devel/wasi-libcxx21 Makefile

devel/wasi-{compiler-rt,libcxx}21: sync to 21.1.7
DeltaFile
+1-1devel/wasi-libcxx21/Makefile
+1-1devel/wasi-compiler-rt21/Makefile
+2-22 files

HardenedBSD/src 734922asys/dev/sound/pci hdspe-pcm.c

HBSD: Unlock the sound mutex on error

Commit 095caf887fdde311caa5a7e3abd767fe33d76406 removed a call to a
now-nonexistant function (snd_mtxunlock). FreeBSD removed that function
in favor of using the normal mutex API directly (mtx_unlock).

This commit re-adds a call to unlocking the mutex, but using the normal
mutex API as required.

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
Reported-by:    @0x1eef
See-Also:       !115
Fixes:          095caf887fdde311caa5a7e3abd767fe33d76406
MFC-to:         15-STABLE
MFC-to:         14-STABLE
(cherry picked from commit 291d74e65f44d04bc41243e51212ebe2e6e1975e)
Signed-off-by: Shawn Webb <shawn.webb at hardenedbsd.org>
DeltaFile
+1-0sys/dev/sound/pci/hdspe-pcm.c
+1-01 files

HardenedBSD/ports 67281c6games/veloren-weekly Makefile

games/veloren-weekly: mark BROKEN on aarch64 after d131803c879b

error: unsupported platform
   --> cargo-crates/wasmtime-39.0.0/src/runtime/vm/sys/unix/signals.rs:394:13
    |
394 |             compile_error!("unsupported platform");
    |             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Reported by:    pkg-fallout
DeltaFile
+1-0games/veloren-weekly/Makefile
+1-01 files

HardenedBSD/src 291d74esys/dev/sound/pci hdspe-pcm.c

HBSD: Unlock the sound mutex on error

Commit 095caf887fdde311caa5a7e3abd767fe33d76406 removed a call to a
now-nonexistant function (snd_mtxunlock). FreeBSD removed that function
in favor of using the normal mutex API directly (mtx_unlock).

This commit re-adds a call to unlocking the mutex, but using the normal
mutex API as required.

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
Reported-by:    @0x1eef
See-Also:       !115
Fixes:          095caf887fdde311caa5a7e3abd767fe33d76406
MFC-to:         15-STABLE
MFC-to:         14-STABLE
DeltaFile
+1-0sys/dev/sound/pci/hdspe-pcm.c
+1-01 files

HardenedBSD/src 63b77absys/kgssapi gss_impl.c

kgssapi: Remove broken MOD_UNLOAD code

The module panicked at unload with "recursing but non-recursive rw".
There is a comment that "Unloading of the kgssapi module is not
currently supported" and the MOD_UNLOAD case falls through to returning
EOPNOTSUPP anyway.  Just #if 0 the code in the unload path, leaving it
as a hint in case someone implements unload support later on.

PR:             291249
Reviewed by:    rmacklem
Fixes: ad704a34bc2c ("Use syscall_helper_register(9) rather than syscall_register().")
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D53949

(cherry picked from commit 6901376f59b870ddbb0d922e3455a388333cd460)
(cherry picked from commit ab4f4f4efaac85bbf235e60f2ced4876a9e916f2)
DeltaFile
+4-0sys/kgssapi/gss_impl.c
+4-01 files

HardenedBSD/ports 4d46a7adevel/oci-cli distinfo Makefile

devel/oci-cli: Update 3.71.0 => 3.71.1

Changelog:
https://github.com/oracle/oci-cli/releases/tag/v3.71.1

PR:     291515
DeltaFile
+3-3devel/oci-cli/distinfo
+2-2devel/oci-cli/Makefile
+5-52 files

HardenedBSD/ports dbef01fdevel/py-oci distinfo Makefile

devel/py-oci: Update 2.164.0 => 2.164.1

Changelog:
https://github.com/oracle/oci-python-sdk/releases/tag/v2.164.1

PR:     291515
DeltaFile
+3-3devel/py-oci/distinfo
+1-1devel/py-oci/Makefile
+4-42 files

HardenedBSD/src 224d650sys/dev/vt vt_core.c

vt: Allow VT_SETMODE with frsig=0

Linux does not check that any of the signals in vt_mode VT_SETMODE ioctl
(relsig, acqsig, frsig) are valid, but FreeBSD required that all three
are valid.  frsig is unusued in both Linux and FreeBSD, and software
typically leaves it unset.  To improve portability, allow frsig to be
set to zero.

PR:             289812
Reported by:    Dušan Gvozdenović
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D52835

(cherry picked from commit 5198c32210039d8dc92554647384eee75688848c)
DeltaFile
+3-3sys/dev/vt/vt_core.c
+3-31 files

HardenedBSD/src 661b40fshare/man/man4 fdc.4, usr.sbin/fdcontrol fdcontrol.8

Deprecate fdc(4) and floppy utilities

Floppies have been obsolete for over a decade.  Add a deprecation note
now and plan to remove fdc(4) support in 16.

Reviewed by:    ziaee
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D41549

(cherry picked from commit 4c736cfc69a7ef81c48c8431b31c7e31746fe816)
DeltaFile
+7-1share/man/man4/fdc.4
+6-1usr.sbin/fdcontrol/fdcontrol.8
+6-1usr.sbin/fdformat/fdformat.8
+6-1usr.sbin/fdread/fdread.1
+6-1usr.sbin/fdwrite/fdwrite.1
+31-55 files

HardenedBSD/src ab4f4f4sys/kgssapi gss_impl.c

kgssapi: Remove broken MOD_UNLOAD code

The module panicked at unload with "recursing but non-recursive rw".
There is a comment that "Unloading of the kgssapi module is not
currently supported" and the MOD_UNLOAD case falls through to returning
EOPNOTSUPP anyway.  Just #if 0 the code in the unload path, leaving it
as a hint in case someone implements unload support later on.

PR:             291249
Reviewed by:    rmacklem
Fixes: ad704a34bc2c ("Use syscall_helper_register(9) rather than syscall_register().")
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D53949

(cherry picked from commit 6901376f59b870ddbb0d922e3455a388333cd460)
DeltaFile
+4-0sys/kgssapi/gss_impl.c
+4-01 files

HardenedBSD/src 56bdfd2contrib/diff/src diff3.c

diff3: Use logical-not, not bitwise for booleans

And compare impcompat != 0 as it's actually an integer incremented on
each use of one of the AeExX3 options.

Reviewed by:    fuz
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D53808

(cherry picked from commit abcb80f46c2607fc16564ca87cc25f0908f29f99)
DeltaFile
+3-3contrib/diff/src/diff3.c
+3-31 files

HardenedBSD/src 437c774contrib/diff/lib getopt.h

diff3: Remove bespoke getopt.h

diff3's getopt.h included a function declaration without a prototype,
which produces a compiler warning.  Just remove the bespoke getopt.h
and use the system header.

Reported by:    Mark Millard
Reviewed by:    fuz
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D53802

(cherry picked from commit 38829592dc77e9ead4259785e0bfb93bd4c2fe34)
DeltaFile
+0-176contrib/diff/lib/getopt.h
+0-1761 files

HardenedBSD/src 3f2d86bshare/man/man4 fdc.4

fdc.4: Correct igor-reported warnings

Sponsored by:   The FreeBSD Foundation

(cherry picked from commit e1b027b276dfba017d12b8a112af3251e79effc5)
DeltaFile
+6-4share/man/man4/fdc.4
+6-41 files

HardenedBSD/src de67d3cshare/man/man5 boot.config.5

boot.config.5: Clarify that this controls legacy boot blocks

Reviewed by;    ziaee
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D52460

(cherry picked from commit e96359d111aaffa6bf0ea72a6f183eb3b91e6c72)
DeltaFile
+4-4share/man/man5/boot.config.5
+4-41 files

HardenedBSD/src e969481sys/modules/mqueue Makefile

mqueue: Export kern_kmq_* symbols from kernel module

linux.ko supports POSIX message queues using these symbols, so they need
to be exported rather than relying on the kernel linker's misfeature of
linking against debug or local symbols (which will soon be disabled by
default).

Reported by:    mav
Reviewed by:    zlei
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D53907

(cherry picked from commit e00a781c216cb12603a0a71c9ca293dde3e06250)
(cherry picked from commit eb90470f5f2a0e5c820c47be329423f5c60ca247)
DeltaFile
+8-0sys/modules/mqueue/Makefile
+8-01 files