HardenedBSD/src 388641d. RELNOTES, sys/dev/hyperv/netvsc if_hn.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+5-3sys/dev/hyperv/netvsc/if_hn.c
+4-0RELNOTES
+9-32 files

HardenedBSD/src 35df47b. RELNOTES, sys/dev/hyperv/netvsc if_hn.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+5-3sys/dev/hyperv/netvsc/if_hn.c
+4-0RELNOTES
+9-32 files

HardenedBSD/src a5ada0acontrib/blocklist FreeBSD-upgrade freebsd-changes.sh, contrib/blocklist/bin blocklistd.c blacklistd.c

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+97-0contrib/blocklist/FreeBSD-upgrade
+17-13contrib/blocklist/bin/blocklistd.c
+17-13contrib/blocklist/bin/blacklistd.c
+18-0contrib/blocklist/freebsd-changes.sh
+149-264 files

HardenedBSD/ports 66de86fMk bsd.gcc.mk, databases/cego distinfo

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+23-7net-im/gomuks/Makefile
+15-0sysutils/openvox-agent8/files/patch-lib_puppet_util_monkey__patches.rb
+5-5net-im/gomuks/distinfo
+3-3databases/cego/distinfo
+3-3www/py-fastapi-sso/distinfo
+2-2Mk/bsd.gcc.mk
+51-204 files not shown
+55-2410 files

HardenedBSD/ports 8b38e5bdevel/py-click-plugins Makefile

devel/py-click-plugins: Release maintainership
DeltaFile
+1-1devel/py-click-plugins/Makefile
+1-11 files

HardenedBSD/ports 47d564dnet-im/gomuks Makefile distinfo

net-im/gomuks: Release maintainership
DeltaFile
+23-7net-im/gomuks/Makefile
+5-5net-im/gomuks/distinfo
+28-122 files

HardenedBSD/ports ed8dac3databases/cego distinfo Makefile

databases/cego: 2.53.3 -> 2.53.4

- fix in CegoSelect::nextJoinTuple
  in case of result ordering, the check for unknown order attribute
  has been removed. The attribute list returned with getAttrRefList
  may also contain attributes for nested ( or parent ) query attributes
  ( attr not found is returned in any case,
  if there is an invalid attribute reference ).
  check125 has been added to verify this case.
DeltaFile
+3-3databases/cego/distinfo
+1-1databases/cego/Makefile
+4-42 files

HardenedBSD/ports 8cd9caeMk bsd.gcc.mk

Mk/bsd.gcc.mk: Use GCC 13 for examples (instead of 12)
DeltaFile
+2-2Mk/bsd.gcc.mk
+2-21 files

HardenedBSD/src 44f6566sys/dev/hyperv/netvsc if_hn.c

Hyper-V: hn: just call vf's ioctl when changing mtu

When changing mtu, if a vf is attached to the netvsc interface, just
calling its ioctl to change vf's mtu is good enough.

Tested by:      whu
MFC after:      3 days
Sponsored by:   Microsoft
DeltaFile
+5-3sys/dev/hyperv/netvsc/if_hn.c
+5-31 files

HardenedBSD/ports 9f7a0desysutils/openvox-agent8 Makefile, sysutils/openvox-agent8/files patch-lib_puppet_util_monkey__patches.rb

sysutils/openvox-agent8: Unbreak with latest rubygem-openssl update

With hat:       puppet
DeltaFile
+15-0sysutils/openvox-agent8/files/patch-lib_puppet_util_monkey__patches.rb
+1-1sysutils/openvox-agent8/Makefile
+16-12 files

HardenedBSD/ports 936c7e3www/py-fastapi-sso distinfo Makefile

www/py-fastapi-sso: Update to 0.19.0

Changelog: https://github.com/tomasvotava/fastapi-sso/releases/tag/0.19.0

Reported by:    portscout
DeltaFile
+3-3www/py-fastapi-sso/distinfo
+1-1www/py-fastapi-sso/Makefile
+4-42 files

HardenedBSD/src b94e4c7. RELNOTES

RELNOTES: Add an entry for 8e3fd450cc53 and friends
DeltaFile
+4-0RELNOTES
+4-01 files

HardenedBSD/src 6edb101contrib/blocklist/bin blacklistd.c

blocklist: blacklist: Chase recent upstream changes

Upstream fixed a couple of bugs:

1. Only attempt to restore the blocking rules if the database file
   exists.  Otherwise, when the service starts for the first time, it
   fails (PR 258411).

2. Revert a commit that removed a call to close(bi->bi_fd), preventing
   the descriptor from being deleted.

PR:             258411
PR:             291680
MFC after:      1 week

(cherry picked from commit 9c844b6110b3768a4fc3ce47cd9d1b30915213ec)
DeltaFile
+17-13contrib/blocklist/bin/blacklistd.c
+17-131 files

HardenedBSD/src 7492932contrib/blocklist/bin blocklistd.c

MFV: Import blocklist 2025-12-15 (8a4b011)

Merge commit 'bfef098f924950a085927b1e7dd6c6db4e651c5c'

Changes:

https://github.com/zoulasc/blocklist/compare/ff13526...8a4b011

PR:             258411
PR:             291680
MFC after:      1 week

(cherry picked from commit 52395203f9ac40d321ed55d93e9887300261d3bf)
DeltaFile
+17-13contrib/blocklist/bin/blocklistd.c
+17-131 files

HardenedBSD/src 4fe8aa4contrib/blocklist FreeBSD-upgrade freebsd-changes.sh

blocklist: Add vendor import instructions

Add vendor import instructions for blocklist.

It includes a "freebsd-changes.sh" script that takes care of adapting
paths and functions into FreeBSD.

Reviewed by:    emaste
MFC after:      1 week
Differential Revision:  https://reviews.freebsd.org/D49510

(cherry picked from commit 715cc257137099e022c7eecea4cd6995bb7604a3)
DeltaFile
+97-0contrib/blocklist/FreeBSD-upgrade
+18-0contrib/blocklist/freebsd-changes.sh
+115-02 files

HardenedBSD/src f1e5376. UPDATING, sys/fs/nfs nfs_commonsubs.c nfsproto.h

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+22-29sys/fs/nfs/nfs_commonsubs.c
+18-14sys/fs/nfsclient/nfs_clrpcops.c
+14-14sys/fs/nfsserver/nfs_nfsdport.c
+13-3sys/fs/nfs/nfsproto.h
+5-5sys/fs/nfs/nfs_var.h
+5-0UPDATING
+77-656 files not shown
+84-7112 files

HardenedBSD/src abd57d4. UPDATING, sys/fs/nfs nfs_commonsubs.c nfsproto.h

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+22-29sys/fs/nfs/nfs_commonsubs.c
+18-14sys/fs/nfsclient/nfs_clrpcops.c
+14-14sys/fs/nfsserver/nfs_nfsdport.c
+13-3sys/fs/nfs/nfsproto.h
+5-5sys/fs/nfs/nfs_var.h
+5-0UPDATING
+77-656 files not shown
+84-7112 files

HardenedBSD/ports c76ae4afilesystems/py-libzfs/files extra-libuutil.patch, multimedia/ffmpegthumbnailer Makefile distinfo

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+17-18multimedia/ffmpegthumbnailer/Makefile
+22-0filesystems/py-libzfs/files/extra-libuutil.patch
+6-6www/tt-rss/pkg-plist
+5-5security/netbird/distinfo
+3-5multimedia/ffmpegthumbnailer/distinfo
+3-3www/tt-rss/distinfo
+56-3715 files not shown
+89-6521 files

HardenedBSD/ports f40d521multimedia/ffmpegthumbnailer Makefile distinfo

multimedia/ffmpegthumbnailer: Update 2.2.3 => 2.3.0, take maintainership

Changelog:
https://github.com/dirkvdb/ffmpegthumbnailer/blob/v2.3.0/ChangeLog

Port changes:
- Upstream switched to 'v' version suffix so add it.
- New release contains the remote patch already so remove it.
- Upstream switched to c++14 standart from 11.
- Add new build option similar to current one.
- Remove USES=pathfix.
- Fix warnings from portclippy.

PR:     291861
DeltaFile
+17-18multimedia/ffmpegthumbnailer/Makefile
+3-5multimedia/ffmpegthumbnailer/distinfo
+2-1multimedia/ffmpegthumbnailer/pkg-plist
+22-243 files

HardenedBSD/ports f6d7f26www/tt-rss pkg-plist distinfo

www/tt-rss: Update g20251120 => g20251222

Commit log:
https://gitlab.tt-rss.org/tt-rss/tt-rss/-/compare/7929b79f5f924cecba61093a037a84caaf59bd55...adf7677041f22c6fd69bbcb8aaf779a170f80d81

PR:     291880
DeltaFile
+6-6www/tt-rss/pkg-plist
+3-3www/tt-rss/distinfo
+2-2www/tt-rss/Makefile
+11-113 files

HardenedBSD/ports af5fe05x11-wm/evilwm distinfo Makefile

x11-wm/evilwm: Update 1.4.3 => 1.5

Release Notes:
https://www.6809.org.uk/evilwm/#notes

Changelog:
https://www.6809.org.uk/evilwm/doc/ChangeLog

While here fix error/warning from portlint and portclippy: move
LICENSE_NAME after LICENSE.

PR:     291864
DeltaFile
+3-3x11-wm/evilwm/distinfo
+2-2x11-wm/evilwm/Makefile
+5-52 files

HardenedBSD/src 60eb371. UPDATING

UPDATING: Add an entry for commit 9f49f436a9ec
DeltaFile
+5-0UPDATING
+5-01 files

HardenedBSD/src e35191csys/fs/nfs nfsproto.h

nfs: Add some support for POSIX draft ACLs

An internet draft (expected to become an RFC someday)
https://datatracker.ietf.org/doc/draft-ietf-nfsv4-posix-acls
describes an extension to NFSv4.2 to handle POSIX draft ACLs.

This is the final patch in the series that enables
the extension of NFSv4.2 to support POSIX draft ACLs.
At this time, only UFS mounted with the "acls" option
will work, and only for FreeBSD built with these patches.
Patches for client and server for the Linux kernel are
in the works.  (I'll admit my next little project is
cleaning the Linux patches up for submission for upstream.)

To make these changes really useful, the FreeBSD port
of OpenZFS needs to be patched to add POSIX draft ACL
support.  (Support for POSIX draft ACLs is already in
the Linux port of OpenZFS.)


    [4 lines not shown]
DeltaFile
+13-3sys/fs/nfs/nfsproto.h
+13-31 files

HardenedBSD/ports e6fb74dsecurity/netbird distinfo Makefile

security/netbird: Update 0.60.7 => 0.60.9

Changelogs:
https://github.com/netbirdio/netbird/releases/tag/v0.60.8
https://github.com/netbirdio/netbird/releases/tag/v0.60.9

Commit log:
https://github.com/netbirdio/netbird/compare/v0.60.7...v0.60.9

PR:     291878
DeltaFile
+5-5security/netbird/distinfo
+1-1security/netbird/Makefile
+6-62 files

HardenedBSD/ports 5d37f27cad/qspeakers distinfo Makefile

cad/qspeakers: Update to upstream release 1.8.5

Details:
- Minor improvements and fixes
DeltaFile
+3-3cad/qspeakers/distinfo
+1-1cad/qspeakers/Makefile
+1-1cad/qspeakers/pkg-plist
+5-53 files

HardenedBSD/ports 7165e03print/transfig/files patch-fig2dev_trans__spline.c patch-fig2dev_dev_genmp.c

HBSD: Fix HARDCFLAGS for print/transfig

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
DeltaFile
+20-0print/transfig/files/patch-fig2dev_trans__spline.c
+20-0print/transfig/files/patch-fig2dev_dev_genmp.c
+15-0print/transfig/files/patch-fig2dev_dev_gencgm.c
+55-03 files

HardenedBSD/src 9f49f43sys/fs/nfs nfs_commonsubs.c nfs_var.h, sys/fs/nfsclient nfs_clrpcops.c

nfs: Add some support for POSIX draft ACLs

An internet draft (expected to become an RFC someday)
https://datatracker.ietf.org/doc/draft-ietf-nfsv4-posix-acls
describes an extension to NFSv4.2 to handle POSIX draft ACLs.

This is the fifth of several patches that implement the
above draft.

This one mostly adds an extra argument to two functions
in nfscommon.ko.  Unfortunately, these functions are
called in many places, so the changes are numerous, but
straightforward.

Since the internal KAPI between the NFS modules is changed
by this commit, all of nfscommon.ko, nfscl.ko and nfsd.ko
must be rebuilt from sources.

There should be no semantics change for the series at

    [3 lines not shown]
DeltaFile
+22-29sys/fs/nfs/nfs_commonsubs.c
+18-14sys/fs/nfsclient/nfs_clrpcops.c
+14-14sys/fs/nfsserver/nfs_nfsdport.c
+5-5sys/fs/nfs/nfs_var.h
+2-2sys/fs/nfsserver/nfs_nfsdserv.c
+1-1sys/fs/nfsserver/nfs_nfsdstate.c
+62-653 files not shown
+65-689 files

HardenedBSD/ports 28c3a79filesystems/py-libzfs Makefile, filesystems/py-libzfs/files extra-libuutil.patch

filesystems:py-libzfs: fix the build on FreeBSD 16

freebsd-src recently removed ZFS's libuutil[^1].  Patch py-libzfs so it
won't attempt to link to that library on FreeBSD 16.

[^1]: https://cgit.freebsd.org/src/commit/?id=66e85755595

Sponsored by:   ConnectWise
PR:             291530
Approved by:    brd (ports)
DeltaFile
+22-0filesystems/py-libzfs/files/extra-libuutil.patch
+5-1filesystems/py-libzfs/Makefile
+27-12 files

HardenedBSD/src 1b1fb62sys/dev/usb/quirk usb_quirk.c

Quirk Realtek RTL8153 to config#1 so if_cdce claims it.  Works much better.
DeltaFile
+1-0sys/dev/usb/quirk/usb_quirk.c
+1-01 files

HardenedBSD/ports ec3e2a7net/ip2proxy distinfo Makefile

net/ip2proxy: Update to 20251118 (4.2.1)
DeltaFile
+3-3net/ip2proxy/distinfo
+2-2net/ip2proxy/Makefile
+5-52 files