HardenedBSD/src 72a1252lib/libjail jail.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+1-1lib/libjail/jail.c
+1-11 files

HardenedBSD/src 41cd9bdlib/libjail jail.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+1-1lib/libjail/jail.c
+1-11 files

HardenedBSD/ports 2206992games/libretro-shaders-slang pkg-plist, multimedia/ccextractor distinfo

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+513-129multimedia/ccextractor/files/patch-src_rust_Cargo.lock
+351-0games/libretro-shaders-slang/pkg-plist
+310-0net/ucx/files/patch-src_ucs_sys_sys.c
+232-0net/ucx/files/patch-src_ucs_sys_event__set.c
+174-0net/ucx/files/patch-src_ucs_type_float8.h
+93-61multimedia/ccextractor/distinfo
+1,673-19086 files not shown
+3,970-44592 files

HardenedBSD/src 686280clib/libjail jail.c

libjail: avoid a double-free in the MAC label bits

As written, we'll repeatedly jps_free() the first element, which is
obviously bogus.  Fix it to index appropriately.

Fixes:  db3b39f063d9f ("libjail: extend struct handlers [...]")
DeltaFile
+1-1lib/libjail/jail.c
+1-11 files

HardenedBSD/ports 82c0edcdevel/py-archinfo distinfo Makefile

devel/py-archinfo: Update to 9.2.199

PR:             293158
Reported by:    Rares Aioanei <schaiba at gmail.com> (maintainer)
DeltaFile
+3-3devel/py-archinfo/distinfo
+1-1devel/py-archinfo/Makefile
+4-42 files

HardenedBSD/ports 79c12ednet-p2p/jackett distinfo Makefile.nuget

net-p2p/jackett: Update to 0.24.1127

Changelog: https://github.com/Jackett/Jackett/releases

PR:             293204
Reported by:    Ralf van der Enden <tremere at cainites.net> (maintainer)
Approved by:    Submitter is maintainer
DeltaFile
+63-63net-p2p/jackett/distinfo
+30-31net-p2p/jackett/Makefile.nuget
+35-12net-p2p/jackett/pkg-plist
+1-1net-p2p/jackett/Makefile
+129-1074 files

HardenedBSD/ports a8ee523games/libretro-shaders-slang pkg-plist distinfo

games/libretro-shaders-slang: Update to g20260220

Commitlog:
https://github.com/libretro/slang-shaders/compare/a38704e...ff3bd23

PR:             293354
Reported by:    Stefan Schlosser <bsdcode at disroot.org> (maintainer)
DeltaFile
+351-0games/libretro-shaders-slang/pkg-plist
+3-3games/libretro-shaders-slang/distinfo
+2-2games/libretro-shaders-slang/Makefile
+356-53 files

HardenedBSD/ports 9ebb19cx11/rofi-calc distinfo Makefile

x11/rofi-calc: Update 2.5.0 -> 2.5.1 (bugfix)

Changelog:
https://github.com/svenstaro/rofi-calc/blob/v2.5.1/CHANGELOG.md

Changes:
- Fix -calc-command-history and -calc-error-color not working due to getting
parsed incorrectly #148 (thanks @Jontos)

PR:             293367
Reported by:    Vidar Karlsen <vidar at karlsen.tech> (maintainer)
DeltaFile
+3-3x11/rofi-calc/distinfo
+1-1x11/rofi-calc/Makefile
+4-42 files

HardenedBSD/ports 827b542net-p2p/reticulum distinfo Makefile

HBSD: Bump net-p2p/reticulum

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
DeltaFile
+3-3net-p2p/reticulum/distinfo
+2-1net-p2p/reticulum/Makefile
+5-42 files

HardenedBSD/src 5d6dfa5share/man/man5 src.conf.5

src.conf.5: regen documenting WITH_IPFILTER_IPFS

(cherry picked from commit b9b1262a8ef95857101e538145703894e3b880b7)
DeltaFile
+5-1share/man/man5/src.conf.5
+5-11 files

HardenedBSD/src f981908tools/build/options WITH_IPFILTER_IPFS

options: describe WITH_IPFILTER_IPFS

Add a description for WITH_IPFILTER_IPFS.

Fixes:          0ff0c19e7f70 ("ipfilter: Disable ipfs(8) by default")
(cherry picked from commit c112ad75605ccdfcb8bbce2f57b0e7a077f057f8)
DeltaFile
+3-0tools/build/options/WITH_IPFILTER_IPFS
+3-01 files

HardenedBSD/src 7ae432esys/kern vfs_mount.c

vfs_mount.c: Don't call VFS_MOUNT() if only exports are being updated

PR#293198 reports a hang within ZFS when exports
are being updated concurrently with a VOP_SETEXTATTR().
The hang appears to be caused by mishandling of the
z_teardown_lock, but fixing handling of this lock appears
to be a major effort. Since the hang occurs when
VFS_MOUNT() acquires a write/exclusive z_teardown_lock,
which rarely occurs, except when exports are being updated,
this patch avoids the VFS_MOUNT() call for this case.

Avoiding a VFS_MOUNT() call fixes the hang for the case
reported by PR#293198 and is also an optimization.
As such, this patch avoids the VFS_MOUNT() call when only exports
are being updated similar to what was already being done
within vnet prisons.

PR:     293198

(cherry picked from commit 935cf3284f520c90a63baaadb762caaa30084f5c)
DeltaFile
+31-21sys/kern/vfs_mount.c
+31-211 files

HardenedBSD/src 4791189usr.sbin/syslogd/tests syslogd_format_test_common.sh

syslogd/tests: use kern.features to detect INET support

This fixes INET feature detection with kernel configs
that do not include the kern.conftxt sysctl, such as
riscv64 currently[0].

[0] https://ci.freebsd.org/view/Test/job/FreeBSD-main-riscv64-test/16514/testReport/usr.sbin.syslogd/syslogd_forwarded_format_test/O_flag_bsd_forwarded_legacy/

Reviewed by:    markj
Approved by:    emaste (mentor)
MFC after:      3 days
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D55383

(cherry picked from commit c721ceeb3ef0b29d06e6c3c634579f3bc85cc28b)
DeltaFile
+1-2usr.sbin/syslogd/tests/syslogd_format_test_common.sh
+1-21 files

HardenedBSD/src 86a8a67sys/riscv/conf GENERIC

riscv: GENERIC: enable KERN_TLS

This unskips 585 sys/kern/ktls_test testcases[0] in CI. All 585 tests currently pass.

[0] https://ci.freebsd.org/view/Test/job/FreeBSD-main-riscv64-test/16514/testReport/sys.kern/

Approved by:            emaste (mentor)
MFC after:              3 days
Sponsored by:           The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D55376

(cherry picked from commit 1e649491b8567151270095fda3bce8faea394952)
DeltaFile
+1-0sys/riscv/conf/GENERIC
+1-01 files

HardenedBSD/src 869908busr.bin/less lesspipe.sh

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+1-1usr.bin/less/lesspipe.sh
+1-11 files

HardenedBSD/src 653a013usr.bin/less lesspipe.sh

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+1-1usr.bin/less/lesspipe.sh
+1-11 files

HardenedBSD/src 0ef5177secure/lib/libcrypto/man/man3 Makefile, share/man/man4 multicast.4

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+22-4share/man/man4/multicast.4
+0-1secure/lib/libcrypto/man/man3/Makefile
+22-52 files

HardenedBSD/ports 804e369deskutils/qlipper Makefile, games/armagetronad pkg-plist Makefile

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+21-7games/armagetronad/pkg-plist
+4-20games/armagetronad/Makefile
+12-7deskutils/qlipper/Makefile
+9-9www/cinny/pkg-plist
+8-8games/armagetronad/files/patch-Makefile.am
+7-7games/armagetronad/files/patch-batch_sysinstall.in
+61-5819 files not shown
+105-10325 files

HardenedBSD/ports 87999cdsysutils/amdmsrtweaker/files patch-Makefile

sysutils/amdmsrtweaker: fix build on recent FreeBSD

bmake has recently started to support $^ in addition to $>, causing
both to expand and leading to a build error like

c++ -O2 -pipe -fstack-protector-strong -fno-strict-aliasing   -Wall \
-Werror -pedantic  -o amdmsrt Info.o AmdMsrTweaker.o WinRing0.o \
Worker.oInfo.o AmdMsrTweaker.o WinRing0.o Worker.o
c++: error: no such file or directory: 'Worker.oInfo.o'

Fix the error by avoiding both $^ and $>.

Approved by:    portmgr (build fix blanket)
MFH:            2026Q1
DeltaFile
+11-0sysutils/amdmsrtweaker/files/patch-Makefile
+11-01 files

HardenedBSD/ports 60989f4devel/goreleaser distinfo Makefile

devel/goreleaser: update to 2.14.0

Changelog: https://github.com/goreleaser/goreleaser/releases/tag/v2.14.0
DeltaFile
+5-5devel/goreleaser/distinfo
+2-3devel/goreleaser/Makefile
+7-82 files

HardenedBSD/ports 2ea396cbiology/ncbi-cxx-toolkit Makefile

biology/ncbi-cxx-toolkit: only for aarch64, amd64

This port uses SIMD intrincis to compute CRC checksums.
It's probably easy to add a generic code path if desired.

Approved by:    portmgr (build fix blanket)
MFH:            2026Q1
Sponsored by:   Raptor Computing Systems, LLC
DeltaFile
+3-1biology/ncbi-cxx-toolkit/Makefile
+3-11 files

HardenedBSD/ports 2935cd3games/punchy Makefile

games/punchy: only supported where v8 is

See also:       293314
MFH:            2026Q1
Approved by:    portmgr (build fix blanket)
Sponsored by:   Raptor Computing Systems, LLC
DeltaFile
+3-0games/punchy/Makefile
+3-01 files

HardenedBSD/ports f9dd1c8devel/simdjson distinfo Makefile

devel/simdjson: update to 4.3.1

Changelog: https://github.com/simdjson/simdjson/releases/tag/v4.3.1
DeltaFile
+3-3devel/simdjson/distinfo
+1-1devel/simdjson/Makefile
+4-42 files

HardenedBSD/ports c306479biology/ncbi-blast+ Makefile

biology/ncbi-blast+: only for aarch64, amd64

This port uses SIMD intrincis to compute CRC checksums.
It's probably easy to add a generic code path if desired.

Approved by:    portmgr (build fix blanket)
MFH:            2026Q1
Sponsored by:   Raptor Computing Systems, LLC
DeltaFile
+3-2biology/ncbi-blast+/Makefile
+3-21 files

HardenedBSD/ports 294f659net/ucx pkg-plist, net/ucx/files patch-src_ucs_sys_sys.c patch-src_ucs_sys_event__set.c

net/ucx: Unified Communication X for high-performance messaging

UCX (Unified Communication X) is a high-performance communication framework
for modern HPC and data-intensive workloads. It provides low-latency,
high-bandwidth messaging and remote-memory-access primitives across a wide
range of transports, including shared memory, TCP/IP, and RDMA-capable
interconnects such as InfiniBand and RoCE (when supported by the platform).

UCX is commonly used as a communication substrate for MPI, OpenSHMEM, and
other distributed runtimes. It exposes a set of layered APIs (UCP/UCT/UCS/UCM)
to balance portability and performance while enabling optimized transport
selection, rendezvous protocols, and progress models.

PR:             292889
DeltaFile
+310-0net/ucx/files/patch-src_ucs_sys_sys.c
+232-0net/ucx/files/patch-src_ucs_sys_event__set.c
+174-0net/ucx/files/patch-src_ucs_type_float8.h
+144-0net/ucx/pkg-plist
+127-0net/ucx/files/patch-src_ucp_core_ucp__worker.c
+109-0net/ucx/files/patch-src_ucs_vfs_fuse_vfs__fuse.c
+1,096-043 files not shown
+2,489-049 files

HardenedBSD/ports 30f8f24multimedia/ccextractor distinfo Makefile.crates, multimedia/ccextractor/files patch-src_rust_Cargo.lock patch-src_rust_Cargo.toml

multimedia/ccextractor: update to 0.96.6

Changelog: https://github.com/CCExtractor/ccextractor/releases/tag/v0.96.6
DeltaFile
+513-129multimedia/ccextractor/files/patch-src_rust_Cargo.lock
+93-61multimedia/ccextractor/distinfo
+45-29multimedia/ccextractor/Makefile.crates
+2-2multimedia/ccextractor/files/patch-src_rust_Cargo.toml
+1-2multimedia/ccextractor/Makefile
+654-2235 files

HardenedBSD/ports a4bb526devel/simdjson distinfo pkg-plist

devel/simdjson: update to 4.3.0

Changelog: https://github.com/simdjson/simdjson/releases/tag/v4.3.0
DeltaFile
+3-3devel/simdjson/distinfo
+2-2devel/simdjson/pkg-plist
+1-1devel/simdjson/Makefile
+6-63 files

HardenedBSD/ports 8e33257biology/infernal Makefile

biology/infernal: not for ppc64le

Project can use VMX, but only on big endian platforms.

Approved by:    portmgr (build fix blanket)
MFH:            2026Q1
Sponsored by:   Raptor Computing Systems, LLC
DeltaFile
+1-1biology/infernal/Makefile
+1-11 files

HardenedBSD/ports 1bce1adsysutils/symon Makefile distinfo

sysutils/symon: update to 2.90

 - now broken on FreeBSD 15 on account of DIOCGETSTATUS being removed

Changelog: https://wpd.home.xs4all.nl/symon/changelog.html

Sponsored by:   Raptor Computing Systems, LLC
DeltaFile
+6-5sysutils/symon/Makefile
+3-3sysutils/symon/distinfo
+9-82 files

HardenedBSD/ports 2f3203cscience/simlib Makefile, science/simlib/files patch-Makefile patch-src_Makefile

science/simlib: update to 3.09

 - project now portable
 - ship docs
 - take maintainership
DeltaFile
+78-0science/simlib/files/patch-Makefile
+56-0science/simlib/files/patch-src_Makefile
+45-0science/simlib/files/patch-examples_Makefile
+41-0science/simlib/files/patch-tests_Makefile
+12-28science/simlib/Makefile
+32-0science/simlib/files/patch-src_Makefile.generic
+264-284 files not shown
+278-7010 files