HardenedBSD/src 5c4a381sys/arm/ti/omap4 omap4_prcm_clks.c, sys/contrib/edk2/Include/IndustryStandard Acpi60.h Acpi51.h

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+1,465-1,304sys/contrib/edk2/Include/Library/BaseLib.h
+2,079-166sys/dev/bnxt/bnxt_en/hsi_struct_def.h
+959-942sys/contrib/edk2/Include/IndustryStandard/Acpi60.h
+824-807sys/contrib/edk2/Include/IndustryStandard/Acpi51.h
+764-753sys/contrib/edk2/Include/IndustryStandard/Acpi50.h
+0-1,499sys/arm/ti/omap4/omap4_prcm_clks.c
+6,091-5,47195 files not shown
+12,162-16,145101 files

HardenedBSD/src 52c3061sbin/ifconfig ifconfig.8, sys/netinet6 in6_pcb.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+15-6sbin/ifconfig/ifconfig.8
+4-5sys/netinet6/in6_pcb.c
+19-112 files

HardenedBSD/src 2a931f7include signal.h, lib/libc/gen psignal.3 sysctl.3

Merge branch 'freebsd/14-stable/main' into hardened/14-stable/master
DeltaFile
+21-1lib/libc/gen/psignal.3
+8-8lib/libc/gen/sysctl.3
+6-0lib/libc/gen/psignal.c
+2-1lib/libc/gen/Makefile.inc
+1-0lib/libc/gen/Symbol.map
+1-0include/signal.h
+39-106 files

HardenedBSD/ports c587445games/naev Makefile, games/naev/files patch-meson.build

games/naev: Fix build

Reported by:     pkg-fallout
DeltaFile
+11-2games/naev/files/patch-meson.build
+3-1games/naev/Makefile
+14-32 files

HardenedBSD/ports 0dd72a2devel/gettext-tools Makefile, devel/glib20 Makefile

regression: bump packages known to trigger the pkg 2.1.1 regression

A regression was introduced in pkg 2.1.1 which results in at least those
packages ending up depending on themselves.

Bump to force rebuild them
DeltaFile
+1-1devel/gettext-tools/Makefile
+1-0devel/glib20/Makefile
+1-0devel/pkgconf/Makefile
+3-13 files

HardenedBSD/ports 3e75105ports-mgmt/pkg distinfo Makefile

ports-mgmt/pkg: update to 2.1.2

Changes:
- fix an important regression introduced in 2.1.1
- more performance improvement on pkg add

Because of a bad merge between the main and the release branch of pkg
some commits were missed and a regression was introduced in pkg 2.1.1

It results in some packages dependending on themselves which breaks
early the various bulks.

Those packages built with 2.1.1 needs to be recreated with 2.1.2

PR:             286130
DeltaFile
+3-3ports-mgmt/pkg/distinfo
+1-1ports-mgmt/pkg/Makefile
+4-42 files

HardenedBSD/ports 5626746security/vuxml/vuln 2025.xml

security/vuxml: document gitlab vulnerabilities
DeltaFile
+37-0security/vuxml/vuln/2025.xml
+37-01 files

HardenedBSD/ports a74fe88devel/p5-Data-ObjectDriver distinfo Makefile

devel/p5-Data-ObjectDriver: Update to 0.25
DeltaFile
+3-3devel/p5-Data-ObjectDriver/distinfo
+1-1devel/p5-Data-ObjectDriver/Makefile
+4-42 files

HardenedBSD/ports 140c63ddatabases/p5-Cache-Memcached-Managed distinfo Makefile

databases/p5-Cache-Memcached-Managed: Update to 0.27
DeltaFile
+3-3databases/p5-Cache-Memcached-Managed/distinfo
+1-1databases/p5-Cache-Memcached-Managed/Makefile
+4-42 files

HardenedBSD/ports 1ecaeb5devel/p5-CPAN-Changes distinfo Makefile

devel/p5-CPAN-Changes: Update to 0.500005
DeltaFile
+3-3devel/p5-CPAN-Changes/distinfo
+1-1devel/p5-CPAN-Changes/Makefile
+4-42 files

HardenedBSD/ports e22b3a9games/vkquake distinfo Makefile, games/vkquake/files patch-pr__edict.c

games/vkquake: Update to 1.32.1
DeltaFile
+13-0games/vkquake/files/patch-pr__edict.c
+3-3games/vkquake/distinfo
+1-2games/vkquake/Makefile
+17-53 files

HardenedBSD/ports 4050acafinance/chiapos distinfo Makefile, finance/chiapos/files patch-CMakeLists.txt patch-setup.py

finance/chiapos: Update to 1.0.7

PR:             260190
Reported by:    risner <risner at stdio.com> (maintainer)
DeltaFile
+36-20finance/chiapos/files/patch-CMakeLists.txt
+5-15finance/chiapos/files/patch-setup.py
+3-3finance/chiapos/distinfo
+3-3finance/chiapos/Makefile
+0-3finance/chiapos/pkg-descr
+47-445 files

HardenedBSD/ports 271cb6eemulators/virtualbox-ose-70/files patch-src_VBox_Runtime_r0drv_freebsd_memobj-r0drv-freebsd.c patch-src_VBox_Runtime_r0drv_freebsd_the-freebsd-kernel.h, emulators/virtualbox-ose-legacy/files patch-src_VBox_Runtime_r0drv_freebsd_memobj-r0drv-freebsd.c patch-src_VBox_Runtime_r0drv_freebsd_the-freebsd-kernel.h

emulators/virtualbox-ose-kmod{,-70,-legacy}: Fix the build after FreeBSD kernel changes in 1500038

Update to chase removal of vm_page_next()

PR:             286206 286193 286204
Tested by:      Graham Perrin <grahamperrin at gmail.com>
MFH:            2025Q2
DeltaFile
+52-29emulators/virtualbox-ose-70/files/patch-src_VBox_Runtime_r0drv_freebsd_memobj-r0drv-freebsd.c
+52-29emulators/virtualbox-ose-legacy/files/patch-src_VBox_Runtime_r0drv_freebsd_memobj-r0drv-freebsd.c
+46-23emulators/virtualbox-ose/files/patch-src_VBox_Runtime_r0drv_freebsd_memobj-r0drv-freebsd.c
+5-4emulators/virtualbox-ose-70/files/patch-src_VBox_Runtime_r0drv_freebsd_the-freebsd-kernel.h
+4-3emulators/virtualbox-ose/files/patch-src_VBox_Runtime_r0drv_freebsd_the-freebsd-kernel.h
+3-2emulators/virtualbox-ose-legacy/files/patch-src_VBox_Runtime_r0drv_freebsd_the-freebsd-kernel.h
+162-906 files

HardenedBSD/ports b2b492cgraphics/mesa-devel distinfo Makefile

graphics/mesa-devel: update to 25.1.b.362

Changes:        https://gitlab.freedesktop.org/mesa/mesa/-/compare/d31172d092f...d31172d092f
DeltaFile
+2-2graphics/mesa-devel/distinfo
+1-2graphics/mesa-devel/Makefile
+3-42 files

HardenedBSD/ports d21ddebgraphics/shaderc distinfo Makefile

graphics/shaderc: update to 2025.2

Changes:        https://github.com/google/shaderc/compare/v2025.1...v2025.2
Reported by:    Repology
DeltaFile
+5-5graphics/shaderc/distinfo
+2-3graphics/shaderc/Makefile
+7-82 files

HardenedBSD/ports 00045e6graphics/blender Makefile, graphics/mesa-dri Makefile

graphics/spirv-tools: update to 2025.2.r1

Changes:        https://github.com/KhronosGroup/SPIRV-Tools/compare/v2025.1...v2025.2.rc1
Reported by:    Repology
DeltaFile
+5-5graphics/spirv-tools/distinfo
+2-2graphics/spirv-tools/Makefile
+1-1graphics/mesa-dri/Makefile
+1-1graphics/blender/Makefile
+1-1graphics/shaderc/Makefile
+1-1lang/clover/Makefile
+11-116 files not shown
+17-1312 files

HardenedBSD/ports c2f30c4graphics/spirv-tools distinfo Makefile

graphics/spirv-tools: update to 2025.1 (nop)

Changes:        https://github.com/KhronosGroup/SPIRV-Tools/compare/v2025.1.rc1...v2025.1
Reported by:    GitHub (watch releases)
DeltaFile
+2-2graphics/spirv-tools/distinfo
+1-1graphics/spirv-tools/Makefile
+3-32 files

HardenedBSD/src ca4b046sbin/ifconfig ifconfig.8, sys/netinet6 in6_pcb.c

netinet6: allow binding to anycast addresses

the restriction on sending packets from anycast source addresses was
removed in RFC4291, so there's no reason to forbid binding to such
addresses.  this allows anycast services (e.g., DNS) to actually use
anycast addresses, which was previously impossible.

RFC4291 also removes the restriction that only routers may configure
anycast addresses; this was never enforced in code but was documented in
ifconfig.8.  update ifconfig.8 to document both changes.

PR:     285545
Reviewed by:    des, adrian
Approved by:    des (mentor)
Differential Revision:  https://reviews.freebsd.org/D49905
DeltaFile
+15-6sbin/ifconfig/ifconfig.8
+4-5sys/netinet6/in6_pcb.c
+19-112 files

HardenedBSD/src 81fc946lib/libc/gen sysctl.3

sysctl.3: put KERN_PROC_RLIMIT_USAGE in the right spot

(cherry picked from commit 199a2be029e835c3b284d948e8168af378b06efc)
DeltaFile
+8-8lib/libc/gen/sysctl.3
+8-81 files

HardenedBSD/src 0ad5308include signal.h, lib/libc/gen psignal.3 psignal.c

Add POSIX psiginfo(3) call

PR:     286133

(cherry picked from commit 3b2f0bfc35167724a41c969c1823be6b1ede15ab)
DeltaFile
+21-1lib/libc/gen/psignal.3
+6-0lib/libc/gen/psignal.c
+2-1lib/libc/gen/Makefile.inc
+1-0include/signal.h
+1-0lib/libc/gen/Symbol.map
+31-25 files

HardenedBSD/src a8ca60c. Makefile.inc1

HBSD: Resolve merge conflict

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
DeltaFile
+1-5Makefile.inc1
+1-51 files

HardenedBSD/src b11acc5. Makefile.inc1

Merge remote-tracking branch 'origin/freebsd/14-stable/main' into hardened/14-stable/master

Conflicts:
        Makefile.inc1 (unresolved)
DeltaFile
+5-0Makefile.inc1
+5-01 files

HardenedBSD/src 52fa837sys/contrib/edk2/Include/IndustryStandard Acpi60.h Acpi51.h, sys/contrib/edk2/Include/Library BaseLib.h

Merge remote-tracking branch 'internal/freebsd/current/main' into hardened/current/master
DeltaFile
+1,465-1,304sys/contrib/edk2/Include/Library/BaseLib.h
+2,079-166sys/dev/bnxt/bnxt_en/hsi_struct_def.h
+959-942sys/contrib/edk2/Include/IndustryStandard/Acpi60.h
+824-807sys/contrib/edk2/Include/IndustryStandard/Acpi51.h
+764-753sys/contrib/edk2/Include/IndustryStandard/Acpi50.h
+742-736sys/contrib/edk2/Include/Uefi/UefiInternalFormRepresentation.h
+6,833-4,70847 files not shown
+11,508-8,68853 files

HardenedBSD/src 2fe4242share/mk bsd.lib.mk bsd.suffixes-extra.mk

HBSD: Resolve merge conflict

With commit 9c4f1497dae7832e2727682e9161ca9572e56dfe, FreeBSD moved the
object file suffix transformation rules into a separate file. As part of
resolving this merge conflict, we need to remove references to the
PIE-related objects (.pieo and similar).

As part of the 2013-2015 ASLR work, we came up with a different method
for building with PIC/PIE. As such, we don't need to use FreeBSD's .pieo
and related.

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
DeltaFile
+0-53share/mk/bsd.lib.mk
+2-20share/mk/bsd.suffixes-extra.mk
+2-732 files

HardenedBSD/ports 59924f3devel/got/files patch-libexec_got-fetch-http_got-fetch-http.c, dns/dnsmasq-devel/files patch-src_dbus.c

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+194-195mail/thunderbird/files/patch-libwebrtc-generated
+0-198devel/got/files/patch-libexec_got-fetch-http_got-fetch-http.c
+0-50mail/thunderbird/files/patch-bug1948776
+43-0mail/thunderbird/files/patch-comm_third__party_rust__wgpu-hal_src_vulkan_drm.rs
+18-0mail/thunderbird/files/patch-python_sites_mach.txt
+0-17dns/dnsmasq-devel/files/patch-src_dbus.c
+255-46033 files not shown
+369-53439 files

HardenedBSD/ports 8b3af89www/tomcat-devel Makefile, www/tomcat-devel/files tomcat_devel.in

www/tomcat{9,101,110,-devel}: Add the JAVA 9+ specific start-up parameters required by Tomcat

Default startup script set these parameters.
Without them, some applications do not work.

MFH:    2025Q2
DeltaFile
+9-0www/tomcat-devel/files/tomcat_devel.in
+9-0www/tomcat110/files/tomcat110.in
+8-0www/tomcat9/files/tomcat9.in
+8-0www/tomcat101/files/tomcat101.in
+1-0www/tomcat101/Makefile
+1-0www/tomcat-devel/Makefile
+36-02 files not shown
+38-08 files

HardenedBSD/src f2605f6sys/dev/mpi3mr mpi3mr_pci.c mpi3mr.h

mpi3mr: configure larger max I/O size if the HBA firmware supports it

The max I/O size that an mpi3mr HBA supports is reported in the IOCFacts
structure (with 0 representing the legacy max I/O size of 1 MB).
By default, set the max I/O size of devices attached to mpi3mr controllers
to the smaller of the HBA's max I/O size and the kernel's maxphys.
Allow this default to be overriden by a global tunable
"hw.mpi3mr.max_sgl_entries" or by a per-controller tunable
"dev.mpi3mr.N.max_sgl_entries".

Sponsored by:   Netflix
Reviewed by:    imp
Differential Revision:  https://reviews.freebsd.org/D49090
DeltaFile
+17-1sys/dev/mpi3mr/mpi3mr_pci.c
+9-3sys/dev/mpi3mr/mpi3mr.h
+9-2sys/dev/mpi3mr/mpi3mr.c
+6-4sys/dev/mpi3mr/mpi3mr_cam.c
+41-104 files

HardenedBSD/ports fd0909fwww/tomcat-devel distinfo pkg-plist

www/tomcat-devel: Update 11.0.5 => 11.0.6

Changelog:
https://tomcat.apache.org/tomcat-11.0-doc/changelog.html#Tomcat_11.0.6_(markt)

MFH:    2025Q2
DeltaFile
+3-3www/tomcat-devel/distinfo
+2-1www/tomcat-devel/pkg-plist
+1-1www/tomcat-devel/Makefile
+6-53 files

HardenedBSD/src 5e9af2blib/libefivar efivar.c

libefivar: Simplify Z / zero define

This really onl needs to be one zero long for the entire structure to be
initialized. Use this form instead.

Sponsored by:           Netflix
DeltaFile
+1-1lib/libefivar/efivar.c
+1-11 files

HardenedBSD/src fec0e20sys/dev/bnxt/bnxt_en bnxt_hwrm.c

bnxt_en: Thor2 Ring counters not incrementing during traffic

The ctx_hw_stats_ext DMA address was not correctly passed to the
firmware during the HWRM_STAT_CTX_ALLOC allocation, causing stats to not
populate for Thor2.  Passing the correct DMA length resolved the issue

MFC-After: 3 days
Differential-Revision: https://reviews.freebsd.org/D49732
DeltaFile
+4-1sys/dev/bnxt/bnxt_en/bnxt_hwrm.c
+4-11 files