HardenedBSD/src 4333cf0sys/kern kern_cpu.c, sys/x86/cpufreq hwpstate_amd.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+144-54sys/x86/cpufreq/hwpstate_amd.c
+2-6sys/kern/kern_cpu.c
+1-0tests/sys/netlink/test_rtnl_gre.c
+147-603 files

HardenedBSD/src 25d4a9bsys/kern kern_cpu.c, sys/x86/cpufreq hwpstate_amd.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+144-54sys/x86/cpufreq/hwpstate_amd.c
+2-6sys/kern/kern_cpu.c
+1-0tests/sys/netlink/test_rtnl_gre.c
+147-603 files

HardenedBSD/ports cba0f14multimedia/emby-server Makefile, net/wireproxy/files wireproxy.in

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+54-54www/iridium/files/patch-chrome_browser_about__flags.cc
+54-54www/ungoogled-chromium/files/patch-chrome_browser_about__flags.cc
+68-0www/access-log-exporter/files/access_log_exporter.in
+64-0net/wireproxy/files/wireproxy.in
+24-22multimedia/emby-server/Makefile
+41-0www/access-log-exporter/Makefile
+305-13066 files not shown
+538-33472 files

HardenedBSD/ports 36c3c50audio/subtui distinfo Makefile

audio/subtui: Update to 2.5.1

Changelog: https://github.com/MattiaPun/SubTUI/releases/tag/v2.5.1
DeltaFile
+5-5audio/subtui/distinfo
+1-1audio/subtui/Makefile
+6-62 files

HardenedBSD/ports bd9ffd0games/flightgear-mb339-pan Makefile

games/flightgear-mb339-pan: Deprecate port
DeltaFile
+3-0games/flightgear-mb339-pan/Makefile
+3-01 files

HardenedBSD/ports 42ee89feditors/vscode Makefile, net-im/deltachat-desktop Makefile

*/*: Bump port revision after electron39 update (ef4c7150df38)
DeltaFile
+1-1textproc/obsidian/Makefile
+1-1net-im/deltachat-desktop/Makefile
+1-1net-im/signal-desktop/Makefile
+1-0editors/vscode/Makefile
+1-0net-im/teams/Makefile
+5-35 files

HardenedBSD/ports ef4c715devel/electron39 distinfo Makefile.version

devel/electron39: Update to 39.6.1

Changelog: https://github.com/electron/electron/releases/tag/v39.6.1

Reported by:    GitHub (watch releases)
DeltaFile
+5-5devel/electron39/distinfo
+1-1devel/electron39/Makefile.version
+6-62 files

HardenedBSD/ports bc2aa95games/openjazz distinfo Makefile

games/openjazz: Update to 20260218

Also:
- fix CMake DATAPATH type
- set required SDL version to 2 (waiting for SDL 3 to be updated
  in ports, as at least version 3.4.0 is needed)
DeltaFile
+3-3games/openjazz/distinfo
+3-2games/openjazz/Makefile
+6-52 files

HardenedBSD/ports 505c537www Makefile, www/access-log-exporter Makefile pkg-descr

www/access-log-exporter: Add new port

access-log-exporter is a Prometheus exporter that receives web server
access logs via syslog and converts them into metrics.

access-log-exporter processes logs from multiple web servers and has
undergone testing with Nginx and Apache HTTP Server 2.4. It supports
flexible metric configuration through presets and provides comprehensive
monitoring capabilities for web traffic analysis.
DeltaFile
+68-0www/access-log-exporter/files/access_log_exporter.in
+41-0www/access-log-exporter/Makefile
+7-0www/access-log-exporter/pkg-descr
+5-0www/access-log-exporter/distinfo
+1-0www/Makefile
+122-05 files

HardenedBSD/ports c3cb673multimedia/emby-server Makefile distinfo

multimedia/emby-server: update to 4.9.3.0

Changes:        https://github.com/MediaBrowser/Emby.Releases/releases/tag/4.9.1.80
Changes:        https://github.com/MediaBrowser/Emby.Releases/releases/tag/4.9.1.90
Changes:        https://github.com/MediaBrowser/Emby.Releases/releases/tag/4.9.3.0

PR:             293298
DeltaFile
+24-22multimedia/emby-server/Makefile
+9-5multimedia/emby-server/distinfo
+33-272 files

HardenedBSD/ports 41e7245www/iridium/files patch-chrome_browser_about__flags.cc patch-chrome_browser_chrome__content__browser__client.cc

www/iridium: update to 2026.02.145.1
DeltaFile
+54-54www/iridium/files/patch-chrome_browser_about__flags.cc
+11-11www/iridium/files/patch-chrome_browser_chrome__content__browser__client.cc
+7-7www/iridium/files/patch-components_feature__engagement_public_feature__list.h
+6-6www/iridium/files/patch-chrome_browser_chrome__browser__interface__binders__webui__parts__desktop.cc
+5-5www/iridium/files/patch-chrome_browser_background_glic_glic__status__icon.cc
+4-4www/iridium/files/patch-chrome_browser_ui_webui_cr__components_searchbox_searchbox__handler.cc
+87-8716 files not shown
+129-12922 files

HardenedBSD/src f1b93fcsys/x86/cpufreq hwpstate_amd.c

hwpstate_amd(4): Fix punctuation in 'desired_performance' knob's description

To be consistent with that of the others.

No functional change.

Sponsored by:   The FreeBSD Foundation
DeltaFile
+1-1sys/x86/cpufreq/hwpstate_amd.c
+1-11 files

HardenedBSD/src b69a396sys/x86/cpufreq hwpstate_amd.c

hwpstate_amd(4): CPPC: Allow attaching even if CAPABILITY_1 cannot be read

If that MSR cannot be read, we fallback to defaults specified by the
ACPI specification, as we are already doing when the minimum and maximum
values in there look bogus.

Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D55252
DeltaFile
+28-17sys/x86/cpufreq/hwpstate_amd.c
+28-171 files

HardenedBSD/src 953b916sys/kern kern_cpu.c

cpufreq(4): cpufreq_levels_sysctl(): Remove always false NULL test

'sc->levels_buf' is initialized with malloc(M_WAITOK), so can never be
NULL.  Another sysctl handler function (cpufreq_curr_sysctl()) already
relies on that.

MFC after:      2 weeks
Sponsored by:   The FreeBSD Foundation
DeltaFile
+2-6sys/kern/kern_cpu.c
+2-61 files

HardenedBSD/src 80d32a6sys/x86/cpufreq hwpstate_amd.c

hwpstate_amd(4): CPPC: Switch the default to maximum performance

Set controls to maximum performance to avoid regressions now that CPPC
is activated by default and to match what the P-state support does.

Relnotes:       yes
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D55253
DeltaFile
+10-8sys/x86/cpufreq/hwpstate_amd.c
+10-81 files

HardenedBSD/src 7f36d7asys/x86/cpufreq hwpstate_amd.c

hwpstate_amd(4): Consistency of cached CPPC_REQUEST value

If writing to the CPPC_REQUEST MSR fails, make sure we do not set the
softc's 'cppc.request' field to the intended new value.  Both
set_cppc_request_cb() and enable_cppc_cb() were changed to this effect.

In case enable_cppc_cb() could not read CPPC_REQUEST, mark that through
a new softc flag, HWPFL_CPPC_REQUEST_NOT_READ, so that we do not keep
and use a wrong value when the content of CPPC_REQUEST is read/written
through sysctl(9) knobs, but instead retry reading the MSR (this is the
purpose of the new get_cppc_request() sub-function).

When setting CPPC_REQUEST has failed, distinguish the case where it
could not be read at all from the case where it could not be written, by
respectively returning EIO and EOPNOTSUPP in these cases.  The previous
return value of EFAULT was confusing as sysctl(3) documents it as
happening if the passed arguments are invalid.

While here, add some herald comment before sysctl_cppc_dump_handler()

    [5 lines not shown]
DeltaFile
+108-31sys/x86/cpufreq/hwpstate_amd.c
+108-311 files

HardenedBSD/ports 4ca7352www/ungoogled-chromium distinfo, www/ungoogled-chromium/files patch-chrome_browser_about__flags.cc patch-chrome_browser_chrome__content__browser__client.cc

www/ungoogled-chromium: update to 145.0.7632.109

ecurity:        https://vuxml.freebsd.org/freebsd/a977cb1c-0d7d-11f1-85c5-a8a1599412c6.html
DeltaFile
+54-54www/ungoogled-chromium/files/patch-chrome_browser_about__flags.cc
+11-11www/ungoogled-chromium/files/patch-chrome_browser_chrome__content__browser__client.cc
+7-7www/ungoogled-chromium/distinfo
+7-7www/ungoogled-chromium/files/patch-components_feature__engagement_public_feature__list.h
+6-6www/ungoogled-chromium/files/patch-chrome_browser_chrome__browser__interface__binders__webui__parts__desktop.cc
+5-5www/ungoogled-chromium/files/patch-chrome_browser_background_glic_glic__status__icon.cc
+90-9016 files not shown
+133-13322 files

HardenedBSD/ports 043c3a0net/wireproxy Makefile, net/wireproxy/files wireproxy.in

net/wireproxy: Add rc script

PR:             286990
DeltaFile
+64-0net/wireproxy/files/wireproxy.in
+3-1net/wireproxy/Makefile
+67-12 files

HardenedBSD/src 1635ba9tests/sys/netlink test_rtnl_gre.c

gre tests: Add required_kmods to gre netlink test

Fixes: e1e18cc12e68
Differential Revision: https://reviews.freebsd.org/D54443
DeltaFile
+1-0tests/sys/netlink/test_rtnl_gre.c
+1-01 files

HardenedBSD/ports d4a59f9security/py-google-cloud-kms distinfo Makefile

security/py-google-cloud-kms: Update to 3.11.0

Changelog: https://github.com/googleapis/google-cloud-python/blob/google-cloud-kms-v3.11.0/packages/google-cloud-kms/CHANGELOG.md

Reported by:    portscout
DeltaFile
+3-3security/py-google-cloud-kms/distinfo
+1-1security/py-google-cloud-kms/Makefile
+4-42 files

HardenedBSD/ports 931cdeetextproc/py-rich distinfo Makefile

textproc/py-rich: update to 14.3.3

Changes:        https://github.com/Textualize/rich/blob/v14.3.3/CHANGELOG.md
Reported by:    repology, portscout
DeltaFile
+3-3textproc/py-rich/distinfo
+1-1textproc/py-rich/Makefile
+4-42 files

HardenedBSD/src 785fc3dsys/dev/asmc asmc.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+36-21sys/dev/asmc/asmc.c
+36-211 files

HardenedBSD/src c548b4dsys/dev/asmc asmc.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+36-21sys/dev/asmc/asmc.c
+36-211 files

HardenedBSD/ports 06c78b7databases/sqlcipher pkg-plist Makefile

databases/sqlcipher: Update to 4.13.0

Note that the binary and library renamed to sqlite3. CONFLICTS is set.

PR:             292688
Approved by:    jharris at widomaker.com (maintainer)
DeltaFile
+9-8databases/sqlcipher/pkg-plist
+8-5databases/sqlcipher/Makefile
+3-3databases/sqlcipher/distinfo
+20-163 files

HardenedBSD/src 22c97besys/netpfil/ipfilter/netinet fil.c

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+22-3sys/netpfil/ipfilter/netinet/fil.c
+22-31 files

HardenedBSD/ports 9a4344cmisc/crush distinfo, misc/gitlogue distinfo Makefile.crates

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+75-43misc/gitlogue/distinfo
+36-20misc/gitlogue/Makefile.crates
+5-5misc/crush/distinfo
+3-3x11-drivers/xlibre-xf86-video-intel/distinfo
+3-3x11-drivers/xlibre-xf86-video-scfb/distinfo
+3-3x11-drivers/xlibre-xf86-input-egalax/distinfo
+125-7714 files not shown
+151-9820 files

HardenedBSD/ports 921827amisc/crush distinfo Makefile

misc/crush: Update to 0.43.2

Changelog: https://github.com/charmbracelet/crush/releases/tag/v0.43.2

Reported by:    GitHub (watch releases)
DeltaFile
+5-5misc/crush/distinfo
+1-1misc/crush/Makefile
+6-62 files

HardenedBSD/src ef1cde5sys/dev/asmc asmc.c

chore: asmc: use designated initializers in macros

This code cleanup makes it easier for human readers to understand what each
of the fields actually represents, as well as makes it easier to modify
what the macros actually do under the covers, without introducing
potential human errors.

No functional change intended.

MFC after:      1 week
DeltaFile
+33-18sys/dev/asmc/asmc.c
+33-181 files

HardenedBSD/ports 854aabcmisc/gitlogue distinfo Makefile.crates

misc/gitlogue: Update to 0.8.0

Changelog:
https://github.com/unhappychoice/gitlogue/releases/tag/v0.8.0

PR:             293145
DeltaFile
+75-43misc/gitlogue/distinfo
+36-20misc/gitlogue/Makefile.crates
+1-2misc/gitlogue/Makefile
+112-653 files

HardenedBSD/src 90edc16sys/dev/asmc asmc.c

asmc: use symbolic names with the MacPro3,1 model

Use `ASMC_LIGHT_FUNCS_DISABLED` and `ASMC_SMS_FUNCS_DISABLED` instead of
the unrolled versions of the macros.

This makes it easier to adjust the underlying macros/fields for
`struct asmc_model`.

No functional change intended.

MFC after:      1 week
DeltaFile
+2-2sys/dev/asmc/asmc.c
+2-21 files