HardenedBSD/src 7831e55bin/sh jobs.c, bin/sh/tests/execution bg14.0 Makefile

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+45-7sys/dev/dpaa2/dpaa2_ni.c
+7-3sys/net/iflib.c
+9-0bin/sh/tests/execution/bg14.0
+5-1bin/sh/jobs.c
+2-1release/scripts/pkg-stage.sh
+1-0bin/sh/tests/execution/Makefile
+69-126 files

HardenedBSD/src c4c356ebin/sh jobs.c, bin/sh/tests/execution bg14.0 Makefile

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+45-7sys/dev/dpaa2/dpaa2_ni.c
+7-3sys/net/iflib.c
+9-0bin/sh/tests/execution/bg14.0
+5-1bin/sh/jobs.c
+2-1release/scripts/pkg-stage.sh
+1-0bin/sh/tests/execution/Makefile
+69-126 files

HardenedBSD/src 9ea6ee3release/scripts pkg-stage.sh

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+2-1release/scripts/pkg-stage.sh
+2-11 files

HardenedBSD/ports 024512caudio/baresip Makefile, multimedia/subtitlecomposer/files patch-CMakeLists.txt

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+251-221sysutils/dua-cli/distinfo
+124-110sysutils/dua-cli/Makefile.crates
+56-0x11-themes/kf6-breeze-icons/pkg-plist
+17-3security/aide/Makefile
+19-0multimedia/subtitlecomposer/files/patch-CMakeLists.txt
+11-7audio/baresip/Makefile
+478-341109 files not shown
+782-656115 files

HardenedBSD/ports a2c5de3games/openbor distinfo Makefile, games/openbor/files patch-source_utils.c

games/openbor: update to 7757

Changes:        https://github.com/DCurrent/openbor/compare/7eedd899...52921e77
DeltaFile
+4-4games/openbor/files/patch-source_utils.c
+3-3games/openbor/distinfo
+2-2games/openbor/Makefile
+9-93 files

HardenedBSD/src 896dc30sys/net iflib.c

iflib: fix iflib_simple_transmit() when interface is down

Use the same check as iflib_if_transmit() to detect when the
interface is down and return the proper error code, and also
free the mbuf.

This fixes an mbuf leak when a member of a lagg is brought
down (and probably many other scenarios).

Sponsored by: Netflix
DeltaFile
+7-3sys/net/iflib.c
+7-31 files

HardenedBSD/ports 7c6f448devel/sdbus-cpp distinfo Makefile

devel/sdbus-cpp: update to 2.2.0

Changes:        https://github.com/Kistler-Group/sdbus-cpp/releases/tag/v2.2.0
Reported by:    GitHub (watch releases)
DeltaFile
+3-3devel/sdbus-cpp/distinfo
+1-1devel/sdbus-cpp/Makefile
+4-42 files

HardenedBSD/ports 8276d20graphics/mesa-devel distinfo Makefile

graphics/mesa-devel: update to 25.3.b.1394

Changes:        https://gitlab.freedesktop.org/mesa/mesa/-/compare/ad25196d356...80db8171deb
DeltaFile
+3-3graphics/mesa-devel/distinfo
+2-2graphics/mesa-devel/Makefile
+5-52 files

HardenedBSD/ports e8049a2games/veloren-weekly distinfo Makefile

games/veloren-weekly: update to s20251118

Changes:        https://gitlab.com/veloren/veloren/-/compare/07b4403015...d449aa2168
DeltaFile
+3-3games/veloren-weekly/distinfo
+2-2games/veloren-weekly/Makefile
+5-52 files

HardenedBSD/ports ff74ee6graphics/openexr-website-docs distinfo

graphics/openexr-website-docs: fix 3.4.4 distinfo
DeltaFile
+3-3graphics/openexr-website-docs/distinfo
+3-31 files

HardenedBSD/ports d947a5bgraphics/openexr distinfo Makefile, graphics/openexr-website-docs Makefile

graphics/openexr*: update to 3.4.4

ChangeLog:      https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.4.4
DeltaFile
+3-3graphics/openexr/distinfo
+2-2graphics/openexr/Makefile
+1-1graphics/openexr-website-docs/Makefile
+6-63 files

HardenedBSD/ports 216f935security/aide Makefile

security/aide: Depend on a crypto library

When not specified the aide build automatically detects the installed
crypto library. It bails if no library is found. We have a choice of
libgcrypt or nettle. Default to libgcrypt but allow the user to
select nettle.
DeltaFile
+12-0security/aide/Makefile
+12-01 files

HardenedBSD/src a731cb9sys/dev/dpaa2 dpaa2_ni.c

dpaa2: Setup interface caps on attach

39d4094173f9 ("epair: add support for checksum offloading") revealed
that HW checksum offloading is not enabled when the dpaa2_ni driver
is attached despite being declared and enabled on the dpni interface.

I modified dpaa2_ni_setup_if_caps to take into account both IPv4 and
IPv6 checksum offloading capabilities and added a call to re-configure
interface capabilities on attach to fix it.

Reviewed by:    bz
Fixes:          39d4094173f9 ("epair: add support for checksum offloading")
MFC after:      1 week
Differential Revision: https://reviews.freebsd.org/D53436
DeltaFile
+45-7sys/dev/dpaa2/dpaa2_ni.c
+45-71 files

HardenedBSD/ports a20c364audio/baresip Makefile distinfo

audio/baresip: Update 4.2.0 => 4.3.0

Changelog:
https://github.com/baresip/baresip/releases/tag/v4.3.0

Improve port:
- Add AMR-NB and AMR-WB audio codecs.

PR:     291103
DeltaFile
+11-7audio/baresip/Makefile
+5-5audio/baresip/distinfo
+3-2audio/baresip/pkg-plist
+19-143 files

HardenedBSD/ports 6caffadaudio/re distinfo pkg-plist

audio/re: Update 4.2.0 => 4.3.0

Changelog:
https://github.com/baresip/re/releases/tag/v4.3.0

PR:     291102
DeltaFile
+3-3audio/re/distinfo
+2-2audio/re/pkg-plist
+1-1audio/re/Makefile
+6-63 files

HardenedBSD/ports e90fe1earchivers/php-lz4 distinfo Makefile

archivers/php-lz4: Update 0.5.0 => 0.6.0

Changelog:
 - This update adds support for frame format
https://github.com/kjdev/php-ext-lz4/releases/tag/0.6.0

Commit log:
https://github.com/kjdev/php-ext-lz4/compare/0.5.0...0.6.0

PR:     291101
DeltaFile
+3-3archivers/php-lz4/distinfo
+1-2archivers/php-lz4/Makefile
+4-52 files

HardenedBSD/ports fdafde9www/gatus distinfo Makefile

www/gatus: update to 5.32.0

ChangeLog: https://github.com/TwiN/gatus/releases/tag/v5.32.0
DeltaFile
+5-5www/gatus/distinfo
+1-1www/gatus/Makefile
+6-62 files

HardenedBSD/ports 5c903a1textproc/py-openpyxl distinfo Makefile

textproc/py-openpyxl: Upgrade port to 3.1.5

* Update COMMENT directly from WWW

Approved by:    antoine (maintainer)
Differential Revision:  https://reviews.freebsd.org/D53690
Release Notes:  https://foss.heptapod.net/openpyxl/openpyxl/-/blob/13627b03ca25a1a98becf40e533b955615b13429/doc/changes.rst?plain=1#L1
DeltaFile
+3-3textproc/py-openpyxl/distinfo
+2-3textproc/py-openpyxl/Makefile
+5-62 files

HardenedBSD/ports 00e6dbetextproc/py-et_xmlfile distinfo Makefile

textproc/py-et_xmlfile: Upgrade port to 2.0.0

Approved by:    antoine (maintainer)
Differential Revision:  https://reviews.freebsd.org/D53689
DeltaFile
+3-3textproc/py-et_xmlfile/distinfo
+1-2textproc/py-et_xmlfile/Makefile
+4-52 files

HardenedBSD/ports 4132c1fsysutils/dua-cli distinfo Makefile.crates

sysutils/dua-cli: Update to 2.32.2

PR:             290635
Approved by:    maintainer
DeltaFile
+251-221sysutils/dua-cli/distinfo
+124-110sysutils/dua-cli/Makefile.crates
+1-2sysutils/dua-cli/Makefile
+376-3333 files

HardenedBSD/ports 7708368security/aide distinfo Makefile, security/aide/files patch-include_util.h

security/aide: Update to 0.19.2
DeltaFile
+0-10security/aide/files/patch-include_util.h
+3-3security/aide/distinfo
+2-3security/aide/Makefile
+5-163 files

HardenedBSD/ports 67df9desecurity/aide Makefile

security/aide: Add license and license file
DeltaFile
+4-1security/aide/Makefile
+4-11 files

HardenedBSD/src f44ac8cbin/sh jobs.c, bin/sh/tests/execution bg14.0 Makefile

sh: Fix job pointer invalidation with trapsasync

Calling dotrap() can do almost anything, including reallocating the
jobtab array. Convert the job pointer to an index before calling
dotrap() and then restore a proper job pointer afterwards.

PR:             290330
Reported by:    bdrewery
Reviewed by:    bdrewery
Differential Revision:  https://reviews.freebsd.org/D53793
DeltaFile
+9-0bin/sh/tests/execution/bg14.0
+5-1bin/sh/jobs.c
+1-0bin/sh/tests/execution/Makefile
+15-13 files

HardenedBSD/ports a8a9a97sysutils/go-ntfy distinfo Makefile

sysutils/go-ntfy: Update to 2.15.0

ChangeLog: https://github.com/binwiederhier/ntfy/releases/tag/v2.15.0
DeltaFile
+7-7sysutils/go-ntfy/distinfo
+1-2sysutils/go-ntfy/Makefile
+8-92 files

HardenedBSD/src 142df24release/scripts pkg-stage.sh

release: Remove KDE from dvd1.iso

Prior to this commit, we were shipping 2155 MB of packages (from the
ports tree, not counting pkgbase) on dvd1.iso.  Due to the amount of
space required by shipping pkgbase packages *and* distribution sets
on the DVD images, we only have 1696 MB available if we want to fit
into the 4.7 GB limit for DVDs.  Many users have indicated that this
is indeed important.

It is practically impossible to hit this target without removing KDE;
while KDE and its dependencies narrowly fit (1550 MB), we exceed the
limit as soon as we include either of freebsd-doc-all or gnome.  While
we would pick KDE over GNOME (surveys regularly indicate that KDE is
the more widely used of the two), we believe that documentation is the
most important thing to include.

Since removing KDE leaves a bit of extra space, add editors/emacs and
editors/vim.  This takes the 15.0 amd64 dvd1.iso up to 4.689 GB. [1]


    [5 lines not shown]
DeltaFile
+2-1release/scripts/pkg-stage.sh
+2-11 files

HardenedBSD/src 6cc6bebrelease/scripts pkg-stage.sh

release: Remove KDE from dvd1.iso

Prior to this commit, we were shipping 2155 MB of packages (from the
ports tree, not counting pkgbase) on dvd1.iso.  Due to the amount of
space required by shipping pkgbase packages *and* distribution sets
on the DVD images, we only have 1696 MB available if we want to fit
into the 4.7 GB limit for DVDs.  Many users have indicated that this
is indeed important.

It is practically impossible to hit this target without removing KDE;
while KDE and its dependencies narrowly fit (1550 MB), we exceed the
limit as soon as we include either of freebsd-doc-all or gnome.  While
we would pick KDE over GNOME (surveys regularly indicate that KDE is
the more widely used of the two), we believe that documentation is the
most important thing to include.

Since removing KDE leaves a bit of extra space, add editors/emacs and
editors/vim.  This takes the 15.0 amd64 dvd1.iso up to 4.689 GB. [1]


    [3 lines not shown]
DeltaFile
+2-1release/scripts/pkg-stage.sh
+2-11 files

HardenedBSD/ports 75592eeMk/Uses kde.mk, devel/kf6-extra-cmake-modules Makefile

KDE: update WWW for Frameworks ports
DeltaFile
+1-1x11/kf6-frameworks/Makefile
+1-1Mk/Uses/kde.mk
+1-0devel/kf6-extra-cmake-modules/Makefile
+3-23 files

HardenedBSD/ports b0686b1archivers/kf6-karchive distinfo, deskutils/kf6-kstatusnotifieritem distinfo

KDE: Update KDE Frameworks 6 to 6.20.0

Announcement: https://kde.org/announcements/frameworks/6/6.20.0/

Ports changes:

devel/kf6-kio:
 - Drop unused Qt5Compat dependency

PR:             291020
Exp-run by:     antoine
DeltaFile
+56-0x11-themes/kf6-breeze-icons/pkg-plist
+3-5devel/kf6-extra-cmake-modules/distinfo
+3-3textproc/kf6-syntax-highlighting/distinfo
+3-3archivers/kf6-karchive/distinfo
+3-3deskutils/kf6-kstatusnotifieritem/distinfo
+3-3x11-toolkits/kf6-kitemviews/distinfo
+71-1771 files not shown
+277-21977 files

HardenedBSD/ports 1a5591bmultimedia/subtitlecomposer/files patch-CMakeLists.txt patch-src_CMakeLists.txt

multimedia/subtitlecomposer: fix build with upcoming KDE Frameworks 6.20

Backport upstream patch to fix build and regenerate the other patch.
DeltaFile
+19-0multimedia/subtitlecomposer/files/patch-CMakeLists.txt
+3-3multimedia/subtitlecomposer/files/patch-src_CMakeLists.txt
+22-32 files

HardenedBSD/src c3fcd3fcontrib/libarchive/libarchive archive_read_support_filter_lz4.c, contrib/libarchive/libarchive/test test_compat_lz4_skippable_frames_B4.tar.lz4.uu

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+6,739-0contrib/libarchive/libarchive/test/test_compat_lz4_skippable_frames_B4.tar.lz4.uu
+86-540usr.sbin/bhyve/net_backend_slirp.c
+570-0usr.sbin/bhyve/slirp/slirp-helper.c
+0-365usr.sbin/bhyve/libslirp.h
+365-0usr.sbin/bhyve/slirp/libslirp.h
+70-14contrib/libarchive/libarchive/archive_read_support_filter_lz4.c
+7,830-91944 files not shown
+8,182-98650 files