HardenedBSD/ports c368764net/bsdrcmds Makefile, net/bsdrcmds/files/libblacklist-patches patch-rlogind_rlogind.c patch-rshd_rshd.c

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+229-251security/arti/distinfo
+113-124security/arti/Makefile.crates
+112-0net/bsdrcmds/files/libblacklist-patches/patch-rshd_rshd.c
+64-0net/bsdrcmds/files/libblacklist-patches/patch-rlogind_rlogind.c
+27-25x11/florence/Makefile
+22-9net/bsdrcmds/Makefile
+567-40933 files not shown
+723-54439 files

HardenedBSD/ports 526c2deaudio/audacity Makefile distinfo

audio/audacity: Update 3.7.8 => 3.7.9

Changelog:
https://github.com/audacity/audacity/releases/tag/Audacity-3.7.8

PR:             298114
Sponsored by:   UNIS Labs
MFH:            2026Q3
DeltaFile
+5-5audio/audacity/distinfo
+1-1audio/audacity/Makefile
+6-62 files

HardenedBSD/ports 89b89ecemulators/py-unicorn distinfo Makefile, emulators/py-unicorn/files patch-pyproject.toml patch-setup.py

emulators/py-unicorn: update to 2.1.4
DeltaFile
+11-11emulators/py-unicorn/Makefile
+0-16emulators/py-unicorn/files/patch-setup.py
+9-0emulators/py-unicorn/files/patch-pyproject.toml
+3-3emulators/py-unicorn/distinfo
+23-304 files

HardenedBSD/ports b3bbad0emulators/unicorn pkg-plist Makefile

emulators/unicorn: update to 2.1.4
DeltaFile
+3-3emulators/unicorn/distinfo
+1-2emulators/unicorn/Makefile
+1-0emulators/unicorn/pkg-plist
+5-53 files

HardenedBSD/ports b7621b9x11/florence pkg-plist distinfo, x11/florence/files extra-patch-freebsd-orb-super

x11/florence: Update to 0.7.2 and adopt

Switch from the stalled SourceForge 0.6.3 distfile to the FrauBSD
continuation on GitHub and take maintainership from ports@.

Drop PORTREVISION, fetch via USE_GITHUB.

Default-on FREEBSD_ORB option replaces the Super key glyph with the
FreeBSD orb (ports-only branding).

Reviewed by:    jrm
Differential Revision:  https://reviews.freebsd.org/D58428
DeltaFile
+27-25x11/florence/Makefile
+23-0x11/florence/files/extra-patch-freebsd-orb-super
+8-8x11/florence/pkg-descr
+3-2x11/florence/distinfo
+1-0x11/florence/pkg-plist
+62-355 files

HardenedBSD/ports c5b31ffdevel/apache-ant Makefile distinfo

devel/apache-ant: Update to 1.10.17

Ant 1.10.17 fixes a regression in the programmatic use of Ant and can be
used with Java runtime version 8 and higher.

PR:             298130
Submitted by:   Pedro F. Giffuni
DeltaFile
+7-7devel/apache-ant/distinfo
+1-2devel/apache-ant/Makefile
+8-92 files

HardenedBSD/ports c6b9d68math/clasp Makefile distinfo

math/clasp: Update to 3.4.1

Approved by:    vsevolod (maintainer)
Pull Request:   https://github.com/freebsd/freebsd-ports/pull/599
DeltaFile
+5-5math/clasp/distinfo
+2-2math/clasp/Makefile
+7-72 files

HardenedBSD/ports f0471d2security/arti Makefile Makefile.crates

security/arti: Update to 2.6.0
DeltaFile
+229-251security/arti/distinfo
+113-124security/arti/Makefile.crates
+2-2security/arti/Makefile
+344-3773 files

HardenedBSD/ports 51babd9net/bsdrcmds distinfo Makefile, net/bsdrcmds/files/libblacklist-patches patch-rlogind_Makefile patch-rshd_Makefile

net/bsdrcmds: Use blocklist

Starting from FreeBSD version 1500000, prefer the new blocklist
nomenclature.

Once older versions are no longer supported, we should use blocklist
exclusively.

PR:             295081
DeltaFile
+112-0net/bsdrcmds/files/libblacklist-patches/patch-rshd_rshd.c
+64-0net/bsdrcmds/files/libblacklist-patches/patch-rlogind_rlogind.c
+22-9net/bsdrcmds/Makefile
+15-0net/bsdrcmds/files/libblacklist-patches/patch-rlogind_Makefile
+15-0net/bsdrcmds/files/libblacklist-patches/patch-rshd_Makefile
+5-3net/bsdrcmds/distinfo
+233-126 files

HardenedBSD/ports 26c0bfcnet/liferea pkg-plist Makefile, net/liferea/files patch-src_liferea__application.c patch-263663385df5a98301b053c6f0d1cc4b22e2f89e

net/liferea: update to 2.0.1

Release Notes:
  https://github.com/lwindolf/liferea/releases/tag/v2.0.1
DeltaFile
+11-9net/liferea/files/patch-meson.build
+0-18net/liferea/files/patch-263663385df5a98301b053c6f0d1cc4b22e2f89e
+0-12net/liferea/files/patch-src_liferea__application.c
+3-3net/liferea/distinfo
+2-2net/liferea/Makefile
+0-2net/liferea/pkg-plist
+16-466 files

HardenedBSD/ports 74b734eaudio/pulseaudio Makefile, audio/pulseaudio/files patch-src_pulsecore_shm.c

audio/pulseaudio: Remove ancient and irrelevant patch
DeltaFile
+0-11audio/pulseaudio/files/patch-src_pulsecore_shm.c
+1-1audio/pulseaudio/Makefile
+1-122 files

HardenedBSD/ports fdbd7d5security/nss Makefile, security/nss/files patch-coreconf_FreeBSD.mk

security/nss: fix on arm

PR:             298103
Submitted by:   dch@
Differential Revision:  https://reviews.freebsd.org/D59313
DeltaFile
+13-1security/nss/files/patch-coreconf_FreeBSD.mk
+1-0security/nss/Makefile
+14-12 files

HardenedBSD/ports 57b882fdevel/py-lxml Makefile distinfo

devel/py-lxml: update to 6.1.3

Changelog: https://lxml.de/6.1/changes-6.1.3.html
DeltaFile
+3-3devel/py-lxml/distinfo
+1-1devel/py-lxml/Makefile
+4-42 files

HardenedBSD/ports 893d9c7. UPDATING, misc/codex/files patch-codex-rs_Cargo.lock

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+69-0security/vuxml/vuln/2026.xml
+13-13net/rustconn/distinfo
+9-9misc/codex/files/patch-codex-rs_Cargo.lock
+17-0UPDATING
+11-4multimedia/lebiniou/Makefile
+12-0multimedia/lebiniou/files/patch-src_webcam.h
+131-2639 files not shown
+240-10945 files

HardenedBSD/ports b6a3a91mail/fetchmail Makefile distinfo

mail/fetchmail{,conf}: Update 6.6.6 => 6.6.7

Changelog:
https://gitlab.com/fetchmail/fetchmail/-/blob/6.6.7/NEWS#L113

PR:             298119
Reported by:    Corey Halpin <chalpin at cs.wisc.edu> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q3
DeltaFile
+3-3mail/fetchmail/distinfo
+2-2mail/fetchmail/Makefile
+5-52 files

HardenedBSD/ports 0922ec4net-im/matterircd Makefile distinfo

net-im/matterircd: Update 0.31.0 => 0.32.0

Changelog:
https://github.com/42wim/matterircd/releases/tag/v0.32.0

PR:             298118
Reported by:    Corey Halpin <chalpin at cs.wisc.edu> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q3
DeltaFile
+3-3net-im/matterircd/distinfo
+1-2net-im/matterircd/Makefile
+4-52 files

HardenedBSD/ports 17bcf0e. UPDATING, mail/py-notmuch2 Makefile

mail/py-notmuch2: Fix value of PKGNAMESUFFIX

In commit db96db170fc4, the value of PKGNAMESUFFIX was accidentally
changed from 2 to 0.  Fix this by setting it back to the correct value,
2, which renames the package back to py*-notmuch2.

Bump PORTREVISION, so the renamed package is reinstalled with a
corrected plist.

PR:             298122
Reported by:    John Hein <jcfyecrayz at liamekaens.com>
Fixes:          db96db170fc4 (mail/notmuch*: Update to 0.34.2)
Sponsored by:   The FreeBSD Foundation
DeltaFile
+17-0UPDATING
+2-2mail/py-notmuch2/Makefile
+19-22 files

HardenedBSD/ports f1094a8multimedia/lebiniou Makefile, multimedia/lebiniou/files patch-plugins_output_v4l2loopback_v4l2loopback.c patch-src_webcam.h

multimedia/lebiniou: fix on -CURRENT with video(4)

Fix build after D59203.

PR:             297454
Reported by:    pkg-fallout
DeltaFile
+11-4multimedia/lebiniou/Makefile
+12-0multimedia/lebiniou/files/patch-plugins_output_v4l2loopback_v4l2loopback.c
+12-0multimedia/lebiniou/files/patch-src_webcam.h
+35-43 files

HardenedBSD/ports e1686f2devel/reposilite Makefile distinfo

devel/reposilite: Upgrade to 3.6.3

PR:             298117
Changelog:      https://github.com/dzikoysk/reposilite/releases/tag/3.6.3
DeltaFile
+3-3devel/reposilite/distinfo
+1-1devel/reposilite/Makefile
+4-42 files

HardenedBSD/ports 3d6ea24devel Makefile

devel/Makefile: remove reference to moved port sfml

Fixes:          dbfa9f04377fb4df340c26648cc09c9a8c3b1273
Reported by:    "Edward Sanford Sutton, III" <mirror176 at hotmail.com>
DeltaFile
+0-1devel/Makefile
+0-11 files

HardenedBSD/ports 441c25adevel/py-libvirt Makefile distinfo

devel/py-libvirt: update to 12.7.0

Sponsored by:   The FreeBSD Foundation
DeltaFile
+3-3devel/py-libvirt/distinfo
+1-1devel/py-libvirt/Makefile
+4-42 files

HardenedBSD/ports 24cf8ccdevel/libvirt Makefile distinfo

devel/libvirt: update to 12.7.0

 - Update to 12.7.0
 - Drop patch merged upstream

Sponsored by:   The FreeBSD Foundation
DeltaFile
+2-6devel/libvirt/Makefile
+3-5devel/libvirt/distinfo
+5-112 files

HardenedBSD/ports 03159bdwww/freenginx-devel Makefile Makefile.extmod

www/freenginx-devel: third-party modules management

- njs module security update to 1.0.1

Bump PORTREVISION.

Sponsored by:   tipi.work

<ChangeLog>

nginx modules:

*) Security: fixed an access control bypass in js_access when an
   asynchronous request body continuation threw an exception or
   produced an unhandled rejection.  Previously, nginx could continue
   processing the request as though the js_access check had succeeded.
   Thanks to Ta Duc Thien.

*) Security: fixed a worker process crash when reading

    [48 lines not shown]
DeltaFile
+3-3www/freenginx-devel/distinfo
+1-1www/freenginx-devel/Makefile.extmod
+1-0www/freenginx-devel/Makefile
+5-43 files

HardenedBSD/ports 028efd9net/onedrivegui Makefile distinfo

net/onedrivegui: Update to 1.3.2

ChangeLog at:   https://github.com/bpozdena/OneDriveGUI/releases/tag/v1.3.2
DeltaFile
+3-3net/onedrivegui/distinfo
+1-1net/onedrivegui/Makefile
+4-42 files

HardenedBSD/ports 675a499x11-wm/lxappearance-obconf Makefile

x11-wm/lxappearance-obconf: do not pollute RUN_DEPENDS

Currently it includes gmake, pkgconf and intltool as runtime dependencies
due to incorrect variables usage

Replaced the construction with an extra OTHER_DEPENDS variable
accordingly to 5.10.2. RUN_DEPENDS FreeBSD Porter's Handbook

Pull Request:   https://github.com/freebsd/freebsd-ports/pull/607
DeltaFile
+4-3x11-wm/lxappearance-obconf/Makefile
+4-31 files

HardenedBSD/ports 72b308cnet/onedrive Makefile distinfo

net/onedrive: Update to 2.5.11

ChangeLog at:   https://github.com/abraunegg/onedrive/releases/tag/v2.5.11
Approved by:    maintainer via email
DeltaFile
+3-3net/onedrive/distinfo
+1-2net/onedrive/Makefile
+4-52 files

HardenedBSD/ports e430b4bdevel/jenkins-lts Makefile distinfo

devel/jenkins-lts: Update to 2.568.3

Security:       102bc631-a6da-11f1-ba21-00e0edd85c6a
MFH:            2026Q3
Sponsored by:   The FreeBSD Foundation
DeltaFile
+3-3devel/jenkins-lts/distinfo
+1-2devel/jenkins-lts/Makefile
+4-52 files

HardenedBSD/ports 71c8094devel/jenkins Makefile distinfo

devel/jenkins: Update to 2.580

Security:       102bc631-a6da-11f1-ba21-00e0edd85c6a
MFH:            2026Q3
Sponsored by:   The FreeBSD Foundation
DeltaFile
+3-3devel/jenkins/distinfo
+1-1devel/jenkins/Makefile
+4-42 files

HardenedBSD/ports a518977security/vuxml/vuln 2026.xml

security/vuxml: Document Jenkins Security Advisory 2026-09-02

Sponsored by:   The FreeBSD Foundation
DeltaFile
+69-0security/vuxml/vuln/2026.xml
+69-01 files

HardenedBSD/ports 2f81624devel/libarena Makefile

devel/libarena: mark DEPRECATED

 - No consumer left
 - upstream stalled since 2014-01-20

PR:             286876
Reported by:    diizzy
DeltaFile
+2-0devel/libarena/Makefile
+2-01 files