BSD Commit Log Search

linux: Allow connect() with destination port 0

Linux allows connect() with destination port 0, but FreeBSD returns
EADDRNOTAVAIL in in_pcbconnect() and in6_pcbladdr(). Some Linux programs
(e.g. the new Android CLI tool) rely on this for routability checks,
however.

Add an SV_CONN_PORT0 flag to sv_flags which is set in the Linux sysvecs,
allowing the port 0 guard in the connect paths to be bypassed.

Reviewed by:    glebius, kib
Differential Revision:  https://reviews.freebsd.org/D60659

www/nextcloud-memories: Update to 11.1.1

irc/weechat: Security update to 4.10.4

Security:       e107a804-dc3c-11f1-8135-8447094a420f
MFH:            2026Q4

security/vuxml: Document Weechat vulnerabilities

security/vuxml: Document Roundcube vulnerabilities

chinese/gcin: change gcin-guanyinma's license to MIT.

UPDATING: add an UPDATING entry for chinese/gcin.

chinese/gcin*: fix buffer overflow issues, and split modules as slave ports.

chinese/fcitx5-keykey: update to 1.5.0.

deskutils/xchm: bump PORTREVISION

www/php-url-highlight: Update to 4.0.2

re: https://github.com/vstelmakh/url-highlight/releases/tag/4.0.2

kern_loginclass.c: add kern_ implementations

Effort:         CHERI upstreaming
Sponsored by:   DARPA, AFRL, Innovate UK
Pull Request:   https://github.com/freebsd/freebsd-src/pull/2284

kern_linker.c: add kern_ implementations

kldsym(2) is more complex than typical because it requires translation
of struct kld_sym_lookup which is a weird in/out structure.  Out of
paranoia we avoid copying out the symname pointer in the capability
version to eliminate the possiblity of leaking a capability (but not
invalidating a pointer userspace might be using via copyout()).

Effort:         CHERI upstreaming
Sponsored by:   DARPA, AFRL, Innovate UK
Pull Request:   https://github.com/freebsd/freebsd-src/pull/2284

[ku]trace(2): add kern_[ku]trace

Effort:         CHERI upstreaming
Sponsored by:   Innovate UK
Pull Request:   https://github.com/freebsd/freebsd-src/pull/2284

pdfork(2): add kern_pdfork

Effort:         CHERI upstreaming
Sponsored by:   Innovate UK
Pull Request:   https://github.com/freebsd/freebsd-src/pull/2284

ffclock: add kern_ interfaces

Effort:         CHERI upstreaming
Sponsored by:   Innovate UK
Pull Request:   https://github.com/freebsd/freebsd-src/pull/2284

devel/onetbb: Update to 2023.2.0

Also, fix build of graphics/blender4 with this new release [1]

Release notes: https://github.com/uxlfoundation/oneTBB/blob/v2023.2.0/RELEASE_NOTES.md

PR:             300557 [1]
Approved by:    <FreeBSD at Shaneware.biz> (maintainer) [1]

net/telemt: Update 3.5.14 => 3.5.16

Changelogs:
- https://github.com/telemt/telemt/releases/tag/3.5.15
- https://github.com/telemt/telemt/releases/tag/3.5.16

Commit log:
- https://github.com/telemt/telemt/compare/3.5.14...3.5.16

PR:             300606
Approved by:    osa, vvd (mentors, implicit)

wait6(2): add user_wait6

sys_wait6 is a little more complicated than typical as compat layers
need to translate siginfo_t.

Effort:         CHERI upstreaming
Sponsored by:   Innovate UK
Pull Request:   https://github.com/freebsd/freebsd-src/pull/2284

wait4(2): add kern_wait4

Effort:         CHERI upstreaming
Sponsored by:   Innovate UK
Pull Request:   https://github.com/freebsd/freebsd-src/pull/2284

kevent(2): add kern_kevent_generic

Effort:         CHERI upstreaming
Sponsored by:   Innovate UK
Pull Request:   https://github.com/freebsd/freebsd-src/pull/2284

devel/lua-stdlib-normalize: Update 4 => 5.1

This update brings new features, bug fixes and incompatible changes.

Changelogs:
https://github.com/lua-stdlib/normalize/releases/tag/v5
https://github.com/lua-stdlib/normalize/releases/tag/v5.0.1
https://github.com/lua-stdlib/normalize/releases/tag/v5.1

PR:             300611
Approved by:    osa, vvd (mentors, implicit)

deskutils/xchm: Switch WX to 3.2

PR: 300521

www/element-web: Update to 1.12.33

Approved by:    maintainer (implicit, version bump, as per PR 258262)

graphics/openexr*: Security update to 3.4.18

This release addresses a regression introduced in v3.3.0 that leads to
excessive memory usage during write, especially with DWA compression.

This release also addresses two security vulnerabilities.

Changelog:
https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.4.18

PR:             300607
Pull request:   https://github.com/freebsd/freebsd-ports/pull/666
Approved by:    osa, vvd (mentors, implicit)
Security:       GHSA-PP92-4RV3-WFQ6
Security:       GHSA-2V77-PVHX-25C3
MFH:            2026Q4

(cherry picked from commit a3a3224052e608295381e2172d740dc0040d1d7d)

graphics/openexr*: Security update to 3.4.18

This release addresses a regression introduced in v3.3.0 that leads to
excessive memory usage during write, especially with DWA compression.

This release also addresses two security vulnerabilities.

Changelog:
https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.4.18

PR:             300607
Pull request:   https://github.com/freebsd/freebsd-ports/pull/666
Approved by:    osa, vvd (mentors, implicit)
Security:       GHSA-PP92-4RV3-WFQ6
Security:       GHSA-2V77-PVHX-25C3
MFH:            2026Q4

security/vuxml: Document OpenEXR vulnerabilities

PR:             300607
Approved by:    osa, vvd (mentors, implicit)

lang/chicken: update to 6.1.0

Release notes: https://code.call-cc.org/releases/6.1.0/NEWS

flowctl.8: Describe better

Align description with EuroBSD netgraph document descriptions rewrite.

MFC after:      3 days

adduser.conf.5: No crossreferences in titles

Crossreferences in titles are strongly discouraged and incompatible
with our own tooling. This is a wontfix by most of manpages ecosystem
because it is bad editorial style in the first place.

MFC after:      3 days