FreeBSD/ports e7658afsecurity/hidden-lake distinfo Makefile

security/hidden-lake: Update 1.10.5 => 1.11.1

Approved by:            db@, yuri@ (Mentors, implicit)
DeltaFile
+5-5security/hidden-lake/distinfo
+1-1security/hidden-lake/Makefile
+6-62 files

FreeBSD/ports d1ff322graphics/openexr distinfo Makefile, graphics/openexr-website-docs distinfo Makefile

graphics/openexr*: update to 3.4.12

Changelog: https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.4.12

PR:     295508
Sponsored by:   Netzkommune GmbH

(cherry picked from commit ef0ad05a4431882e1739ca480bef00064ad74b5c)
DeltaFile
+3-3graphics/openexr/distinfo
+3-3graphics/openexr-website-docs/distinfo
+2-2graphics/openexr/Makefile
+1-1graphics/openexr-website-docs/Makefile
+9-94 files

FreeBSD/ports ef0ad05graphics/openexr distinfo Makefile, graphics/openexr-website-docs distinfo Makefile

graphics/openexr*: update to 3.4.12

Changelog: https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.4.12

PR:     295508
Sponsored by:   Netzkommune GmbH
DeltaFile
+3-3graphics/openexr-website-docs/distinfo
+3-3graphics/openexr/distinfo
+2-2graphics/openexr/Makefile
+1-1graphics/openexr-website-docs/Makefile
+9-94 files

FreeBSD/src 453de99usr.sbin/virtual_oss/virtual_oss virtual_oss.c

virtual_oss(8): Fix buffer overflow in voss_compressor() call

This particular calls swaps the samples and maxchan arguments, which can
cause a buffer overflow in p_ch_chain if maxchan exceeds its bounds
(VMAX_CHAN).

Reported by:    Yuxiang Yang, Yizhou Zhao, Ao Wang, Xuewei Feng, Qi Li, and Ke Xu from Tsinghua University using GLM-5.1 from Z.ai
Sponsored by:   The FreeBSD Foundation
MFC after:      3 days
Reviewed by:    emaste
DeltaFile
+2-2usr.sbin/virtual_oss/virtual_oss/virtual_oss.c
+2-21 files

FreeBSD/ports 371cbc3textproc/oyo distinfo Makefile.crates

textproc/oyo: Update to 0.1.33

ChangeLog:

- https://github.com/ahkohd/oyo/releases/tag/v0.1.31
- https://github.com/ahkohd/oyo/releases/tag/v0.1.32
- https://github.com/ahkohd/oyo/releases/tag/v0.1.33

Reported by:    "github-actions[bot]" <notifications at github.com>
DeltaFile
+15-9textproc/oyo/distinfo
+6-3textproc/oyo/Makefile.crates
+2-2textproc/oyo/Makefile
+23-143 files

FreeBSD/src df5e9e3sys/dev/usb usb_transfer.c

usb: Add missing mtx lock and unlock in pushing dma queue

Accessing usb_xfer_queue requires bus lock, we added this missing lock
in here to prevent racing issue.

Reviewed by:    adrian
MFC after:      2 weeks
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D57293
DeltaFile
+2-0sys/dev/usb/usb_transfer.c
+2-01 files

FreeBSD/ports e3ac6cdMk bsd.port.mk

Mk/bsd.port.mk: Add EXTRACT_ENV

Add an EXTRACT_ENV variable which defaults to LC_ALL=C.UTF-8.  We set
LC_ALL=C globally to ensure our scripts work the way we intend them to,
but this causes tar and unzip to fail to extract distfiles containing
names that cannot be expressed in ASCII.  This was previously masked by
a bug in libarchive which caused tar and unzip to fail to notice that
these names were unconvertible and just pass them through unchanged.

MFH:            2026Q2
Reviewed by:    bapt
Differential Revision:  https://reviews.freebsd.org/D57295

(cherry picked from commit 98103f19430200b36e9adcb10ed8831ce9ffc42f)
DeltaFile
+4-1Mk/bsd.port.mk
+4-11 files

FreeBSD/ports 98103f1Mk bsd.port.mk

Mk/bsd.port.mk: Add EXTRACT_ENV

Add an EXTRACT_ENV variable which defaults to LC_ALL=C.UTF-8.  We set
LC_ALL=C globally to ensure our scripts work the way we intend them to,
but this causes tar and unzip to fail to extract distfiles containing
names that cannot be expressed in ASCII.  This was previously masked by
a bug in libarchive which caused tar and unzip to fail to notice that
these names were unconvertible and just pass them through unchanged.

MFH:            2026Q2
Reviewed by:    bapt
Differential Revision:  https://reviews.freebsd.org/D57295
DeltaFile
+4-1Mk/bsd.port.mk
+4-11 files

FreeBSD/ports 2e2e12esecurity/picosha2 distinfo Makefile

security/picosha2: update 1.0.0-23 → 1.0.1
DeltaFile
+3-3security/picosha2/distinfo
+1-2security/picosha2/Makefile
+4-52 files

FreeBSD/ports 8f2cc02cad/nvc distinfo Makefile

cad/nvc: update 1.20.1 → 1.21.0
DeltaFile
+3-3cad/nvc/distinfo
+1-1cad/nvc/Makefile
+4-42 files

FreeBSD/ports 87e3fc6multimedia/obs-studio distinfo Makefile

multimedia/obs-studio: update 32.1.0 → 32.1.2
DeltaFile
+3-3multimedia/obs-studio/distinfo
+1-2multimedia/obs-studio/Makefile
+4-52 files

FreeBSD/src 9fb5642sys/dev/sound/pcm sound.c

sound: Centralize and improve hot-swapping

Introduce pcm_hotswap(), which is responsible for sending devctl
SND/CONN notifications.

There are two user-visible improvements with this patch:

First, in pcm_unregister(), instead of just sending a SND/CONN/NODEV
notification when all devices have detached, we also switch to the new
default device if the previously default one has detached, but there are
more left.

Second, in pcm_register(), if the device happens to also be the new
default device, we hot-swap to it. Additionally, if hw.snd.default_auto
is set to 2, then we will essentially be hot-swapping to the newest
attached device.

The latter is especially useful for laptops like the Framework 16, which
comes with a built-in snd_hda(4) speaker-microphone-only device, and

    [16 lines not shown]
DeltaFile
+36-11sys/dev/sound/pcm/sound.c
+36-111 files

FreeBSD/src 803f686libexec/rc/rc.d virtual_oss

rc: virtual_oss: Wait for process to exit

Sometimes virtual_oss processes do not exit immediatelly. If we do not
wait for the processes to fully exit before returning from
virtual_oss_stop(), then the service restart operation might call
virtual_oss_start() too early and fail, because it will think the
service wasn't stopped and is still running.

Reported by:    jrm
Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Reviewed by:    0mp, jrm
Pull-Request:   https://ron-dev.freebsd.org/FreeBSD/src/pulls/33
DeltaFile
+3-1libexec/rc/rc.d/virtual_oss
+3-11 files

FreeBSD/src a576e51libexec/rc rc.conf, libexec/rc/rc.d virtual_oss

rc: virtual_oss: Define some variables in rc.conf

They will now be part of /etc/defaults/rc.conf and be accessible by
sysrc(8).

Fixes:          70e27ecba518 ("virtual_oss: Introduce virtual_oss_default_control_device rc variable")
PR:             295560
Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Reviewed by:    0mp, jrm
Pull-Reqeust:   https://ron-dev.freebsd.org/FreeBSD/src/pulls/33
DeltaFile
+1-11libexec/rc/rc.d/virtual_oss
+5-1libexec/rc/rc.conf
+6-122 files

FreeBSD/src b2677d0libexec/rc/rc.d virtual_oss

rc: virtual_oss: Handle absent pidfile properly

Instead of throwing errors from the programs that use it, print a
warning if the file does not exist.

Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Reviewed by:    0mp, jrm
Pull-Request:   https://ron-dev.freebsd.org/FreeBSD/src/pulls/33
DeltaFile
+11-6libexec/rc/rc.d/virtual_oss
+11-61 files

FreeBSD/ports d3d280ddeskutils/py-paperless-ngx Makefile, www/py-dj52-django-treenode Makefile pkg-descr

deskutils/py-paperless-ngx: Move away from py-dj52-* ports

* The counterparts of the py-dj52-* ports were switched to Django 5.2
  in ce59801b72ef, thus move py-paperless-ngx to those ones.

* Rename py-dj52-django-treenode to py-django-treenode, since there's
  no equivalent for it yet.

* Bump PORTREVISION due changed dependencies.

PR:             291707
Approved by:    grembo (maintainer, via private mail)
DeltaFile
+15-14deskutils/py-paperless-ngx/Makefile
+0-28www/py-dj52-django-treenode/Makefile
+28-0www/py-django-treenode/Makefile
+0-12www/py-dj52-django-treenode/pkg-descr
+12-0www/py-django-treenode/pkg-descr
+3-0www/py-django-treenode/distinfo
+58-543 files not shown
+60-589 files

FreeBSD/ports 56989c5www/py-django-auditlog Makefile distinfo

www/py-django-auditlog: Update to 3.4.0

* There is already a newer version available, but stick with this one
  for now to stay in sync with the py-dj52 counterpart.  This is being
  done as a precaution to avoid any potential issues later on when
  py-paperless-ngx is switched from py-dj52-django-auditlog to this
  port.

Changelog since 3.0.0:

https://github.com/jazzband/django-auditlog/blob/v3.4.0/CHANGELOG.md

Approved by:    grembo (maintainer, via private mail)
DeltaFile
+4-4www/py-django-auditlog/Makefile
+3-3www/py-django-auditlog/distinfo
+7-72 files

FreeBSD/ports 739bc8ewww/py-django-multiselectfield Makefile distinfo

www/py-django-multiselectfield: Update to 0.1.13

* There are already newer versions available, but stick with this one
  for now to stay in sync with the py-dj52 counterpart.  This is being
  done as a precaution to avoid any potential issues later on when
  py-paperless-ngx is switched from py-dj52-django-multiselectfield to
  this port.

* Also switch to the PEP517 build framework to make the port future
  proof while I'm here.

Changelog:

https://github.com/goinnn/django-multiselectfield/blob/v0.1.13/CHANGES.rst

Approved by:    grembo (maintainer, via private mail)
DeltaFile
+6-4www/py-django-multiselectfield/Makefile
+3-3www/py-django-multiselectfield/distinfo
+9-72 files

FreeBSD/src f9f4629usr.sbin/bsdinstall/distextract distextract.c

bsdinstall: Use libarchive secure flags for extract

This doesn't really matter, as we trust that the installer tarballs are
not malicious, but it doesn't hurt to set these flags.

Reported by: Yuxiang Yang, Yizhou Zhao, Ao Wang, Xuewei Feng, Qi Li, and Ke Xu from Tsinghua University using GLM-5.1 from Z.ai
Reviewed by: markj
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D57274
DeltaFile
+2-0usr.sbin/bsdinstall/distextract/distextract.c
+2-01 files

FreeBSD/src fc9dc84sys/dev/sound/usb uaudio.c

snd_uaudio: Lock usbd_transfer_start() in uaudio_mixer_ctl_set()

This section would be previously locked by sound(4)'s mixer lock (see
e87654db5a09 ("snd_uaudio: Stop using mixer_get_lock()")), but
snd_uaudio(4) no longer uses it. This particular code path was missed
during testing, because my sound card does not reach it.

Fixes:          9a00e0b8ca56 ("snd_uaudio: Do not use snd_mixer->lock as mixer_lock")
Reported by:    netchild
Tested by:      netchild
Sponsored by:   The FreeBSD Foundation
MFC after:      6 days
DeltaFile
+6-4sys/dev/sound/usb/uaudio.c
+6-41 files

FreeBSD/src 7b2702esys/amd64/amd64 machdep.c, sys/sys systm.h

sys: add safe_read(9)

The MD function with MI interface to provide a way to read arbitrary
(canonical) KVA.  amd64 only for now.

Reviewed by:    markj
Tested by:      aokblast
Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Differential revision:  https://reviews.freebsd.org/D49566
DeltaFile
+18-0sys/amd64/amd64/machdep.c
+8-0sys/sys/systm.h
+26-02 files

FreeBSD/src 67d61d1sys/amd64/amd64 mem.c uio_machdep.c, sys/amd64/include md_var.h

amd64: extract uiomove_mem() from memrw()

Reviewed by:    markj
Tested by:      aokblast
Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Differential revision:  https://reviews.freebsd.org/D49566
DeltaFile
+11-92sys/amd64/amd64/mem.c
+96-0sys/amd64/amd64/uio_machdep.c
+6-0sys/amd64/include/md_var.h
+113-923 files

FreeBSD/src 39f23afusr.sbin/certctl certctl.c

certctl: Style nits

MFC after:      1 week
Reviewed by:    markj
Differential Revision:  https://reviews.freebsd.org/D57298
DeltaFile
+3-2usr.sbin/certctl/certctl.c
+3-21 files

FreeBSD/src 05039fdtests/sys/acl tools-posix.test run

tests: Fix reliability issues in POSIX ACL tests

The ACL tests use UIDs and GIDs 41 through 49 and expect them to be
unassigned.  Since GID 43 is now assigned to the audio group, some
tests have begun to fail.

While here, also fix a benign Perl syntax issue in the test runner.

MFC after:      1 week
Reviewed by:    markj
Differential Revision:  https://reviews.freebsd.org/D57297
DeltaFile
+7-7tests/sys/acl/tools-posix.test
+1-1tests/sys/acl/run
+8-82 files

FreeBSD/ports 46d6486net-mgmt/netbox Makefile

net-mgmt/netbox: Move away from py-dj52-* ports

* The counterparts of the py-dj52-* ports switched to Django 5.2 in
  ce59801b72ef, thus move Netbox to those ones.

* Bump PORTREVISION due changed dependencies.

PR:             291707
DeltaFile
+26-26net-mgmt/netbox/Makefile
+26-261 files

FreeBSD/ports 98dfdddwww/py-strawberry-graphql-django Makefile distinfo

www/py-strawberry-graphql-django: Update to 0.84.0

* There are already newer versions available, but stick with this one
  for now to stay in sync with the py-dj52 counterpart to ensure
  compatibility once net-mgmt/netbox is switched to this this port.

Changelogs since 0.82.1:

https://github.com/strawberry-graphql/strawberry-django/releases/tag/0.84.0
https://github.com/strawberry-graphql/strawberry-django/releases/tag/0.83.0
DeltaFile
+3-4www/py-strawberry-graphql-django/Makefile
+3-3www/py-strawberry-graphql-django/distinfo
+6-72 files

FreeBSD/ports 201d1b1www/py-social-auth-app-django Makefile distinfo, www/py-social-auth-app-django/files patch-cve-2025-61783 patch-pyproject.toml

www/py-social-auth-app-django: Update to 5.9.0

* Remove no longer required patch.

Changelog since 5.4.3:

https://github.com/python-social-auth/social-app-django/blob/5.9.0/CHANGELOG.md
DeltaFile
+0-101www/py-social-auth-app-django/files/patch-cve-2025-61783
+23-0www/py-social-auth-app-django/files/patch-pyproject.toml
+4-4www/py-social-auth-app-django/Makefile
+3-3www/py-social-auth-app-django/distinfo
+30-1084 files

FreeBSD/ports bad2ec0www/py-django-filter Makefile distinfo

www/py-django-filter: Update to 25.2

* Add DRF option to reflect the settings as noted in "pyproject.toml"
  and make it default because Django REST framework is used by many
  Django implementations.

Changelog:

https://github.com/carltongibson/django-filter/blob/25.2/CHANGES.rst
DeltaFile
+8-2www/py-django-filter/Makefile
+3-3www/py-django-filter/distinfo
+11-52 files

FreeBSD/ports 0d064d2www/mod_auth_cas distinfo Makefile

www/mod_auth_cas: Update to 1.3
DeltaFile
+3-3www/mod_auth_cas/distinfo
+1-1www/mod_auth_cas/Makefile
+4-42 files

FreeBSD/ports 3df44d7www/mod_http2 distinfo Makefile

www/mod_http2: Update to 2.0.41
DeltaFile
+3-3www/mod_http2/distinfo
+1-1www/mod_http2/Makefile
+4-42 files