FreeBSD/src 644990fshare/examples/jails jng

New version of jng (9.0)

Changes for jng 2.0 -> 9.0 include:

+ Use ng_bridge(4) uplink hooks on ng_ether(4) lower so the host
  mapping table stays small (first hook is uplink; unknown unicast
  goes only to uplink)
+ Add `jng pin [-h] {-a | NAME ...}' to plant eiface MACs with
  NGM_BRIDGE_MOVE_HOST and raise maxStaleness so they do not expire
+ Remove experimental NG_TYPE=iface / ng_tcpmss(4); ng_iface(4)
  cannot work with ng_bridge(4)
+ Add -v
+ SPDX-License-Identifier: BSD-2-Clause; bump copyright to 2026

See D58902 for the ng_bridge(4) data-path MOVE_HOST fix.

MFC after:      1 week
Reviewed by:    kfv, jlduran
Differential Revision:  https://reviews.freebsd.org/D58903
DeltaFile
+230-113share/examples/jails/jng
+230-1131 files

FreeBSD/ports 60ba481mail/thunderbird-esr Makefile distinfo

mail/thunderbird-esr: update to 153.1.0

Release Notes:
  https://www.thunderbird.net/en-US/thunderbird/153.1.0esr/releasenotes/

(cherry picked from commit e631a6a949de7be945e8e30eeb6d2c5b506ca76a)
DeltaFile
+3-3mail/thunderbird-esr/distinfo
+1-1mail/thunderbird-esr/Makefile
+4-42 files

FreeBSD/ports 801de7email/thunderbird/files patch-python_sites_mach.txt patch-toolkit_library_moz.build

mail/thunderbird: update to 154.0

Release Notes:
  https://www.thunderbird.net/en-US/thunderbird/154.0/releasenotes/

(cherry picked from commit ba9dcf0f43e0dd30c8c4aa1758a422f6e2497c74)
DeltaFile
+3,322-1,421mail/thunderbird/files/patch-libwebrtc-generated
+897-0mail/thunderbird/files/patch-third__party_angle_angle__program__version__id__gn_moz.build
+36-0mail/thunderbird/files/patch-third__party_angle_angle__common__gn_moz.build
+23-0mail/thunderbird/files/patch-toolkit_xre_nsXREDirProvider.cpp
+0-22mail/thunderbird/files/patch-toolkit_library_moz.build
+4-5mail/thunderbird/files/patch-python_sites_mach.txt
+4,282-1,4483 files not shown
+4,291-1,4579 files

FreeBSD/doc cc1c624website/content/en/releases/14.5R relnotes.adoc

14.5/relnotes: initial informaton added (60 entries, SA and EN)

Approved by: re (implicit)
Differential Revision: https://reviews.freebsd.org/D58920
DeltaFile
+407-6website/content/en/releases/14.5R/relnotes.adoc
+407-61 files

FreeBSD/ports e631a6amail/thunderbird-esr Makefile distinfo

mail/thunderbird-esr: update to 153.1.0

Release Notes:
  https://www.thunderbird.net/en-US/thunderbird/153.1.0esr/releasenotes/
DeltaFile
+3-3mail/thunderbird-esr/distinfo
+1-1mail/thunderbird-esr/Makefile
+4-42 files

FreeBSD/ports ba9dcf0mail/thunderbird/files patch-python_sites_mach.txt patch-toolkit_library_moz.build

mail/thunderbird: update to 154.0

Release Notes:
  https://www.thunderbird.net/en-US/thunderbird/154.0/releasenotes/
DeltaFile
+3,322-1,421mail/thunderbird/files/patch-libwebrtc-generated
+897-0mail/thunderbird/files/patch-third__party_angle_angle__program__version__id__gn_moz.build
+36-0mail/thunderbird/files/patch-third__party_angle_angle__common__gn_moz.build
+23-0mail/thunderbird/files/patch-toolkit_xre_nsXREDirProvider.cpp
+0-22mail/thunderbird/files/patch-toolkit_library_moz.build
+4-5mail/thunderbird/files/patch-python_sites_mach.txt
+4,282-1,4483 files not shown
+4,291-1,4579 files

FreeBSD/src b385e49. INSTALL.md, doc atf-test-case.7

Import files missed in previous imports

Fixes:  0c9bf043 ("vendor/atf: import atf-0.24-rc1")
DeltaFile
+1,070-0m4/ac_cxx_compile_stdcxx.m4
+328-0doc/atf-test-case.7
+219-0INSTALL.md
+1,617-03 files

FreeBSD/src 5e0e6a9sys/kern uipc_usrreq.c

unix: wrap comments to fit in 80 char line

Fixes:  6563dcb6b1f57e51db63854f3774b52e672232ed
DeltaFile
+4-4sys/kern/uipc_usrreq.c
+4-41 files

FreeBSD/ports 0b84c67sysutils/bulk_extractor distinfo Makefile, sysutils/bulk_extractor/files patch-src_Makefile.am patch-src_be20__api_dfxml__cpp_src_dfxml__writer.h

sysutils/bulk_extractor: Update to 2.2.0
DeltaFile
+0-125sysutils/bulk_extractor/files/patch-src_scan__exiv2.cpp
+22-0sysutils/bulk_extractor/files/patch-src_bulk__extractor__restarter.h
+3-18sysutils/bulk_extractor/Makefile
+3-11sysutils/bulk_extractor/distinfo
+0-13sysutils/bulk_extractor/files/patch-src_be20__api_dfxml__cpp_src_dfxml__writer.h
+11-0sysutils/bulk_extractor/files/patch-src_Makefile.am
+39-1676 files

FreeBSD/ports 6ac6a72graphics/jogamp-jogl/files patch-jogl__make__build-common.xml patch-jogl_make_build-common.xml

graphics/jogamp-jogl: modernize patches

Ran: make patch; rm files/*; make makepatch.

This renames a patch and splits patch-freebsd to 3 separate patch files.

Manually checked that the patches are equal.

Approved by:    no maintainer
DeltaFile
+0-180graphics/jogamp-jogl/files/patch-freebsd
+72-0graphics/jogamp-jogl/files/patch-jogl_make_build-newt.xml
+66-0graphics/jogamp-jogl/files/patch-jogl_make_build-jogl.xml
+42-0graphics/jogamp-jogl/files/patch-jogl_make_build-nativewindow.xml
+0-33graphics/jogamp-jogl/files/patch-jogl__make__build-common.xml
+33-0graphics/jogamp-jogl/files/patch-jogl_make_build-common.xml
+213-2136 files

FreeBSD/ports 4ed1bb8devel/codebase-memory-mcp Makefile distinfo

devel/codebase-memory-mcp: update to 0.10.6
DeltaFile
+3-3devel/codebase-memory-mcp/distinfo
+1-1devel/codebase-memory-mcp/Makefile
+4-42 files

FreeBSD/ports 18010f1devel/codebase-memory-mcp/files patch-src_foundation_system__info.c patch-src_main.c

devel/codebase-memory-mcp: update to 0.10.4
DeltaFile
+50-81devel/codebase-memory-mcp/files/patch-src_cli_cli.c
+105-0devel/codebase-memory-mcp/files/patch-src_daemon_runtime.c
+32-0devel/codebase-memory-mcp/files/patch-src_daemon_ipc.c
+0-28devel/codebase-memory-mcp/files/patch-src_mcp_mcp.c
+0-27devel/codebase-memory-mcp/files/patch-src_main.c
+0-11devel/codebase-memory-mcp/files/patch-src_foundation_system__info.c
+187-1472 files not shown
+192-1528 files

FreeBSD/ports 23f50e9devel/moon Makefile distinfo

devel/moon: update to 2.5.1
DeltaFile
+3-3devel/moon/distinfo
+2-1devel/moon/Makefile
+5-42 files

FreeBSD/ports a81dca0devel/moon Makefile Makefile.crates

devel/moon: update to 2.5.0
DeltaFile
+511-495devel/moon/distinfo
+254-246devel/moon/Makefile.crates
+1-1devel/moon/Makefile
+766-7423 files

FreeBSD/ports 0ad7204mail/postfix-current Makefile

mail/postfix-current: Fix MONGO flavor

Fix MONGO flavor by depending on libbson and mongo-c-driver contained
in quarterly branch.

This is a direct commit to 2026Q3
DeltaFile
+3-3mail/postfix-current/Makefile
+3-31 files

FreeBSD/ports 18d6180mail/postfix pkg-plist Makefile

mail/postfix: Fix MONGO flavor

Fix MONGO flavor by depending on libbson and mongo-c-driver contained
in quarterly branch.

Also fix pkg-plist for MONGO flavor.

This is a direct commit to 2026Q3
DeltaFile
+4-4mail/postfix/Makefile
+3-0mail/postfix/pkg-plist
+7-42 files

FreeBSD/ports 9669fc5math/octave-forge-llms Makefile distinfo

math/octave-forge-llms: Update to 0.2.0.
DeltaFile
+3-3math/octave-forge-llms/distinfo
+1-2math/octave-forge-llms/Makefile
+4-52 files

FreeBSD/ports 075d4a2math/octave-forge Makefile

math/octave-forge: Add new optional dependency.

- Add new optional dependency math/octave-forge-drafting.
- Update to 20260818.
DeltaFile
+3-3math/octave-forge/Makefile
+3-31 files

FreeBSD/src b567434stand/efi/boot1 zfs_module.c, stand/libsa/zfs zfs.c zfsimpl.c

stand: set st_dev/st_ino in the loader's ZFS stat for veriexec

The loader's ZFS implementation never set st_dev or st_ino in
zfs_dnode_stat(). With an uninitialized struct stat, veriexec's device
comparison in lib/libsecureboot/veopen.c read stack garbage and skipped
the matching manifest entry, failing with a spurious "no entry" on ZFS
root under UEFI Secure Boot.

Rather than zeroing the device (which would break veriexec's ability to
tell apart the same path on different datasets), populate st_dev and
st_ino with the same intrinsic identifiers the kernel uses:

- st_dev = the dataset's ds_fsid_guid (as the kernel does via
  dmu_objset_fsid_guid()/dsl_dataset_fsid_guid()), already read in
  zfs_mount_dataset() and now propagated through struct zfsmount.
- st_ino = the object number resolved in zfs_lookup(), propagated
  through struct file (the loader's equivalent of the kernel's z_id).

dev_t and ino_t are 64-bit on FreeBSD, so both are assigned directly

    [14 lines not shown]
DeltaFile
+48-6stand/libsa/zfs/zfsimpl.c
+5-3stand/libsa/zfs/zfs.c
+3-2stand/efi/boot1/zfs_module.c
+56-113 files

FreeBSD/ports 9ba146bmath/octave-forge-octave_ffmpeg_free Makefile distinfo

math/octave-forge-octave_ffmpeg_free: Update to 2.0.0.

- Build will work when ffmpeg updates to version 9.

PR:             297384
Reported by:    Daniel Engberg <diizzy at FreeBSD.org>
<If someone else reported the issue>
DeltaFile
+3-3math/octave-forge-octave_ffmpeg_free/distinfo
+1-2math/octave-forge-octave_ffmpeg_free/Makefile
+4-52 files

FreeBSD/ports 27b811bmath Makefile, math/octave-forge-drafting distinfo pkg-descr

math/octave-forge-drafting: New port.

Geometry, CAD Input/Output and Technical Drawing for octave.
DeltaFile
+23-0math/octave-forge-drafting/Makefile
+8-0math/octave-forge-drafting/pkg-descr
+3-0math/octave-forge-drafting/distinfo
+1-0math/Makefile
+35-04 files

FreeBSD/ports ab208c4graphics/wayland Makefile distinfo

graphics/wayland: Update to 1.26.0
DeltaFile
+4-4graphics/wayland/pkg-plist
+3-3graphics/wayland/distinfo
+1-1graphics/wayland/Makefile
+8-83 files

FreeBSD/ports bb862b9graphics/py-exiv2 distinfo Makefile, graphics/py-exiv2/files patch-tests_test__value.py patch-pyproject.toml

graphics/py-exiv2: Update 0.18.1 => 0.19.0, take maintainership

Changelog:
1/ Add exiv2.XmpParser.encode() to Python interface.
2/ Fix crash when getting strings of malformed values.
3/ Python 3.15 compatibility.
https://github.com/jim-easterbrook/python-exiv2/releases/tag/0.19.0
https://github.com/jim-easterbrook/python-exiv2/blob/0.19.0/CHANGELOG.txt

- Add STRIP_CMD in post-install.

PR:             297603
Sponsored by:   UNIS Labs
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>
MFH:            2026Q3

(cherry picked from commit 59d9d76281846c9e3427ebecd3da6b28aea5f631)
DeltaFile
+20-0graphics/py-exiv2/files/patch-pyproject.toml
+6-3graphics/py-exiv2/Makefile
+3-3graphics/py-exiv2/distinfo
+2-2graphics/py-exiv2/files/patch-tests_test__value.py
+31-84 files

FreeBSD/ports 59d9d76graphics/py-exiv2 distinfo Makefile, graphics/py-exiv2/files patch-tests_test__value.py patch-pyproject.toml

graphics/py-exiv2: Update 0.18.1 => 0.19.0, take maintainership

Changelog:
1/ Add exiv2.XmpParser.encode() to Python interface.
2/ Fix crash when getting strings of malformed values.
3/ Python 3.15 compatibility.
https://github.com/jim-easterbrook/python-exiv2/releases/tag/0.19.0
https://github.com/jim-easterbrook/python-exiv2/blob/0.19.0/CHANGELOG.txt

- Add STRIP_CMD in post-install.

PR:             297603
Sponsored by:   UNIS Labs
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>
MFH:            2026Q3
DeltaFile
+20-0graphics/py-exiv2/files/patch-pyproject.toml
+6-3graphics/py-exiv2/Makefile
+3-3graphics/py-exiv2/distinfo
+2-2graphics/py-exiv2/files/patch-tests_test__value.py
+31-84 files

FreeBSD/ports fafe124Mk/Scripts qa.sh

Mk/Scripts/qa.sh: Filter baselibs() input to improve performance

After the baselibs() fix in f0f863b1a2d6, readelf is executed for each
result from find(1).  There are two concerns with this fix:

1. -exec readelf -d {} \; drops the filename from the error messages

readelf prints "File: <name>" headers only when it is supplied with two
or more files, and baselibs() uses ${file} from those headers.  So, the
two err() messages in baselibs() will break.

This is moot for now, though, because nothing in the ports tree can
trigger these errors.  Those base soname versions for libarchive and
libedit are long gone.

2. Performance hit with one readelf execution per staged file

The costs are high for ports that stage many files.  For
emulators/linux_base-rl9, the find returns over 30k hits that the while

    [12 lines not shown]
DeltaFile
+15-1Mk/Scripts/qa.sh
+15-11 files

FreeBSD/src b39457bsys/dev/virtio/p9fs virtio_p9fs.c

virtio_p9fs: Disallow detach if a session is in progress

PR:             295453
Reviewed by:    markj
MFC after:      1 week
Differential Revision:  https://reviews.freebsd.org/D57500
DeltaFile
+4-0sys/dev/virtio/p9fs/virtio_p9fs.c
+4-01 files

FreeBSD/src c08a97fsys/netpfil/ipfilter/netinet ip_nat.c

ipfilter: Fix checksum update for NAT_DIVERTOUT

When taking a snapshot of the before ip_len (s1) for comparison with the
after-translated ip_len (s2), we must convert it from network to host
byte order before we can use it. Add the missing ntohs() call.

PR:             296944
MFC after:      3 days
DeltaFile
+1-1sys/netpfil/ipfilter/netinet/ip_nat.c
+1-11 files

FreeBSD/ports cc12e00databases Makefile

databases/postgresql19-*: Connect to the tree

PR:             297634
Approved by:    Palle Girgensohn <girgen at FreeBSD.org> (pgsql, maintainer, blanket - fix tree)
Fixes:          60c44ec8a907 (Update to latest versions)
Sponsored by:   UNIS Labs
DeltaFile
+8-0databases/Makefile
+8-01 files

FreeBSD/ports 627ec0esecurity/wpa_supplicant Makefile, security/wpa_supplicant-devel Makefile

security/wpa_supplicant*: Fix EAPOL_TEST build for non-standard SSL_DEFAULT

The post-build target does not have the same environment variables setup
as the do-build target. This results in the eapol_test binary getting
compiled against the headers of the TLS library specified in
SSL_DEFAULT, but getting linked against the TLS library from the base
system regardless of SSL_DEFAULT, causing build failures when
SSL_DEFAULT is set to a different TLS library/version than the on from
the base system.

Fix this by not using the post-build target to build the eapol_test
binary, but instead conditionally add the eapol_test target to
TARGET_ALL if the EAPOL_TEST option is enabled for the port.

Signed-off-by: Pascal Ernster <git at hardfalcon.net>
DeltaFile
+5-3security/wpa_supplicant29/Makefile
+5-3security/wpa_supplicant210/Makefile
+5-3security/wpa_supplicant/Makefile
+5-3security/wpa_supplicant-devel/Makefile
+20-124 files

FreeBSD/ports d72502dnet/amnezia-kmod Makefile distinfo

net/amnezia-kmod: Update 2.0.11 => 2.0.12

Changelog:
- if_amn: wg_crypto: validate OCF authentication result.
- Check crp_etype after crypto_dispatch() so packets with an invalid
  Poly1305 tag are rejected.
- Require a synchronous crypto session before using a stack-allocated
  request.
https://github.com/vgrebenschikov/wireguard-amnezia-kmod/releases/tag/v2.0.12

PR:             297625
Security:       CVE-2026-58085
Sponsored by:   UNIS Labs
MFH:            2026Q3

(cherry picked from commit d128f141148e0349f36cb8c19c6d7d8e71df7e4a)
DeltaFile
+3-3net/amnezia-kmod/distinfo
+1-1net/amnezia-kmod/Makefile
+4-42 files