Add missing devfs vmmctl rule and the volmode=dev to the example
When vmmctl is not set to unhide in devfs.rules, the example will fail.
Add it to the instructions. Further, add a volmode=dev to the zvol
creation command to not get an input/output error.
PR: 299724
Event: Olso Hackathon 2026
www/freenginx-devel: update: 1.31.4 -> 1.31.5
While I'm here:
- update lua, lua-core, and lua-stream third-party modules to
their recent snapshots
- fix third-party vod module build
Sponsored by: tipi.work
<ChangeLog>
*) Security: one of the keys was left uninitialized when using automatic
rotation of TLS session ticket keys, making it possible to forge a
session and bypass client certificate verification (CVE-2026-97629);
*) Bugfix: a segmentation fault might occur in a worker process if AIO
was used in subrequests.
*) Bugfix: in HTTP/3.
[2 lines not shown]
bind_all_fibs: Disable bind_all_fibs by default
net.inet.{tcp,udp,raw}.bind_all_fibs was set to 1 for backward
compatibility. Set to 0 by default to drop them all unless an inpcb
bound to the same FIB exists.
While here, Add an UPDATING entry for behaviour change.
Relnotes: yes
Reviewed by: markj
Pull Request: https://ron-dev.freebsd.org/FreeBSD/src/pulls/73
memset.3: Fix .Fn usage and too many commas
Fix wrong usage of .Fn macro in paragraph for `memset_explicit' that
caused too many commas improperly emitted into rendered manual page.
Approved by: des
MFC after: 1 week
Makefile.inc1: Make bootstrap mandoc's bootstrap libz dependency conditional
We bootstrap libz unconditionally on macOS and Linux, and conditionally
on FreeBSD if pre-1600029 or DISK_IMAGE_TOOLS_BOOTSTRAP is enabled, but
if building on new enough -CURRENT without DISK_IMAGE_TOOLS_BOOTSTRAP
then libz is not bootstrapped and so this libz dependency does not
exist. Add the dependency whenever we are bootstrapping libz but not
otherwise, and do so without duplicating the condition.
Fixes: 1dbcc7ee92c4 ("Makefile.inc1: Make sure mandoc bootstrap tool depends on libz")
MFC after: 1 week
libc: Fix stack buffer overflow in cgetnext()
`cgetnext()` copies a capability record's name field into a fixed
1024 byte on-stack buffer (`nbuf[BSIZE]`) one character at a time,
but never checks that the write pointer stays within the buffer.
Therefore, a record name that is longer than `BSIZE` (either on a
single line, or accumulated across several `\`-continued lines as
the pointer is not reset amidst continuation) writes past the end
of `nbuf` and smashes the stack.
The name field is read directly from the capability file, so any
consumer of `cgetnext()`/`cgetfirst()` that processes an untrusted
`termcap(5)`- or `printcap(5)`-style database (e.g. `cap_mkdb(1)`,
`lpr(1)`, or any third-party caller) can be exposed and hence made
to corrupt the stack.
Reviewed by: fuz, dteske
Approved by: fuz (mentor), dteske (mentor)
MFC after: 1 week
Pull Request: https://github.com/freebsd/freebsd-src/pull/2309
mail/mlmmj-archiver: fix package being empty
Since 0.6.0 we move from PLIST_FILES to pkg-plist but the pkg-plist was
never git added.
While here strip the binaries.
Reported by: R. Matthew Emerson" <rme at acm.org>
devel/wasi-*: deprecate LLVM 17 and 18 based ports
Deprecate the individual devel/wasi-compiler-rt1[78] and
devel/wasi-libcxx1[78] ports and the 17 and 18 flavors of
devel/wasi-libc.
Approved by: vishwin (maintainer, in concept)
Fix broken doc package, offline local and online local browsing
Fix a bug that prevents the packaged FreeBSD documentation from being
browsed correctly when built using the offline Hugo configuration.
The offline configuration leaves baseURL empty, causing Hugo to fall
back to https://example.org/. As a result, the generated documentation
contains incorrect links, breaking offline browsing and online browsing
by directing users to example.org. This affects the built package as
well (tested with pkg version: en-freebsd-doc-20260814,1; tested on a
fresh VM with documentation installed using bsdinstall(8)). According to
the Hugo documentation, this is the default behavior when baseurl is not
set.
The fix is to set baseURL = "/" ensuring the generated documentation can
be browsed directly from the file system without requiring the web
server. This also preserves the ability to browse the documentation
through the local server started by 'make run'.
Event: Oslo Hackathon 2026
Pull Request: https://github.com/freebsd/freebsd-doc/pull/731
