FreeBSD/src da0067d — sbin/ipfw nat64clat.c

ipfw: guard against NULL deref with clat/plat prefixes without length

Found with:     Claude Code Sonnet 5
MFC after:      2 weeks

(cherry picked from commit 47b02ace19c53e72ad2290d974025292ff97464a)
DeltaFile
+3-0sbin/ipfw/nat64clat.c
+3-01 files

FreeBSD/src 5799049 — sys/kern imgact_elf.c

exec: Remove an unneeded capability mode check

The subsequent namei() call is relative to AT_FDCWD, and such lookups
are always disallowed in capability mode.

No functional change intended.

Reviewed by:    emaste
Differential Revision:  https://reviews.freebsd.org/D59888
DeltaFile
+0-9sys/kern/imgact_elf.c
+0-91 files

FreeBSD/src a76e986 — lib/libc/gen sysctl.3, sys/kern kern_sysctl.c

sysctl: Return ECAPMODE when trying to access sysctls in capability mode

We have always returned EPERM in this case, but it's incorrect, we
should return ECAPMODE for capability mode violations.  Fix the errno
value.

Reviewed by:    emaste
MFC after:      2 weeks
Differential Revision:  https://reviews.freebsd.org/D59887
DeltaFile
+3-0lib/libc/gen/sysctl.3
+1-1sys/kern/kern_sysctl.c
+4-12 files

FreeBSD/ports 956f979 — x11-servers/xlibre-server Makefile Makefile.common

x11-servers/xlibre-server: Fix some dependency paths

- Bump PORTREVISION

With hat:       xlibre
PR:             298682
Reported by:    mirror176 __at_ hotmail.com
DeltaFile
+2-2x11-servers/xlibre-server/Makefile.common
+1-0x11-servers/xlibre-server/Makefile
+3-22 files

FreeBSD/ports a48d144 — www/qhttpengine Makefile

www/qhttpengine: deprecate

PR:             289548
Reported by:    Daniel Engberg <diizzy at FreeBSD.org>
DeltaFile
+3-0www/qhttpengine/Makefile
+3-01 files

FreeBSD/src c52f99a — sys/amd64/amd64 machdep.c

amd64: use WRMSRNS immediate form to update splitlock control, when available

(cherry picked from commit 20c09e6fece29dbcf4835b4dd90e969f1b9b3e59)
DeltaFile
+34-4sys/amd64/amd64/machdep.c
+34-41 files

FreeBSD/src 0dce4f2 — sys/amd64/amd64 mp_machdep.c machdep.c, sys/amd64/include md_var.h pcpu.h

amd64: cache MSR_MEMORY_CTL in pcpu

(cherry picked from commit 74d325fee2dbcb5f8541819481ce76f87c151a21)
DeltaFile
+11-0sys/amd64/amd64/initcpu.c
+3-4sys/amd64/amd64/machdep.c
+2-1sys/amd64/include/pcpu.h
+2-0sys/amd64/amd64/mp_machdep.c
+1-0sys/amd64/include/md_var.h
+19-55 files

FreeBSD/src d95433e — sys/amd64/amd64 sys_machdep.c, sys/x86/include sysarch.h

amd64: add userspace control for disabling splitlocks

(cherry picked from commit 51cea5416a2421f29d22100bc71ab6486b1dc54a)
DeltaFile
+26-1sys/amd64/amd64/sys_machdep.c
+2-0sys/x86/include/sysarch.h
+28-12 files

FreeBSD/src 6d6a824 — sys/amd64/amd64 vm_machdep.c exec_machdep.c, sys/amd64/include proc.h md_var.h

amd64: support for tracking per-thread 'disable splitlocks' state

(cherry picked from commit e318f24c0f53b52bd280b827509ad752db0497bf)
DeltaFile
+36-0sys/amd64/amd64/machdep.c
+14-0sys/amd64/amd64/pmap.c
+10-0sys/amd64/amd64/exec_machdep.c
+5-0sys/amd64/include/md_var.h
+2-0sys/amd64/include/proc.h
+2-0sys/amd64/amd64/vm_machdep.c
+69-03 files not shown
+72-09 files

FreeBSD/src ca7aa1c — sys/amd64/include proc.h

amd64: add md thread flags word

(cherry picked from commit dc975612213369f597449ced5a3c5edabc2aae6d)
DeltaFile
+1-0sys/amd64/include/proc.h
+1-01 files

FreeBSD/src b4a9afd — sys/amd64/amd64 machdep.c initcpu.c, sys/amd64/include md_var.h

amd64: calculate if hardware supports disabling splitlocks

(cherry picked from commit d8c1abb0e3409314fb89400bc85b5051649e91ab)
DeltaFile
+18-0sys/amd64/amd64/initcpu.c
+11-0sys/amd64/amd64/machdep.c
+3-0sys/amd64/include/md_var.h
+32-03 files

FreeBSD/src 77a99f3 — sys/amd64/amd64 trap.c

amd64: handle #AC in kernel mode

(cherry picked from commit c6d7235ac15d208435a839bf847dd898d9b1d9fe)
DeltaFile
+8-0sys/amd64/amd64/trap.c
+8-01 files

FreeBSD/src 54cb4bf — sys/amd64/include cpufunc.h

amd64: gate WRMSRNS immediate form on compiler support

(cherry picked from commit 53fe018630d06eeef6791cfacaa6dc9acdf4d669)
DeltaFile
+10-0sys/amd64/include/cpufunc.h
+10-01 files

FreeBSD/src 61412c0 — sys/amd64/include cpufunc.h

amd64 cpufunc.h: add WRMSRNS helpers

(cherry picked from commit 4a8acccc2e59b6ac5f4068471d94b40347ebeff0)
DeltaFile
+13-0sys/amd64/include/cpufunc.h
+13-01 files

FreeBSD/src ee05a36 — sys/netpfil/pf pf_table.c, tests/sys/netpfil/pf table.sh

pf: do not loop on an address that is cleared twice in pfr_clr_astats()

pfr_clr_astats() looks up each address it is given and inserts the entry
it finds at the head of a work queue. If the same address is given more
than once, the entry is inserted twice and the second insertion makes it
its own successor. pfr_clstats_kentries() then walks the queue forever,
with the rules lock held for writing, so packet processing and every
other pf operation in that vnet stop as well. To reproduce:

pfctl -e
pfctl -t foo -T add 192.0.2.1
pfctl -t foo -T zero 192.0.2.1 192.0.2.1

Do as pfr_del_addrs() does: clear pfrke_mark on the entries named, then
queue an entry only the first time it is seen. An address given more
than once is cleared, and counted, once. Validate all addresses before
any entry is touched.

Add a regression test.

    [6 lines not shown]
DeltaFile
+34-0tests/sys/netpfil/pf/table.sh
+9-2sys/netpfil/pf/pf_table.c
+43-22 files

FreeBSD/ports 7f0bbeb — math/cvc5 Makefile pkg-plist

math/cvc5: Fix plist when JAVA=OFF

PR:             280044
Reported by:    iron.udjin at gmail.com
DeltaFile
+1-1math/cvc5/pkg-plist
+1-0math/cvc5/Makefile
+2-12 files

FreeBSD/src f084f28 — sys/netpfil/pf pf_table.c, tests/sys/netpfil/pf table.sh

pf: fix NULL dereference in pfr_set_addrs() with feedback

Since DIOCRSETADDRS was converted to netlink, pf_handle_table_set_addrs()
calls pfr_set_addrs() with a NULL size2, as the netlink interface has no
buffer to return the deleted addresses in. pfr_set_addrs() only checked
size2 for NULL at the end of the function; with PFR_FLAG_FEEDBACK set it
dereferenced it unconditionally first. pfctl sets PFR_FLAG_FEEDBACK
when run with -v, so "pfctl -v -t foo -T replace ..." panicked the
kernel with a NULL pointer dereference. To reproduce:

pfctl -e
pfctl -t foo -T add 192.0.2.1
pfctl -v -t foo -T replace 192.0.2.2

Check size2 for NULL before dereferencing it, as is already done at the
end of the function. The per-address feedback for added and changed
addresses is still copied back as before; only the list of deleted
addresses, which the netlink caller has no room for, is skipped.


    [9 lines not shown]
DeltaFile
+34-0tests/sys/netpfil/pf/table.sh
+2-2sys/netpfil/pf/pf_table.c
+36-22 files

FreeBSD/ports 5a4f6e8 — math/gnumeric pkg-plist

math/gnumeric: Fix pkg-plist issues with PERL=off

PR:             258485
Approved by:    portmgr (blanket)
Approved by:    osa, fluffy (mentors, implicit)
DeltaFile
+4-4math/gnumeric/pkg-plist
+4-41 files

FreeBSD/ports 4885183 — graphics/drm-latest-kmod Makefile.version distinfo, graphics/nvidia-drm-latest-kmod Makefile distinfo

graphics/drm-latest-kmod: Update to drm_v6.12.85_3 to fix build

After src commit 33595d4ae01c added pci_map_rom() and pci_unmap_rom() to
linuxkpi, graphics/drm-latest-kmod failed to build because drm-kmod
defined the same macros itself.

Upstream drm-kmod made its definitions conditional, and ports commit
7e420adaf6ef pulled that fix in for drm-515-kmod, drm-61-kmod,
drm-66-kmod, and drm-612-kmod.  drm-latest-kmod was missed, so move it
to the same tag as drm-612-kmod.

Bump PORTREVISION of the nvidia-drm-latest-kmod ports, which build
against the drm-kmod sources, and update their distinfo for the new
tarball.

Reference: https://github.com/freebsd/drm-kmod/pull/503

Reviewed by:    dumbbell
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D60084
DeltaFile
+3-3graphics/nvidia-drm-latest-kmod/distinfo
+3-3graphics/nvidia-drm-latest-kmod-devel/distinfo
+3-3graphics/nvidia-drm-latest-kmod-580/distinfo
+3-3graphics/drm-latest-kmod/distinfo
+2-2graphics/drm-latest-kmod/Makefile.version
+1-1graphics/nvidia-drm-latest-kmod/Makefile
+15-152 files not shown
+17-178 files

FreeBSD/ports 87d39d9 — games/jinput Makefile

games/jinput: Fix build if maven39 installed

[ERROR] Plugin org.apache.maven.plugins:maven-resources-plugin:3.4.0 or one of its dependencies could not be resolved:
[ERROR]         Cannot access central (https://repo.maven.apache.org/maven2) in offline mode and the artifact org.apache.maven.plugins:maven-resources-plugin:jar:3.4.0 has not been downloaded from it before.
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/PluginResolutionException

Approved by:    blanket (fix build)
Sponsored by:   UNIS Labs
MFH:            2026Q3

(cherry picked from commit 5a8f4f19bebcaf728753b7f8f5e3f5837b56bda1)
DeltaFile
+2-1games/jinput/Makefile
+2-11 files

FreeBSD/ports 5a8f4f1 — games/jinput Makefile

games/jinput: Fix build if maven39 installed

[ERROR] Plugin org.apache.maven.plugins:maven-resources-plugin:3.4.0 or one of its dependencies could not be resolved:
[ERROR]         Cannot access central (https://repo.maven.apache.org/maven2) in offline mode and the artifact org.apache.maven.plugins:maven-resources-plugin:jar:3.4.0 has not been downloaded from it before.
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/PluginResolutionException

Approved by:    blanket (fix build)
Sponsored by:   UNIS Labs
MFH:            2026Q3
DeltaFile
+2-1games/jinput/Makefile
+2-11 files

FreeBSD/ports 185c04f — games/jutils Makefile

games/jutils: Fix build if maven39 installed

[ERROR] Plugin org.apache.maven.plugins:maven-surefire-plugin:3.5.4 or one of its dependencies could not be resolved:
[ERROR]         Cannot access central (https://repo.maven.apache.org/maven2) in offline mode and the artifact org.apache.maven.plugins:maven-surefire-plugin:jar:3.5.4 has not been downloaded from it before.
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/PluginResolutionException

Approved by:    blanket (fix build)
Sponsored by:   UNIS Labs
MFH:            2026Q3

(cherry picked from commit d5cc2f5d3fe60a240e642b2514c120b4395d4a16)
DeltaFile
+2-1games/jutils/Makefile
+2-11 files

FreeBSD/ports d5cc2f5 — games/jutils Makefile

games/jutils: Fix build if maven39 installed

[ERROR] Plugin org.apache.maven.plugins:maven-surefire-plugin:3.5.4 or one of its dependencies could not be resolved:
[ERROR]         Cannot access central (https://repo.maven.apache.org/maven2) in offline mode and the artifact org.apache.maven.plugins:maven-surefire-plugin:jar:3.5.4 has not been downloaded from it before.
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/PluginResolutionException

Approved by:    blanket (fix build)
Sponsored by:   UNIS Labs
MFH:            2026Q3
DeltaFile
+2-1games/jutils/Makefile
+2-11 files

FreeBSD/src 334e874 — share/man/man4 wsp.4

wsp.4: Canonicalize SYNOPSIS + tag SPDX

MFC after:              3 days
Reviewed by:            wulf
Differential Revision:  https://reviews.freebsd.org/D59257
DeltaFile
+8-12share/man/man4/wsp.4
+8-121 files

FreeBSD/src 3a542d8 — share/man/man4 uep.4

uep.4: Canonicalize SYNOPSIS, KERNEL CONFIGURATION

MFC after:              3 days
Reviewed by:            glebius, wulf
Differential Revision:  https://reviews.freebsd.org/D59869
DeltaFile
+19-18share/man/man4/uep.4
+19-181 files

FreeBSD/ports 5449149 — misc/gollama Makefile distinfo

misc/gollama: update 2.0.5 → 2.0.6
DeltaFile
+5-135misc/gollama/distinfo
+2-80misc/gollama/Makefile
+7-2152 files

FreeBSD/doc 4adfd4a — website/themes/beastie/layouts/_partials site-header.html site-footer.html

website: Revive donations page

Restore donations links on the project website to the projects donations
page. These links were replaced in the foundation sponsored website
refresh with links to the foundations donations page.

The very first link on this page is to the Foundations donations, but
importantly, it explains where this money actually goes, which has many
common misconceptions, such as the cluster. There are also other links
on the page, such as hardware donations, which we actually need right
now for the aging cluster.

Event:                  EuroBSDcon 2026
Reviewed by:            adrian, bapt, gahr, kevans, obiwac, philip,
Reviewed by:            vishwin, wosch,
Reviewed by:            Antranig Vartanian <antranigv at freebsd.am>,
Reviewed by:            Lukas Engelhardt <lukas.engelhardt at gmx.de>
Differential Revision:  https://reviews.freebsd.org/D59505
DeltaFile
+1-1website/themes/beastie/layouts/_partials/site-header.html
+1-1website/themes/beastie/layouts/_partials/site-footer.html
+2-22 files

FreeBSD/ports 159cf85 — net/frr9 Makefile pkg-plist, net/frr9/files patch-configure.ac frr.in

net/frr9: Install daemons in lib/frr, fix SNMP build and rc.d restart

Daemons move from ${PREFIX}/sbin to ${PREFIX}/lib/frr, matching the Linux
packages and net/frr10. Only vtysh and frr-reload stay in bin/ and sbin/.
This avoids filename collision with net/openbgpd*, net/pimd, net/quagga, etc.

Fix the SNMP build.

Backport frr10's rc.d fixes: a bare "service frr restart" restarted watchfrr
only, leaving the daemons it supervises untouched.
DeltaFile
+26-26net/frr9/pkg-plist
+27-9net/frr9/files/frr.in
+25-2net/frr9/files/patch-configure.ac
+4-3net/frr9/Makefile
+82-404 files

FreeBSD/ports 00a9983 — x11-themes/xfce-icons-elementary Makefile distinfo, x11-themes/xfce-icons-elementary/files patch-Makefile.in

x11-themes/xfce-icons-elementary: Update to 0.23
DeltaFile
+32-0x11-themes/xfce-icons-elementary/pkg-plist
+3-3x11-themes/xfce-icons-elementary/distinfo
+2-2x11-themes/xfce-icons-elementary/files/patch-Makefile.in
+1-1x11-themes/xfce-icons-elementary/Makefile
+38-64 files

FreeBSD/ports f038044 — finance/gnucash Makefile distinfo

finance/gnucash: Update to 5.17
DeltaFile
+3-3finance/gnucash/distinfo
+1-2finance/gnucash/Makefile
+4-52 files