FreeBSD/ports 9637c29math/R-cran-RcppParallel Makefile distinfo

math/R-cran-RcppParallel: Update 6.1.1 => 6.2.0

Port changes:
- Remove devel/R-cran-RUnit from TEST_DEPENDS.

Changelog:
https://github.com/RcppCore/RcppParallel/blob/v6.2.0/NEWS.md

PR:             297317
Reported by:    Christos Longros <chris.longros at gmail.com> (maintainer)
Signed-off-by:  Christos Longros <chris.longros at gmail.com> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q3

(cherry picked from commit 70fd6c02c0c5f69ae00197d1948da84cf9234407)
DeltaFile
+3-3math/R-cran-RcppParallel/distinfo
+2-3math/R-cran-RcppParallel/Makefile
+5-62 files

FreeBSD/ports 70fd6c0math/R-cran-RcppParallel Makefile distinfo

math/R-cran-RcppParallel: Update 6.1.1 => 6.2.0

Port changes:
- Remove devel/R-cran-RUnit from TEST_DEPENDS.

Changelog:
https://github.com/RcppCore/RcppParallel/blob/v6.2.0/NEWS.md

PR:             297317
Reported by:    Christos Longros <chris.longros at gmail.com> (maintainer)
Signed-off-by:  Christos Longros <chris.longros at gmail.com> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q3
DeltaFile
+3-3math/R-cran-RcppParallel/distinfo
+2-3math/R-cran-RcppParallel/Makefile
+5-62 files

FreeBSD/src bdea6e9sys/fs/nfsclient nfs_clrpcops.c

nfs_commonkrpc.c: Get rid of NFSv4.0 delegation cruft

Delegations in NFSv4.0 never worked well and, since
the NFSv4.0 protocol is now deprecated, use of delegations
for NFSv4.0 is disabled as far as the client can do so.

It turns out that some Illumos NFSv4.0 server issues
delegations anyhow (even when the callback path is
specified as 0.0.0.0) and this can cause use after free
problems.

This patch deleted some cruft that did an nfsrpc_openrpc()
call recursively when an NFSv4.0 server failed to issue
a delegation when it had previously done so.
This code was only meant to be an optimization and
would have been rarely exercised.  Since this recursive
call of nfsrpc_openrpc() is in some of the backtraces
in the bugzilla PR, getting rid of the cruft makes sense.


    [6 lines not shown]
DeltaFile
+0-27sys/fs/nfsclient/nfs_clrpcops.c
+0-271 files

FreeBSD/src ca0dcfdsys/fs/nfs nfs_commonkrpc.c

nfs_commonkrpc.c: Fix recovery that was broken by 4d80d4913e79

Commit 4d80d4913e79 added a check for nfsess_defunct already
being set.  This was incorrect because, once set, nfsess_defunct
remains set and an additional recovery might be needed.

This patch reverts this part of 4d80d4913e79.

PR:     297252

(cherry picked from commit 5ab48fb9f7ac43fb1242a678312a02df5d4d5b53)
DeltaFile
+9-3sys/fs/nfs/nfs_commonkrpc.c
+9-31 files

FreeBSD/src 6154eecsys/fs/nfsclient nfs_clrpcops.c

nfs_commonkrpc.c: Get rid of NFSv4.0 delegation cruft

Delegations in NFSv4.0 never worked well and, since
the NFSv4.0 protocol is now deprecated, use of delegations
for NFSv4.0 is disabled as far as the client can do so.

It turns out that some Illumos NFSv4.0 server issues
delegations anyhow (even when the callback path is
specified as 0.0.0.0) and this can cause use after free
problems.

This patch deleted some cruft that did an nfsrpc_openrpc()
call recursively when an NFSv4.0 server failed to issue
a delegation when it had previously done so.
This code was only meant to be an optimization and
would have been rarely exercised.  Since this recursive
call of nfsrpc_openrpc() is in some of the backtraces
in the bugzilla PR, getting rid of the cruft makes sense.


    [6 lines not shown]
DeltaFile
+0-27sys/fs/nfsclient/nfs_clrpcops.c
+0-271 files

FreeBSD/src 037232csys/fs/nfs nfs_commonkrpc.c

nfs_commonkrpc.c: Fix recovery that was broken by 4d80d4913e79

Commit 4d80d4913e79 added a check for nfsess_defunct already
being set.  This was incorrect because, once set, nfsess_defunct
remains set and an additional recovery might be needed.

This patch reverts this part of 4d80d4913e79.

PR:     297252
(cherry picked from commit 5ab48fb9f7ac43fb1242a678312a02df5d4d5b53)
DeltaFile
+9-3sys/fs/nfs/nfs_commonkrpc.c
+9-31 files

FreeBSD/ports 63336f5net-p2p/hostd distinfo Makefile, net-p2p/hostd/files patch-vendor_modules.txt

net-p2p/{hostd,renterd,walletd}: Update ports

- net-p2p/hostd: 2.5.1 => 2.9.0
- net-p2p/renterd: 2.7.1 => 2.9.1
- net-p2p/walletd: 2.11.0 => 2.12.0

PR:             293580
Reported by:    bruno <bruno at tinkerbox.org> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
DeltaFile
+47-70net-p2p/renterd/files/patch-vendor_modules.txt
+43-66net-p2p/hostd/files/patch-vendor_modules.txt
+49-53net-p2p/hostd/Makefile
+45-49net-p2p/renterd/distinfo
+39-43net-p2p/hostd/distinfo
+31-50net-p2p/walletd/files/patch-vendor_modules.txt
+254-3316 files not shown
+364-45412 files

FreeBSD/doc b0569d5website/content/en/status/report-2025-07-2025-09 nuageinit.adoc

website: fix link in status report

PR: 291319
DeltaFile
+1-1website/content/en/status/report-2025-07-2025-09/nuageinit.adoc
+1-11 files

FreeBSD/ports 8777856www/radicale Makefile distinfo

www/radicale: Update to 3.7.8
DeltaFile
+3-3www/radicale/distinfo
+1-1www/radicale/Makefile
+4-42 files

FreeBSD/ports 1deeef9net-mgmt/check_mk_agent Makefile

net-mgmt/check_mk_agent: Change default paths

Upstream changed default values for MK_CONFDIR and MK_VARDIR.
This updates the patch to properly use PREFIX with the new defaults
and not hardcode to /usr/local.

PR:             297244
Approved by:    maintainer
DeltaFile
+2-3net-mgmt/check_mk_agent/Makefile
+2-31 files

FreeBSD/ports 373219fgraphics/graphviz distinfo Makefile

graphics/graphviz: update to 15.1.1
DeltaFile
+7-7graphics/graphviz/Makefile
+3-3graphics/graphviz/distinfo
+10-102 files

FreeBSD/ports 3dc2a6asecurity/cryptopp-modern pkg-plist distinfo

security/cryptopp-modern: Update to 2026.8.1

- Put testing as safe

ChangeLog:
https://github.com/cryptopp-modern/cryptopp-modern/releases/tag/2026.8.1
DeltaFile
+3-3security/cryptopp-modern/distinfo
+3-3security/cryptopp-modern/Makefile
+1-1security/cryptopp-modern/pkg-plist
+7-73 files

FreeBSD/ports 4bb2432textproc/goldendict-ng Makefile distinfo

textproc/goldendict-ng: Update to 26.8.0

ChangeLog: https://github.com/xiaoyifang/goldendict-ng/releases/tag/v26.8.0
DeltaFile
+3-3textproc/goldendict-ng/distinfo
+1-2textproc/goldendict-ng/Makefile
+4-52 files

FreeBSD/ports d7230efnet-p2p/libtorrent Makefile pkg-plist, net-p2p/rtorrent Makefile distinfo

net-p2p/{lib,r}torrent: Update to 0.16.20

ChangeLog: https://github.com/rakshasa/rtorrent/releases/tag/v0.16.20
DeltaFile
+3-3net-p2p/rtorrent/distinfo
+3-3net-p2p/libtorrent/distinfo
+2-1net-p2p/libtorrent/pkg-plist
+1-1net-p2p/rtorrent/Makefile
+1-1net-p2p/libtorrent/Makefile
+10-95 files

FreeBSD/ports 509d86dnet/keycloak Makefile distinfo

net/keycloak: Update 26.7.0 => 26.7.1

Release Notes:
https://www.keycloak.org/2026/08/keycloak-2671-released

PR:             297306
Reported by:    Matthias Wolf <freebsd at rheinwolf.de> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
Security:       CVE-2026-9793
Security:       CVE-2026-4629
Security:       CVE-2026-14209
Security:       CVE-2026-14614
Security:       CVE-2026-14615
MFH:            2026Q3

(cherry picked from commit ec0c8827c5e3d6dfb4f33d16d43efa05bfaa348d)
DeltaFile
+3-3net/keycloak/distinfo
+1-1net/keycloak/Makefile
+4-42 files

FreeBSD/ports 64bf22esecurity/vuxml/vuln 2026.xml

security/vuxml: Document net/keycloak vulnerabilities

PR:             297306
Approved by:    osa, vvd (Mentors, implicit)
DeltaFile
+36-0security/vuxml/vuln/2026.xml
+36-01 files

FreeBSD/ports ec0c882net/keycloak Makefile distinfo

net/keycloak: Update 26.7.0 => 26.7.1

Release Notes:
https://www.keycloak.org/2026/08/keycloak-2671-released

PR:             297306
Reported by:    Matthias Wolf <freebsd at rheinwolf.de> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
Security:       CVE-2026-9793
Security:       CVE-2026-4629
Security:       CVE-2026-14209
Security:       CVE-2026-14614
Security:       CVE-2026-14615
MFH:            2026Q3
DeltaFile
+3-3net/keycloak/distinfo
+1-1net/keycloak/Makefile
+4-42 files

FreeBSD/ports bd0796awww/vikunja Makefile distinfo

www/vikunja: Update to 2.5.0
DeltaFile
+7-7www/vikunja/distinfo
+1-1www/vikunja/Makefile
+8-82 files

FreeBSD/ports 14fabebtextproc/py-ufal.udpipe Makefile distinfo

textproc/py-ufal.udpipe: Fix fetch

The tarball was renamed to have _ instead of . in it.

Reported by:    fallout
DeltaFile
+3-3textproc/py-ufal.udpipe/distinfo
+1-0textproc/py-ufal.udpipe/Makefile
+4-32 files

FreeBSD/ports f9cdcf5misc/mcp-inspector distinfo Makefile, misc/mcp-inspector/files package-lock.json

misc/mcp-inspector: update 0.22.0 → 2.1.0
DeltaFile
+7,064-11,181misc/mcp-inspector/pkg-plist
+1,703-2,623misc/mcp-inspector/files/package-lock.json
+6-7misc/mcp-inspector/Makefile
+3-3misc/mcp-inspector/distinfo
+8,776-13,8144 files

FreeBSD/src f93ab58sys/kern link_elf.c

link_elf: Make phdrs first page check actually fatal

Otherwise we'll print an error but carry on regardless, presumably
destined to walk off the end of the mapping.

Reported by:    thebugfixers at pm.me
MFC after:      1 week

(cherry picked from commit 1e39a314d870e312f623199e146eda6bdbc293a3)
DeltaFile
+4-1sys/kern/link_elf.c
+4-11 files

FreeBSD/src 1f62c6fcontrib/llvm-project/libunwind/src UnwindRegistersSave.S

Merge commit 6b0a46958c56 from llvm-project (by Piotr Kubaj):

  [libunwind][PPC64] Fix unw_getcontext corrupting callee-saved VSX registers on LE (#198371)

  This is the first of two independent fixes for libunwind on ppc64le
  (ELFv2 ABI, little-endian), where two separate bugs together cause
  SIGSEGV during backtracing. This commit addresses the VSX register
  corruption; the TOC-restore fault is handled in a follow-up. Both
  were discovered while debugging lang/rust build failures with
  RUST_BACKTRACE=1 on FreeBSD/powerpc64le (IBM POWER9).

  On ppc64le, `unw_getcontext` saves each VS register with an in-place
  `xxswapd n, n` followed by `stxvd2x`. The swap is needed because
  `stxvd2x` stores doublewords in the wrong order on LE. However, the
  macro never applies a second `xxswapd` to restore the register after
  the store, so all 64 VS registers are permanently corrupted on return
  from `unw_getcontext`.

  This affects every callee-saved VSX register: f14-f31 (VSR14-VSR31)

    [13 lines not shown]
DeltaFile
+4-0contrib/llvm-project/libunwind/src/UnwindRegistersSave.S
+4-01 files

FreeBSD/src aa3b768contrib/llvm-project/lld/ELF Thunks.h Thunks.cpp, contrib/llvm-project/lld/ELF/Arch PPC64.cpp PPC.cpp

Merge commit 26bf39cdba0b from llvm-project (by Jessica Clarke):

  [ELF][PowerPC] Don't assume TOC pointer is valid in IPLT entries (#207555)

  Unlike normal PLT entries, IPLT entries can be called indirectly even
  when in PIEs/DSOs, and so there's no guarantee on what's in the TOC
  pointer register at that time. Therefore we must emit variants of the
  existing code that work without it, whether r12-relative (playing the
  same role as MIPS's $25) in the same number of instructions, or first
  retrieving PC in an i386-like manner, being careful not to clobber LR.
  On 32-bit PowerPC even direct calls to IPLT entries face the same issue,
  since we'd use the TOC base of the resolver, which may not be the same
  as the caller, even within the same object.

  Normal canonical PLTs still look broken on 64-bit PowerPC as they use
  the TOC pointer register too, and similarly on 32-bit PowerPC for PIEs.
  We should probably treat these cases the same as PIE on i386 (except
  including PDEs for 64-bit PowerPC), where it's an error due to the use
  of %ebx in PLT entries.

    [9 lines not shown]
DeltaFile
+50-19contrib/llvm-project/lld/ELF/Thunks.cpp
+7-6contrib/llvm-project/lld/ELF/Arch/PPC.cpp
+6-3contrib/llvm-project/lld/ELF/Thunks.h
+3-2contrib/llvm-project/lld/ELF/Arch/PPC64.cpp
+1-1lib/clang/include/lld/Common/Version.inc
+67-315 files

FreeBSD/src f89b849contrib/llvm-project/lld/ELF Thunks.h Thunks.cpp, contrib/llvm-project/lld/ELF/Arch PPC64.cpp

Merge commit cbf48349e3e1 from llvm-project (by Jessica Clarke):

  [NFC][ELF][PPC64] Pass address not offset to writePPC64LoadAndBranch (#212275)

  Every caller currently subtracts the TOC base in its argument, so move
  that into common code inside writePPC64LoadAndBranch. This will also
  allow a different computation to be used in some cases in a future
  commit.

  Note that offset is now unsigned not signed; even previously, all
  arguments were uint64_t, and all uses are unsigned, so making it signed
  doesn't make much sense.

MFC after:      1 week

(cherry picked from commit bcbcd7303009344dc1051e4601284620bca29be8)
DeltaFile
+9-11contrib/llvm-project/lld/ELF/Thunks.cpp
+1-2contrib/llvm-project/lld/ELF/Arch/PPC64.cpp
+1-1contrib/llvm-project/lld/ELF/Thunks.h
+11-143 files

FreeBSD/src 2705320lib/clang/libllvmminimal Makefile

libllvmminimal: Fix building with LLVM < 21 on riscv64

On most architectures we end up not needing ABIBreak.cpp as, although
some of the sources here do reference EnableABIBreakingChecks (or, if
assertions are disabled, DisableABIBreakingChecks) at a source level, we
compile with -ffunction-sections and -fdata-sections, and link with
--gc-sections, and it happens to be the case that all references can be
GC'ed. However, prior to LLVM 21, the RISC-V backend did not apply
-fdata-sections to .sdata, where references to these symbols end up, and
for some files we're building with such references we end up not being
able to GC .sdata due to the other unrelated data in it, meaning that we
do in fact need to build ABIBreak.cpp.

Whilst we could make this conditional on the architecture, it's a tiny
file, and it's a bit fragile to rely on GC behaviour, so just include it
unconditionally.

Reviewed by:    dim, emaste
Fixes:          770cf0a5f02d ("Fixups after llvm-project main llvmorg-21-init-19288-gface93e724f4 merge")

    [4 lines not shown]
DeltaFile
+1-1lib/clang/libllvmminimal/Makefile
+1-11 files

FreeBSD/src 6454c6elib/clang/include/llvm/Config config.h

lib/clang: Fix bootstrapping on macOS after LLVM 21 merge

Fixes:          770cf0a5f02d ("Fixups after llvm-project main llvmorg-21-init-19288-gface93e724f4 merge")
MFC after:      1 month

(cherry picked from commit 50bd6ee0cce9d3959828b0267b06ea0403781f41)
DeltaFile
+2-2lib/clang/include/llvm/Config/config.h
+2-21 files

FreeBSD/src 9facb18sys/kern link_elf.c

link_elf: Make phdrs first page check actually fatal

Otherwise we'll print an error but carry on regardless, presumably
destined to walk off the end of the mapping.

Reported by:    thebugfixers at pm.me
MFC after:      1 week

(cherry picked from commit 1e39a314d870e312f623199e146eda6bdbc293a3)
DeltaFile
+4-1sys/kern/link_elf.c
+4-11 files

FreeBSD/src ac26e70contrib/llvm-project/libunwind/src UnwindRegistersSave.S

Merge commit 6b0a46958c56 from llvm-project (by Piotr Kubaj):

  [libunwind][PPC64] Fix unw_getcontext corrupting callee-saved VSX registers on LE (#198371)

  This is the first of two independent fixes for libunwind on ppc64le
  (ELFv2 ABI, little-endian), where two separate bugs together cause
  SIGSEGV during backtracing. This commit addresses the VSX register
  corruption; the TOC-restore fault is handled in a follow-up. Both
  were discovered while debugging lang/rust build failures with
  RUST_BACKTRACE=1 on FreeBSD/powerpc64le (IBM POWER9).

  On ppc64le, `unw_getcontext` saves each VS register with an in-place
  `xxswapd n, n` followed by `stxvd2x`. The swap is needed because
  `stxvd2x` stores doublewords in the wrong order on LE. However, the
  macro never applies a second `xxswapd` to restore the register after
  the store, so all 64 VS registers are permanently corrupted on return
  from `unw_getcontext`.

  This affects every callee-saved VSX register: f14-f31 (VSR14-VSR31)

    [13 lines not shown]
DeltaFile
+4-0contrib/llvm-project/libunwind/src/UnwindRegistersSave.S
+4-01 files

FreeBSD/src 310a5a9contrib/llvm-project/lld/ELF Thunks.h Thunks.cpp, contrib/llvm-project/lld/ELF/Arch PPC64.cpp PPC.cpp

Merge commit 26bf39cdba0b from llvm-project (by Jessica Clarke):

  [ELF][PowerPC] Don't assume TOC pointer is valid in IPLT entries (#207555)

  Unlike normal PLT entries, IPLT entries can be called indirectly even
  when in PIEs/DSOs, and so there's no guarantee on what's in the TOC
  pointer register at that time. Therefore we must emit variants of the
  existing code that work without it, whether r12-relative (playing the
  same role as MIPS's $25) in the same number of instructions, or first
  retrieving PC in an i386-like manner, being careful not to clobber LR.
  On 32-bit PowerPC even direct calls to IPLT entries face the same issue,
  since we'd use the TOC base of the resolver, which may not be the same
  as the caller, even within the same object.

  Normal canonical PLTs still look broken on 64-bit PowerPC as they use
  the TOC pointer register too, and similarly on 32-bit PowerPC for PIEs.
  We should probably treat these cases the same as PIE on i386 (except
  including PDEs for 64-bit PowerPC), where it's an error due to the use
  of %ebx in PLT entries.

    [9 lines not shown]
DeltaFile
+50-19contrib/llvm-project/lld/ELF/Thunks.cpp
+7-6contrib/llvm-project/lld/ELF/Arch/PPC.cpp
+6-3contrib/llvm-project/lld/ELF/Thunks.h
+3-2contrib/llvm-project/lld/ELF/Arch/PPC64.cpp
+1-1lib/clang/include/lld/Common/Version.inc
+67-315 files

FreeBSD/src 6184b31sys/arm64/vmm/io vgic_v3.c

arm64/vmm: Fix vgic_v3 dropping EOI for disabled IRQs

Now that IRQs can properly be disabled by GICD_ICENABLERn, an EOI for a
disabled IRQ ends up being lost, since we don't assign it to a list
register and don't enable maintenance interrupts for such cases. As a
result, we keep the IRQ active, which stops it from ever being delivered
again (which would be true even if we supported the active and pending
state). Keep disabled but active IRQs around in list registers so we can
see the EOI having taken place in a future sync (noting that since we
already don't create list registers in active and pending state there
are no concerns with causing a disabled IRQ to be delivered).

Fixes:          47e073941f4e ("Import the kernel parts of bhyve/arm64")
MFC after:      1 week

(cherry picked from commit 123dfd378959aecc97cfc1d9b457453194d6f25b)
DeltaFile
+7-1sys/arm64/vmm/io/vgic_v3.c
+7-11 files