FreeBSD/src 4cd93dfsys/kern kern_prot.c, sys/sys syscallsubr.h

setcred(): Remove an optimization for when cr_groups[0] was the egid

Because setcred() has (always) treated the effective GID separately from
the supplementary groups, when cr_groups[0] was storing the effective
GID, it internally needed to build an array containing both the
effective GID and the specified supplementary groups to eventually call
crsetgroups_internal().

As kern_setcred() was only used to actually implement
user_setcred()/sys_setcred(), which need to allocate a buffer to copy in
the userland groups array into, some optimization was put in place where
these would allocate an array with one more element than
'wc_supp_groups', copyin() the latter into the subarray starting at
index 1 and pass the pointer to the whole array to kern_setcred() in
'preallocated_groups'.  This would allow kern_setcred() not to have to
allocate memory again to make room for the additional effective GID.

Since commit be1f7435ef21 ("kern: start tracking cr_gid outside of
cr_groups[]"), crsetgroups_internal() only takes supplementary groups,

    [8 lines not shown]
DeltaFile
+47-69sys/kern/kern_prot.c
+1-1sys/sys/syscallsubr.h
+48-702 files

FreeBSD/src b92b1b4usr.bin/mdo mdo.c

mdo(1): Avoid calling getgroups() in some unnecessary cases

If the basis for supplementary groups are the current ones, we do not
need to fetch them when they are to be replaced entirely (which we
already have been doing), as in the '!start_from_current_groups' case,
but specifically also when they are not going to be touched at all.

This change in passing makes the modified code block's comment saying
that SETCREDF_SUPP_GROUPS need not be set here correct.

MFC after:      2 weeks
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D53771
DeltaFile
+8-2usr.bin/mdo/mdo.c
+8-21 files

FreeBSD/src ff3c48asys/netpfil/ipfw ip_fw2.c

ipfw: fix lookup dst-ip opcode

Opcode handling should not fall through to the LOOKUP_DSCP type.

Reviewed by:    melifaro
Obtained from:  Yandex LLC
Differential Revision:  https://reviews.freebsd.org/D53775

(cherry picked from commit 8012c61bef3bb19a48d8459b38b65e27d46c186c)
DeltaFile
+2-2sys/netpfil/ipfw/ip_fw2.c
+2-21 files

FreeBSD/doc 154bef0documentation/content/en/books/accessibility/blindness _index.adoc, documentation/content/en/books/accessibility/colors _index.adoc

handbooks: Add Accessibility Handbook

The Accessibility Handbook describes the assistive technologies
available in the base system and in the Ports Collection.
Currently, it covers features useful for visual impairments.

Reviewed by:            pauamma_gundo.com
Approved by:            carlavilla
Sponsored by:           The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D50894
DeltaFile
+490-0documentation/content/en/books/accessibility/colors/_index.adoc
+393-0documentation/content/en/books/accessibility/lowvision/_index.adoc
+344-0documentation/content/en/books/accessibility/virtual-terminal/_index.adoc
+320-0documentation/content/en/books/accessibility/blindness/_index.adoc
+193-0documentation/content/en/books/accessibility/development/_index.adoc
+92-0documentation/content/en/books/accessibility/preface/_index.adoc
+1,832-05 files not shown
+2,111-011 files

FreeBSD/doc 02a22b0website/content/ru privacy.adoc, website/content/ru/security reporting.adoc unsupported.adoc

website: add translation of missing pages

Reviewed by: andy
Differential Revision: https://reviews.freebsd.org/D53794
DeltaFile
+86-0website/content/ru/privacy.adoc
+72-0website/content/ru/security/reporting.adoc
+69-0website/content/ru/security/unsupported.adoc
+51-0website/content/ru/srcmgr/charter.adoc
+42-0website/content/ru/security/charter.adoc
+24-0website/content/ru/srcmgr/_index.adoc
+344-01 files not shown
+356-07 files

FreeBSD/doc 0ffc183website/content/en/cgi man.cgi

update macOS 10.15.x
DeltaFile
+1-1website/content/en/cgi/man.cgi
+1-11 files

FreeBSD/ports 4209a59www/firefox distinfo Makefile

www/firefox: update to 145.0.2 (rc1)

(cherry picked from commit df3bd1e3c5f65f1b224f77a8433d7249932dbf4a)
DeltaFile
+3-3www/firefox/distinfo
+1-1www/firefox/Makefile
+4-42 files

FreeBSD/ports df3bd1ewww/firefox distinfo Makefile

www/firefox: update to 145.0.2 (rc1)
DeltaFile
+3-3www/firefox/distinfo
+1-2www/firefox/Makefile
+4-52 files

FreeBSD/ports c0a8c05lang/rust-nightly distinfo Makefile

lang/rust-nightly: update 1.93.0.20251109 → 1.93.0.20251123

Approved by:    rust (implicit)
DeltaFile
+3-3lang/rust-nightly/distinfo
+1-1lang/rust-nightly/Makefile
+4-42 files

FreeBSD/src 7b6644esys/dev/irdma irdma_hw.c irdma_cm.c

irdma(4): fix potential memory leak on qhash cqp operation

It was found that in some circumstances when launching
non-waiting create qhash cqp operation the refcount on
the cqp_request may be not properly decremented leading to a memory
leak.

Signed-off-by: Bartosz Sobczak <bartosz.sobczak at intel.com>

Reviewed by:    anzhu_netapp.com
Tested by:      mateusz.moga_intel.com
Approved by:    kbowling (mentor)
MFC after:      1 week
Sponsored by:   Intel Corporation
Differential Revision:  https://reviews.freebsd.org/D53732
DeltaFile
+108-24sys/dev/irdma/irdma_hw.c
+2-36sys/dev/irdma/irdma_cm.c
+2-2sys/dev/irdma/icrdma.c
+2-1sys/dev/irdma/irdma_main.h
+114-634 files

FreeBSD/src d78231esys/dev/cxgbe/common t4_msg.h

cxgbe: Fix the RSS build

When "options RSS" is configured, opt_rss.h defines the "RSS" token.

PR:     291068
Fixes:  17b4a0acfaf5 ("cxgbe(4): T7 related updates to shared code")
DeltaFile
+1-1sys/dev/cxgbe/common/t4_msg.h
+1-11 files

FreeBSD/ports e6e1219misc/claude-code distinfo Makefile

misc/claude-code: update 2.0.42 → 2.0.50
DeltaFile
+3-3misc/claude-code/distinfo
+1-1misc/claude-code/Makefile
+4-42 files

FreeBSD/ports 1d2e67fdevel/cargo-deny distinfo Makefile

devel/cargo-deny: update 0.18.5 → 0.18.6
DeltaFile
+365-381devel/cargo-deny/distinfo
+183-192devel/cargo-deny/Makefile
+548-5732 files

FreeBSD/ports d7692d2net/mvfst pkg-plist distinfo

net/mvfst: update 2025.11.17.00 → 2025.11.24.00
DeltaFile
+0-12net/mvfst/pkg-plist
+3-3net/mvfst/distinfo
+1-1net/mvfst/Makefile
+4-163 files

FreeBSD/ports 2b14653net/fb303 distinfo Makefile

net/fb303: update 2025.11.17.00 → 2025.11.24.00
DeltaFile
+3-3net/fb303/distinfo
+1-1net/fb303/Makefile
+4-42 files

FreeBSD/ports 8938892www/proxygen distinfo Makefile

www/proxygen: update 2025.11.17.00 → 2025.11.24.00
DeltaFile
+3-3www/proxygen/distinfo
+1-1www/proxygen/Makefile
+4-42 files

FreeBSD/ports 77ed2c4devel/folly distinfo Makefile

devel/folly: update 2025.11.17.00 → 2025.11.24.00
DeltaFile
+3-3devel/folly/distinfo
+1-1devel/folly/Makefile
+1-0devel/folly/pkg-plist
+5-43 files

FreeBSD/ports a046ef6devel/fatal distinfo Makefile

devel/fatal: update 2025.11.17.00 → 2025.11.24.00
DeltaFile
+3-3devel/fatal/distinfo
+1-1devel/fatal/Makefile
+4-42 files

FreeBSD/ports ecfba18math/lean4 pkg-plist Makefile, math/lean4/files patch-stage0_src_CMakeLists.txt patch-src_CMakeLists.txt

math/lean4: update 4.23.0 → 4.25.1
DeltaFile
+1,525-288math/lean4/pkg-plist
+15-4math/lean4/Makefile
+14-3math/lean4/files/patch-stage0_src_CMakeLists.txt
+14-3math/lean4/files/patch-src_CMakeLists.txt
+11-0math/lean4/files/patch-src_shell_CMakeLists.txt
+11-0math/lean4/files/patch-stage0_src_shell_CMakeLists.txt
+1,590-2983 files not shown
+1,603-3099 files

FreeBSD/ports 0ec94f8devel/fbthrift distinfo pkg-plist

devel/fbthrift: update 2025.11.17.00 → 2025.11.24.00
DeltaFile
+3-3devel/fbthrift/distinfo
+6-0devel/fbthrift/pkg-plist
+1-1devel/fbthrift/Makefile
+10-43 files

FreeBSD/ports ea455d5net/wangle distinfo Makefile

net/wangle: update 2025.11.17.00 → 2025.11.24.00
DeltaFile
+3-3net/wangle/distinfo
+1-1net/wangle/Makefile
+4-42 files

FreeBSD/ports 8895794security/fizz distinfo Makefile

security/fizz: update 2025.11.17.00 → 2025.11.24.00
DeltaFile
+3-3security/fizz/distinfo
+1-1security/fizz/Makefile
+4-42 files

FreeBSD/ports 69c8a95devel/gitleaks distinfo Makefile

devel/gitleaks: update 8.29.0 → 8.29.1
DeltaFile
+7-7devel/gitleaks/distinfo
+2-2devel/gitleaks/Makefile
+9-92 files

FreeBSD/src 72a447dsys/vm vm_object.c

vm_object_page_remove(): clear pager even if there is no resident pages

Swap pager might still carry the data.

Debugging help from:    mmel
Reviewed by:    alc
Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Differential revision:  https://reviews.freebsd.org/D53891
DeltaFile
+2-1sys/vm/vm_object.c
+2-11 files

FreeBSD/doc 6fd23a9documentation/content/en/books/porters-handbook/uses _index.adoc

[phb][Uses]: Add Uses=sudo
DeltaFile
+7-0documentation/content/en/books/porters-handbook/uses/_index.adoc
+7-01 files

FreeBSD/src 91e2d7bsys/conf newvers.sh

15.0: Update to RC4

This will hopefully be the final RC build before the release.

Approved by:    re (implicit)
DeltaFile
+1-1sys/conf/newvers.sh
+1-11 files

FreeBSD/src 76883b7sys/kern vfs_inotify.c

inotify: Work around the vput() bug directly

For 15.0, apply a minimal fix which at least ensures that inotify can't
trigger the latent race described in commit 99cb3dca4773 ("vnode: Rework
vput() to avoid holding the vnode lock after decrementing").

Approved by:    re (cperciva)
Reviewed by:    olce, kib
MFC after:      3 days
Differential Revision:  https://reviews.freebsd.org/D53774

(cherry picked from commit ebc17879f0885ca87644980f6275b9759b311eb3)
(cherry picked from commit 1f6e3abf41718e8e4a309be122f0a6048e9c5772)
DeltaFile
+8-1sys/kern/vfs_inotify.c
+8-11 files

FreeBSD/ports c3eb8b8databases/cego distinfo Makefile, devel/lfcbase distinfo Makefile

devel/lfcbase: 1.22.3 -> 1.22.4, databases/cego: 2.52.43 -> 2.52.44

- Warning elimination for G++ based compiles
DeltaFile
+3-3devel/lfcbase/distinfo
+3-3databases/cego/distinfo
+1-1devel/lfcbase/Makefile
+1-1databases/cego/Makefile
+8-84 files

FreeBSD/ports 2353e6cmultimedia/vlc Makefile, multimedia/vlc/files vlc-3.0.21-fedora_ffmpeg7-1.patch vlc-3.0.21-ffmpeg8-1.patch

multimedia/vlc: fix build with ffmpeg8

Incorporate patches to fix build with ffmpeg 7 and 8

PR:             289056
Obtained from:  Linux From Scatch
DeltaFile
+1,139-0multimedia/vlc/files/vlc-3.0.21-fedora_ffmpeg7-1.patch
+393-0multimedia/vlc/files/vlc-3.0.21-ffmpeg8-1.patch
+3-0multimedia/vlc/Makefile
+1,535-03 files

FreeBSD/src 8a766c9sys/dev/nvme nvme.h

nvme: Fix some comments

Tweak a couple of comments and fix a spelling error.

Sponsored by:           Netflix
DeltaFile
+2-3sys/dev/nvme/nvme.h
+2-31 files