FreeBSD/src 6de8182sys/dev/netmap netmap_freebsd.c

netmap: Fix a race in kqueue registration

We need to acquire the netmap global lock earlier, to avoid racing with
the NETMAP_REQ_REGISTER ioctl handler.

Reported by:    syzkaller
Reviewed by:    vmaffione
MFC after:      2 weeks
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D58677
DeltaFile
+6-6sys/dev/netmap/netmap_freebsd.c
+6-61 files

FreeBSD/src 319414asys/dev/netmap netmap_mem2.c

netmap: Handle overflow when computing ring sizes

PR:             297300
Reported by:    Robert Morris
Reported by:    syzkaller
Reviewed by:    vmaffione
MFC after:      2 weeks
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D58678
DeltaFile
+18-4sys/dev/netmap/netmap_mem2.c
+18-41 files

FreeBSD/src 800d5b7sys/dev/netmap netmap_kern.h netmap_vale.c

netmap: Fix driver name handling

if_initname() requires the caller to ensure that the lifetime of the
interface's name buffer contains that of the ifnet itself.
netmap_vi_create() wasn't respecting that; we were instead passing the
stack-allocated buffer provided by the ioctl handler.

While here, add a check to avoid assuming that the caller-provided
buffer is nul-terminated.

Reported by:    syzkaller
Reviewed by:    vmaffione
MFC after:      2 weeks
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D58676
DeltaFile
+18-6sys/dev/netmap/netmap_vale.c
+3-0sys/dev/netmap/netmap_kern.h
+21-62 files

FreeBSD/ports d7b285fmath/octave-forge-datatypes Makefile distinfo

math/octave-forge-datatypes: Update to 1.3.1.
DeltaFile
+3-3math/octave-forge-datatypes/distinfo
+1-1math/octave-forge-datatypes/Makefile
+4-42 files

FreeBSD/src 51f5623sys/geom/zero g_zero.c

geom_zero(4): reset the uio vector on each uiomove()

PR:     297062

(cherry picked from commit 34ca5a9e7362b0c820fe339daa2b8d06c58b6fea)
DeltaFile
+6-5sys/geom/zero/g_zero.c
+6-51 files

FreeBSD/src f68ca7crelease/pkg_repos release-dvd.conf, release/scripts pkg-stage.sh

Revert "release: Ship firmware from kmods repo on DVD"

This was a good idea, but we don't build metapackages in the kmods
repo so it ends up breaking the release build.  I might resurrect this
change if/when the kmods repo includes the wifi-firmware-kmod
metapackage.

This reverts commit bda8028146694ee490543b35e3349e060936fde4.

MFC after:      1 second
Approved by:    re (cperciva)

(cherry picked from commit ca0cff79320d49d3f10bd3aa3c472fa450a5c494)
(cherry picked from commit daf81f32f834f8619dceca745758983ccc767866)
DeltaFile
+7-18release/scripts/pkg-stage.sh
+0-7release/pkg_repos/release-dvd.conf
+7-252 files

FreeBSD/src daf81f3release/pkg_repos release-dvd.conf, release/scripts pkg-stage.sh

Revert "release: Ship firmware from kmods repo on DVD"

This was a good idea, but we don't build metapackages in the kmods
repo so it ends up breaking the release build.  I might resurrect this
change if/when the kmods repo includes the wifi-firmware-kmod
metapackage.

This reverts commit bda8028146694ee490543b35e3349e060936fde4.

MFC after:      1 second

(cherry picked from commit ca0cff79320d49d3f10bd3aa3c472fa450a5c494)
DeltaFile
+7-18release/scripts/pkg-stage.sh
+0-7release/pkg_repos/release-dvd.conf
+7-252 files

FreeBSD/src fdd93a3release/pkg_repos release-dvd.conf, release/scripts pkg-stage.sh

Revert "release: Ship firmware from kmods repo on DVD"

This was a good idea, but we don't build metapackages in the kmods
repo so it ends up breaking the release build.  I might resurrect this
change if/when the kmods repo includes the wifi-firmware-kmod
metapackage.

This reverts commit bda8028146694ee490543b35e3349e060936fde4.

MFC after:      1 second

(cherry picked from commit ca0cff79320d49d3f10bd3aa3c472fa450a5c494)
DeltaFile
+7-18release/scripts/pkg-stage.sh
+0-7release/pkg_repos/release-dvd.conf
+7-252 files

FreeBSD/src ca0cff7release/pkg_repos release-dvd.conf, release/scripts pkg-stage.sh

Revert "release: Ship firmware from kmods repo on DVD"

This was a good idea, but we don't build metapackages in the kmods
repo so it ends up breaking the release build.  I might resurrect this
change if/when the kmods repo includes the wifi-firmware-kmod
metapackage.

This reverts commit bda8028146694ee490543b35e3349e060936fde4.

MFC after:      1 second
DeltaFile
+7-18release/scripts/pkg-stage.sh
+0-7release/pkg_repos/release-dvd.conf
+7-252 files

FreeBSD/src 2d25276lib/libifconfig libifconfig.c, sys/net rtsock.c

sys/socket.h: Fix AF_MAX

AF_MAX was always intended to be one more than the greatest allocated
value.  Jeff broke this in 2013.  Unfortunately, a bunch of people then
decided to adapt to the mistake instead of correcting it.

Fixes:          863c7e45628d (" - Reserve a special AF for SDP.  The one we were incorrectly using before    was taken by another AF.")
MFC after:      3 days
Sponsored by:   Klara, Inc.
Sponsored by:   NetApp, Inc.
Reviewed by:    kevans, glebius
Differential Revision:  https://reviews.freebsd.org/D58597

(cherry picked from commit ddd850aa7720f77b6605599655df898b16ed74cc)
DeltaFile
+3-3sys/netlink/route/rt.c
+2-2sys/net/rtsock.c
+2-2sys/net/route/route_helpers.c
+2-2lib/libifconfig/libifconfig.c
+3-1sys/sys/socket.h
+1-1sys/net/route/route_ddb.c
+13-113 files not shown
+16-149 files

FreeBSD/src 7d8fc2asys/sys mbuf.h

mbuf: Parenthesize macro arguments

MFC after:      1 week
Sponsored by:   Klara, Inc.
Sponsored by:   NetApp, Inc.

(cherry picked from commit 744cc514567d33d38986f0ff7de009f786acc180)
DeltaFile
+1-1sys/sys/mbuf.h
+1-11 files

FreeBSD/src c0f8920lib/libifconfig libifconfig.c, sys/net rtsock.c

sys/socket.h: Fix AF_MAX

AF_MAX was always intended to be one more than the greatest allocated
value.  Jeff broke this in 2013.  Unfortunately, a bunch of people then
decided to adapt to the mistake instead of correcting it.

Fixes:          863c7e45628d (" - Reserve a special AF for SDP.  The one we were incorrectly using before    was taken by another AF.")
MFC after:      3 days
Sponsored by:   Klara, Inc.
Sponsored by:   NetApp, Inc.
Reviewed by:    kevans, glebius
Differential Revision:  https://reviews.freebsd.org/D58597

(cherry picked from commit ddd850aa7720f77b6605599655df898b16ed74cc)
DeltaFile
+3-3sys/netlink/route/rt.c
+2-2sys/net/rtsock.c
+2-2sys/net/route/route_helpers.c
+2-2lib/libifconfig/libifconfig.c
+3-1sys/sys/socket.h
+1-1sys/net/route/route_ddb.c
+13-113 files not shown
+16-149 files

FreeBSD/src bcee81bsys/sys mbuf.h

mbuf: Parenthesize macro arguments

MFC after:      1 week
Sponsored by:   Klara, Inc.
Sponsored by:   NetApp, Inc.

(cherry picked from commit 744cc514567d33d38986f0ff7de009f786acc180)
DeltaFile
+1-1sys/sys/mbuf.h
+1-11 files

FreeBSD/ports eb310c0x11-fonts/libXfont2 Makefile distinfo

x11-fonts/libXfont2: Update to 2.0.9

https://lists.x.org/archives/xorg-announce/2026-August/003735.html

PR:             297327
Approved by:    x11 (arrowd)
Approved by:    osa (mentor)
MFH:            2026Q3
Security:       CVE-2026-59679
Security:       CVE-2026-44950

(cherry picked from commit ec33b51dcfd9b4fb7591b35af75d9c37b9fbbb7e)
DeltaFile
+3-3x11-fonts/libXfont2/distinfo
+1-1x11-fonts/libXfont2/Makefile
+4-42 files

FreeBSD/ports ec33b51x11-fonts/libXfont2 Makefile distinfo

x11-fonts/libXfont2: Update to 2.0.9

https://lists.x.org/archives/xorg-announce/2026-August/003735.html

PR:             297327
Approved by:    x11 (arrowd)
Approved by:    osa (mentor)
MFH:            2026Q3
Security:       CVE-2026-59679
Security:       CVE-2026-44950
DeltaFile
+3-3x11-fonts/libXfont2/distinfo
+1-1x11-fonts/libXfont2/Makefile
+4-42 files

FreeBSD/ports f787f85x11-fonts/font-mutt-misc distinfo pkg-descr

x11-fonts/font-mutt-misc: Update to 1.0.4

Update WWW and pkg-descr.
Add LICENSE.

https://lists.x.org/archives/xorg-announce/2023-February/003364.html

PR:             297305
Approved by:    x11 (arrowd)
Approved by:    osa (mentor)
DeltaFile
+5-5x11-fonts/font-mutt-misc/Makefile
+3-2x11-fonts/font-mutt-misc/distinfo
+4-1x11-fonts/font-mutt-misc/pkg-descr
+12-83 files

FreeBSD/ports 0827909net-mgmt/thanos Makefile distinfo

net-mgmt/thanos: Update 0.42.2 => 0.42.4

Approved by:            db@, yuri@ (Mentors, implicit)
DeltaFile
+5-5net-mgmt/thanos/distinfo
+2-2net-mgmt/thanos/Makefile
+7-72 files

FreeBSD/src 8ce50d7lib/libc/stdbit stdc_first_leading_zero.3, lib/libc/stdlib memalignment.3

manuals: Fix more Fx and nearby mechanical typos

Fix compiler warnings related to the Fx macro, as well as all other
mechanical typos that were visible within one screenful of them. These
cause rendering glitches on various toolchains with various of the five
and a half decades of rich output formats and tooling manpages scale to.

The *x macro set specifies operating systems. These macros take the rest
of the line as an argument. Sometimes, a space was not used to separate
the argument of Fx and the trailing period. Others had other parts of
the sentence supplied as an argument to Fx.

While here, fix the other mechanical typos visible on those specific
screenfulls. Correct section typo AUTHOR to AUTHORS, markup utilities
with Sy, and apply line break after the end of a sentence.

PR:             297248
MFC after:      3 days
Reported by:    wosch (are you sure that's all of the broken Fx'es?)

    [7 lines not shown]
DeltaFile
+11-5share/man/man5/pf.conf.5
+2-2lib/libc/stdlib/memalignment.3
+2-1sbin/route/route.8
+1-1lib/libc/stdbit/stdc_first_leading_zero.3
+16-94 files

FreeBSD/src 6e8f4f4lib/libc/stdbit stdc_trailing_zeros.3 stdc_trailing_ones.3, share/man/man3 stdbit.3

manuals: Fix Fx and nearby mechanical typos

Fix compiler warnings related to the Fx macro, as well as all other
mechanical typos that were visible within one screenful of them. These
cause rendering glitches on various toolchains with various of the five
and a half decades of rich output formats and tooling manpages scale to.

The *x macro set specifies operating systems. These macros take the rest
of the line as an argument. Sometimes, a space was not used to separate
the argument of Fx and the trailing period. Another, FreeBSD Foundation
was misrepresented as an operating system version instead of an author.
Two more had other parts of the sentence supplied as an argument to Fx.

While I had those open, fix the other mechancial typos visible on those
specific screenfulls. Fix a list width glitch, correct section typo
AUTHOR to AUTHORS, and switch AUTHORS sections containing prose to
prose-mode so that they wrap freely when rendered.

PR:             297248

    [7 lines not shown]
DeltaFile
+6-3usr.bin/ipcrm/ipcrm.1
+3-2usr.bin/elfctl/elfctl.1
+2-2share/man/man3/stdbit.3
+2-2lib/libc/stdbit/stdc_trailing_zeros.3
+2-2lib/libc/stdbit/stdc_trailing_ones.3
+2-2lib/libc/stdbit/stdc_leading_zeros.3
+17-1317 files not shown
+48-4023 files

FreeBSD/src aea4240sys/dev/ixgbe ixgbe_sriov.h if_ix.c

ixgbe: Quiesce VFs across PF reset

Stop VF transmit and receive in hardware, clear PF-side mailbox CTS,
and notify active VFs before resetting a PF. A PF reset invalidates VF
queue state, so the no-CTS control message makes cooperative VFs
discard stale state and renegotiate after the PF returns.

The hardware queue gates synchronously prevent further VF DMA. Do not
hold the exclusive iflib context lock for a fixed VF-watchdog interval
after the reset. Report the PF link transition directly instead of
dispatching mailbox work from the stop path, which could otherwise
re-enable VF I/O mid-reset.

The CTS, PF-control, and VF queue controls follow the reset mechanisms
used by DPDK.

MFC after:      2 weeks
DeltaFile
+34-0sys/dev/ixgbe/if_sriov.c
+9-2sys/dev/ixgbe/if_ix.c
+2-0sys/dev/ixgbe/ixgbe_sriov.h
+45-23 files

FreeBSD/src 2a803e6sys/dev/ixgbe if_sriov.c

ixgbe: Use PF MTU for 82599 VF jumbo policy

The shared maximum frame size is raised by VF LPE requests, so it
cannot describe the PF MTU when enforcing the 82599 PF/VF jumbo
restriction. Consult the PF ifnet MTU instead.

Also correct the API 1.1 and later comparison so a jumbo VF is enabled
when, and only when, the PF itself uses a jumbo MTU. This matches the
policy implemented by DPDK.

MFC after:      2 weeks
DeltaFile
+9-6sys/dev/ixgbe/if_sriov.c
+9-61 files

FreeBSD/src d025b84sys/dev/ixgbe if_ix.c

ixgbe: Apply the 82599 D3 link workaround only for D3

ixgbe_stop_mac_link_on_d3_82599() implements the workaround for
82599 erratum 33.  It forces incompatible auto-negotiation settings
before the device enters D3, and reset clears them when returning to
D0.

ixgbe_if_stop() is also used for ordinary interface reconfiguration
and recovery.  Those paths do not enter D3 and should not program
this power-management workaround.  They continue to stop the adapter
and disable the transmit laser.

Move the call to ixgbe_setup_low_power_mode(), after
ixgbe_if_stop().  This preserves the required ordering for detach,
shutdown, and suspend while avoiding the D3 settings during ordinary
restarts.

MFC after:      2 weeks
DeltaFile
+4-2sys/dev/ixgbe/if_ix.c
+4-21 files

FreeBSD/ports eecfa3ddns/powerdns-recursor Makefile distinfo

dns/powernds-recursor: Update 5.4.4 => 5.4.5

Changelog:
https://doc.powerdns.com/recursor/changelog/5.4.html#change-5.4.5

PR:             297322
Reported by:    Jordan Ostreff <jordan at ostreff.info> (author)
Approved by:    Ralf van der Enden <tremere at cainites.net> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
Security:       CVE-2026-52682
MFH:            2026Q3

(cherry picked from commit a834950d9494a6ee6308bd2a4be86d7f3a948e77)
DeltaFile
+3-3dns/powerdns-recursor/distinfo
+1-1dns/powerdns-recursor/Makefile
+4-42 files

FreeBSD/ports 39d8e4bdns/powerdns Makefile distinfo

dns/powernds: Update 5.1.3 => 5.1.4

Changelog:
https://doc.powerdns.com/authoritative/changelog/5.1.html#change-5.1.4

PR:             297321
Reported by:    Jordan Ostreff <jordan at ostreff.info> (author)
Approved by:    Ralf van der Enden <tremere at cainites.net> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
Security:       CVE-2026-52682
MFH:            2026Q3

(cherry picked from commit c8c63f720ce898f80455f83e464d63087c9e8d67)
DeltaFile
+3-3dns/powerdns/distinfo
+1-2dns/powerdns/Makefile
+4-52 files

FreeBSD/ports 85f0748dns/dnsdist Makefile distinfo

dns/dnsdist: Update 2.1.0 => 2.1.1

Changelog:
https://www.dnsdist.org/changelog.html#change-2.1.1

PR:             297320
Reported by:    Jordan Ostreff <jordan at ostreff.info> (author)
Approved by:    Ralf van der Enden <tremere at cainites.net> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
Security:       CVE-2026-52682
MFH:            2026Q3

(cherry picked from commit 90e1f4484a98ebdebe8ba9d5afdeb99328644b8e)
DeltaFile
+3-3dns/dnsdist/distinfo
+1-1dns/dnsdist/Makefile
+4-42 files

FreeBSD/ports 3673e1fdns/dnsdist pkg-plist Makefile, dns/dnsdist/files dnsdist.conf.sample patch-dnsdist-configuration-yaml.cc

dns/dnsdist: Update to 2.1.0

Changelog: https://www.dnsdist.org/changelog.html#change-2.1.0

PR:             296456
Reported by:    Jordan Ostreff <jordan at ostreff.info> (initial patch),
                Ralf van der Enden <tremere at cainites.net> (maintainer, committed patch)

(cherry picked from commit d4dec80c2c0412548c8a7cbd137862df0193aa08)
DeltaFile
+59-73dns/dnsdist/distinfo
+28-35dns/dnsdist/Makefile.crates
+0-11dns/dnsdist/files/patch-dnsdist-configuration-yaml.cc
+0-6dns/dnsdist/files/dnsdist.conf.sample
+2-2dns/dnsdist/Makefile
+1-0dns/dnsdist/pkg-plist
+90-1276 files

FreeBSD/ports 5279fcbsecurity/vuxml/vuln 2026.xml

security/vuxml: Document dns/{dnsdist,powerdns,powerdns-recursor} vulnerability

PR:             297320, 297321, 297322
Approved by:    osa, vvd (Mentors, implicit)
DeltaFile
+33-0security/vuxml/vuln/2026.xml
+33-01 files

FreeBSD/ports a834950dns/powerdns-recursor Makefile distinfo

dns/powernds-recursor: Update 5.4.4 => 5.4.5

Changelog:
https://doc.powerdns.com/recursor/changelog/5.4.html#change-5.4.5

PR:             297322
Reported by:    Jordan Ostreff <jordan at ostreff.info> (author)
Approved by:    Ralf van der Enden <tremere at cainites.net> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
Security:       CVE-2026-52682
MFH:            2026Q3
DeltaFile
+3-3dns/powerdns-recursor/distinfo
+1-1dns/powerdns-recursor/Makefile
+4-42 files

FreeBSD/ports c8c63f7dns/powerdns Makefile distinfo

dns/powernds: Update 5.1.3 => 5.1.4

Changelog:
https://doc.powerdns.com/authoritative/changelog/5.1.html#change-5.1.4

PR:             297321
Reported by:    Jordan Ostreff <jordan at ostreff.info> (author)
Approved by:    Ralf van der Enden <tremere at cainites.net> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
Security:       CVE-2026-52682
MFH:            2026Q3
DeltaFile
+3-3dns/powerdns/distinfo
+1-2dns/powerdns/Makefile
+4-52 files

FreeBSD/ports 90e1f44dns/dnsdist Makefile distinfo

dns/dnsdist: Update 2.1.0 => 2.1.1

Changelog:
https://www.dnsdist.org/changelog.html#change-2.1.1

PR:             297320
Reported by:    Jordan Ostreff <jordan at ostreff.info> (author)
Approved by:    Ralf van der Enden <tremere at cainites.net> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
Security:       CVE-2026-52682
MFH:            2026Q3
DeltaFile
+3-3dns/dnsdist/distinfo
+1-2dns/dnsdist/Makefile
+4-52 files