HardenedBSD/ports c306abd — audio/lmms pkg-plist, net-im/linux-discord pkg-plist

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+3,161-0audio/lmms/pkg-plist
+1,412-0net-im/linux-discord/pkg-plist
+123-127sysutils/choria/distinfo
+119-117sysutils/choria/files/patch-vendor_modules.txt
+155-0security/vuxml/vuln/2026.xml
+61-63sysutils/choria/Makefile
+5,031-30777 files not shown
+5,591-52683 files

HardenedBSD/ports a70a237 — editors/vscode Makefile Makefile.version, editors/vscode/files product.json.extensions

editors/vscode: Update to 1.143.1

While here, update product.json for popular extensions. [1]

Changelog: https://code.visualstudio.com/updates/v1_143

Reported by:    GitHub (watch releases)
Obtained from:  https://github.com/VSCodium/vscodium/blob/1.143.17183/product.json [1]
DeltaFile
+25-4editors/vscode/pkg-plist.amd64
+25-4editors/vscode/pkg-plist.aarch64
+13-13editors/vscode/distinfo
+16-6editors/vscode/files/product.json.extensions
+3-3editors/vscode/Makefile.version
+0-1editors/vscode/Makefile
+82-316 files

FreeBSD/ports a70a237 — editors/vscode Makefile Makefile.version, editors/vscode/files product.json.extensions

editors/vscode: Update to 1.143.1

While here, update product.json for popular extensions. [1]

Changelog: https://code.visualstudio.com/updates/v1_143

Reported by:    GitHub (watch releases)
Obtained from:  https://github.com/VSCodium/vscodium/blob/1.143.17183/product.json [1]
DeltaFile
+25-4editors/vscode/pkg-plist.amd64
+25-4editors/vscode/pkg-plist.aarch64
+13-13editors/vscode/distinfo
+16-6editors/vscode/files/product.json.extensions
+3-3editors/vscode/Makefile.version
+0-1editors/vscode/Makefile
+82-316 files

LLVM/project 463f320 — libc/src/math fminf80.h fmaxf80.h, libc/src/math/generic fminf80.cpp fmaxf80.cpp

nits
DeltaFile
+0-1libc/test/src/math/smoke/fminf80_test.cpp
+0-1libc/test/src/math/smoke/fmaxf80_test.cpp
+0-1libc/src/math/generic/fminf80.cpp
+0-1libc/src/math/generic/fmaxf80.cpp
+0-1libc/src/math/fminf80.h
+0-1libc/src/math/fmaxf80.h
+0-64 files not shown
+0-1010 files

LLVM/project e311055 — libc/src/__support/math fmaxf80.h fminf80.h, libc/src/math/generic fminf80.cpp fmaxf80.cpp

initial commit
DeltaFile
+38-0utils/bazel/llvm-project-overlay/libc/BUILD.bazel
+34-0libc/src/__support/math/fmaxf80.h
+34-0libc/src/__support/math/fminf80.h
+31-0libc/src/math/generic/fminf80.cpp
+31-0libc/src/math/generic/fmaxf80.cpp
+30-0libc/test/src/math/smoke/CMakeLists.txt
+198-027 files not shown
+453-033 files

LLVM/project b03a708 — flang/lib/Evaluate real-value-impl.cpp, flang/unittests/Evaluate RealValueTest.cpp

[flang] Undefine HUGE after including cmath (#236221)

Older glibc versions expose HUGE through <cmath> after Flang's headers
have undefined it. This breaks the RealValueImpl::HUGE definition and
calls, as well as the RealValue unit tests and their HUGE test name.

The glibc version I could reproduce the issue on was 2.26.
DeltaFile
+4-0flang/unittests/Evaluate/RealValueTest.cpp
+4-0flang/lib/Evaluate/real-value-impl.cpp
+8-02 files

FreeBSD/ports 8ea737d — java/openjdk21 Makefile distinfo

java/openjdk21: Version 21.0.13.0.3 more cert fixes

Update to latest upstream patch version to address more issues with the
eMudhra certificate incident.

See also: https://openjdk.org/emudhra

MFH:            2026Q4
Security:       CVE 2026-114820
Security:       JDK-8395690
Sponsored by:   The FreeBSD Foundation

(cherry picked from commit a952ceac5d3c19984214bdbf9daaf49b97f9c25e)
DeltaFile
+3-3java/openjdk21/distinfo
+1-1java/openjdk21/Makefile
+4-42 files

LLVM/project 2fbd46e — libc/src/__support/OSUtil/linux/syscall_wrappers CMakeLists.txt epoll_pwait.h, libc/src/sys/epoll/linux CMakeLists.txt epoll_pwait.cpp

[libc] Use a syscall wrapper for epoll_pwait
DeltaFile
+40-0libc/src/__support/OSUtil/linux/syscall_wrappers/epoll_pwait.h
+19-3utils/bazel/llvm-project-overlay/libc/BUILD.bazel
+7-14libc/src/sys/epoll/linux/epoll_pwait.cpp
+15-0libc/src/__support/OSUtil/linux/syscall_wrappers/CMakeLists.txt
+4-5libc/src/sys/epoll/linux/CMakeLists.txt
+85-225 files

LLVM/project 8e62621 — llvm/lib/Transforms/Vectorize VPlanTransforms.cpp

remove ptr type handling
DeltaFile
+3-8llvm/lib/Transforms/Vectorize/VPlanTransforms.cpp
+3-81 files

NetBSD/pkgsrc-wip b250984 — py-mopidy TODO

py-mopidy: Add reference to CVE-2026-111925
DeltaFile
+2-0py-mopidy/TODO
+2-01 files

LLVM/project 560952b — libc/src/__support/OSUtil/linux/syscall_wrappers CMakeLists.txt epoll_create.h, libc/src/sys/epoll/linux CMakeLists.txt epoll_create.cpp

[libc] Use a syscall wrapper for epoll_create
DeltaFile
+44-0libc/src/__support/OSUtil/linux/syscall_wrappers/epoll_create.h
+6-22libc/src/sys/epoll/linux/epoll_create.cpp
+17-1utils/bazel/llvm-project-overlay/libc/BUILD.bazel
+13-0libc/src/__support/OSUtil/linux/syscall_wrappers/CMakeLists.txt
+4-2libc/src/sys/epoll/linux/CMakeLists.txt
+84-255 files

NetBSD/pkgsrc-wip 6ec2353 — openbao TODO

openbao: Add reference to recent CVEs
DeltaFile
+4-0openbao/TODO
+4-01 files

NetBSD/pkgsrc-wip cc4ecd2 — libosmocore TODO

libosmocore: Add reference to recent CVEs
DeltaFile
+2-0libosmocore/TODO
+2-01 files

LLVM/project fafd000 — clang/lib/AST/ByteCode InterpBuiltinBitCast.cpp, clang/test/AST/ByteCode builtin-bit-cast.cpp

[clang][bytecode] Fix assertion with string pointers in `DoBitCast` (#236337)

Make sure we support bitcasting _from_ string pointers here.
DeltaFile
+9-0clang/test/AST/ByteCode/builtin-bit-cast.cpp
+2-2clang/lib/AST/ByteCode/InterpBuiltinBitCast.cpp
+11-22 files

NetBSD/pkgsrc-wip 709981f — xdg-desktop-portal TODO

xdg-desktop-portal: Add reference to recent CVEs
DeltaFile
+3-0xdg-desktop-portal/TODO
+3-01 files

NetBSD/pkgsrc-wip 02daaef — rtl_433 TODO

rtl_433: Add reference to CVE-2026-117609
DeltaFile
+3-1rtl_433/TODO
+3-11 files

FreeBSD/ports 1a18359 — devel/ccache4 Makefile distinfo

devel/ccache4: Update 4.14.1 => 4.14.2

Changelog:
https://ccache.dev/releasenotes.html#_ccache_4_14_2

PR:             300183
DeltaFile
+3-3devel/ccache4/distinfo
+2-2devel/ccache4/Makefile
+5-52 files

HardenedBSD/ports 1a18359 — devel/ccache4 Makefile distinfo

devel/ccache4: Update 4.14.1 => 4.14.2

Changelog:
https://ccache.dev/releasenotes.html#_ccache_4_14_2

PR:             300183
DeltaFile
+3-3devel/ccache4/distinfo
+2-2devel/ccache4/Makefile
+5-52 files

LLVM/project 1961971 — llvm/lib/Target/AMDGPU/Utils AMDGPUPALMetadata.h, llvm/test/CodeGen/AMDGPU amdpal-chain-metadata.ll

More tests and minor fixes
DeltaFile
+17-1llvm/test/CodeGen/AMDGPU/amdpal-chain-metadata.ll
+1-1llvm/lib/Target/AMDGPU/Utils/AMDGPUPALMetadata.h
+18-22 files

NetBSD/pkgsrc-wip 16a0c97 — llama.cpp TODO

llama.cpp: Add reference to recent CVEs
DeltaFile
+4-1llama.cpp/TODO
+4-11 files

NetBSD/pkgsrc-wip 3f895eb — dokuwiki TODO

dokuwiki: Add reference to CVE-2026-113356
DeltaFile
+1-1dokuwiki/TODO
+1-11 files

NetBSD/pkgsrc-wip 992cc3e — busybox TODO

busybox: Add reference to CVE-2026-92205
DeltaFile
+1-1busybox/TODO
+1-11 files

FreeBSD/ports 2522f55 — www/forgejo pkg-descr, www/forgejo-lts pkg-descr

www/forgejo{,-lts}: Update description

PR:             300079
MFH:            2026Q4
(cherry picked from commit 0421e2ddc07542cb336905166d499f9dccca9425)
DeltaFile
+2-3www/forgejo/pkg-descr
+2-3www/forgejo-lts/pkg-descr
+4-62 files

FreeBSD/ports 0421e2d — www/forgejo pkg-descr, www/forgejo-lts pkg-descr

www/forgejo{,-lts}: Update description

PR:             300079
MFH:            2026Q4
DeltaFile
+2-3www/forgejo/pkg-descr
+2-3www/forgejo-lts/pkg-descr
+4-62 files

HardenedBSD/ports 0421e2d — www/forgejo pkg-descr, www/forgejo-lts pkg-descr

www/forgejo{,-lts}: Update description

PR:             300079
MFH:            2026Q4
DeltaFile
+2-3www/forgejo/pkg-descr
+2-3www/forgejo-lts/pkg-descr
+4-62 files

LLVM/project 44868d2 — llvm/lib/Analysis ValueTracking.cpp, llvm/lib/Transforms/InstCombine InstCombineCompares.cpp

[InstCombine] Generalize existing pattern from "abs(val) != 0 -> val != 0" to "abs(val) == 0 -> val == 0" (#233763)

Generalize fold of `(c ? x : -x) != 0` to `x != 0` by moving the pattern
to stripNullTest() and thus also supporting `==` predicates and other
patterns supported by that helper.

The missed pattern is noticed in Google Abseil's demangler
(https://github.com/abseil/abseil-cpp/blob/master/absl/debugging/internal/demangle.cc).

Proof: https://alive2.llvm.org/ce/z/7WQeXT

Fixes #233753

Assisted-by: Qwen3.7-Plus, which helps me locate the existing pattern
instead of opening a new pattern.
DeltaFile
+24-0llvm/test/Transforms/InstCombine/icmp.ll
+0-16llvm/lib/Transforms/InstCombine/InstCombineCompares.cpp
+8-0llvm/lib/Analysis/ValueTracking.cpp
+32-163 files

FreeBSD/src c6b08de — sys/netpfil/ipfw ip_fw_table_algo.c

ipfw: fix off-by-one error in bdel()

After deleting an item from a sorted array, bdel() moves the tail
following it, but the size of the data to move was calculated with
an off-by-one error, causing memmove() to read one element past the
end of the array. This can happen when the table is full for ifidx
or numarray algorithms.

Obtained from:  Yandex LLC
MFC after:      1 week
Sponsored by:   Yandex LLC
DeltaFile
+1-1sys/netpfil/ipfw/ip_fw_table_algo.c
+1-11 files

LLVM/project 4215403 — llvm/lib/Target/AMDGPU SIISelLowering.cpp, llvm/test/CodeGen/AMDGPU insert_vector_elt.v2i16.ll insert_vector_elt.v2bf16.ll

[AMDGPU] Custom lower dynamic insertelt on wide vectors of 16-bit elements (#232288)

Currently, in case of dynamic-index `insertelement` into v8, v16 and v32
of i16, f16 and bf16 was set to Expand. At -O1 and above, single inserts
were expanded into a select per element and chains of inserts were
folded into a stack temporary. At -O0, every insert went through the
stack unconditionally.

This patch extends the existing `v_bfi_b32` custom lowering, previously
limited to 64-bit vectors, to the 16-bit wide vectors as well, making
`INSERT_VECTOR_ELT` as now Custom for them, so legalization uses the
custom lowering at all optimization levels, and the generic DAGCombiner
chain fold, which only applies to Expand types, no longer fires.

In 'lowerINSERT_VECTOR_ELT' each 64-bit sized piece updates with `(Mask
& splat(Val)) | (~Mask & Piece)`, where only the piece holding the index
gets a nonzero mask, alongwith skipping `performInsertVectorEltCombine`
that use select-per-element expansion for such types, since the custom
lowering is cheaper. wider i8 vectors still use the stack.
DeltaFile
+1,013-90llvm/test/CodeGen/AMDGPU/insert_vector_dynelt.ll
+251-587llvm/test/CodeGen/AMDGPU/insert_vector_elt.v2bf16.ll
+187-463llvm/test/CodeGen/AMDGPU/insert_vector_elt.v2i16.ll
+58-25llvm/lib/Target/AMDGPU/SIISelLowering.cpp
+1,509-1,1654 files

LLVM/project b723001 — flang/lib/Optimizer/Transforms AddAliasTags.cpp, flang/test/Transforms tbaa-omp-private.fir

[flang][AddAliasTags] OpenMP privatization is a local allocation (#236201)

OpenMP privatization generates code which looks a bit like this
```
%host = ...
omp.parallel private(@privatizer %host -> %private_copy : !fir.ref<type>) {
  %priv = fir.declare %private_copy ... -> !fir.ref<type>
}
```

`fir::AliasAnalysis` already correctly categorises accesses to these
private variables (`%priv` in this example) as local allocations. It
reports the source operation for the allocation as being the
`fir.declare` operation (as there is no allocation operation visible in
mlir).

When AddAliasTags processed this access it did not handle allocations
having `fir.declare` as their source and so was not able to give it the
local allocation tag. This commit fixes that by treating `fir.declare`

    [15 lines not shown]
DeltaFile
+198-0flang/test/Transforms/tbaa-omp-private.fir
+14-2flang/lib/Optimizer/Transforms/AddAliasTags.cpp
+212-22 files

FreeBSD/ports a952cea — java/openjdk21 Makefile distinfo

java/openjdk21: Version 21.0.13.0.3 more cert fixes

Update to latest upstream patch version to address more issues with the
eMudhra certificate incident.

See also: https://openjdk.org/emudhra

MFH:            2026Q4
Security:       CVE 2026-114820
Security:       JDK-8395690
Sponsored by:   The FreeBSD Foundation
DeltaFile
+3-3java/openjdk21/distinfo
+1-1java/openjdk21/Makefile
+4-42 files