FreeNAS/freenas 8e2b9d4src/middlewared/middlewared/plugins/pool_ dataset.py, tests/api2 test_pool_dataset_user_props.py

Apply user properties when creating a dataset

(cherry picked from commit 14f84c0b3a4a63a03d6f354ea91cd199994df09c)
DeltaFile
+15-0tests/api2/test_pool_dataset_user_props.py
+3-0src/middlewared/middlewared/plugins/pool_/dataset.py
+18-02 files

FreeNAS/freenas 7c58838src/middlewared/middlewared/plugins/pool_ dataset.py, tests/api2 test_pool_dataset_encryption.py

Pass the requested pbkdf2 iteration count to ZFS when creating a dataset

(cherry picked from commit 562293487b4bc20e6e1b90df1bf740098ec35499)
DeltaFile
+10-0tests/api2/test_pool_dataset_encryption.py
+1-5src/middlewared/middlewared/plugins/pool_/dataset.py
+11-52 files

FreeNAS/freenas f526d8dsrc/middlewared/middlewared/api/v26_0_0 pool.py pool_dataset.py, src/middlewared/middlewared/plugins/pool_ utils.py dataset_encryption_operations.py

Remove the ability to choose an encryption suite when creating a dataset or pool

(cherry picked from commit 6703aead632a57ba64551d59fdf102612cd21b01)
DeltaFile
+13-6tests/api2/test_pool_dataset_encryption.py
+0-15src/middlewared/middlewared/api/v26_0_0/pool_dataset.py
+1-14src/middlewared/middlewared/plugins/pool_/dataset_info.py
+1-3src/middlewared/middlewared/plugins/pool_/utils.py
+2-2src/middlewared/middlewared/plugins/pool_/dataset_encryption_operations.py
+0-3src/middlewared/middlewared/api/v26_0_0/pool.py
+17-434 files not shown
+17-4710 files

FreeBSD/ports eecfa3ddns/powerdns-recursor Makefile distinfo

dns/powernds-recursor: Update 5.4.4 => 5.4.5

Changelog:
https://doc.powerdns.com/recursor/changelog/5.4.html#change-5.4.5

PR:             297322
Reported by:    Jordan Ostreff <jordan at ostreff.info> (author)
Approved by:    Ralf van der Enden <tremere at cainites.net> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
Security:       CVE-2026-52682
MFH:            2026Q3

(cherry picked from commit a834950d9494a6ee6308bd2a4be86d7f3a948e77)
DeltaFile
+3-3dns/powerdns-recursor/distinfo
+1-1dns/powerdns-recursor/Makefile
+4-42 files

FreeBSD/ports 39d8e4bdns/powerdns Makefile distinfo

dns/powernds: Update 5.1.3 => 5.1.4

Changelog:
https://doc.powerdns.com/authoritative/changelog/5.1.html#change-5.1.4

PR:             297321
Reported by:    Jordan Ostreff <jordan at ostreff.info> (author)
Approved by:    Ralf van der Enden <tremere at cainites.net> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
Security:       CVE-2026-52682
MFH:            2026Q3

(cherry picked from commit c8c63f720ce898f80455f83e464d63087c9e8d67)
DeltaFile
+3-3dns/powerdns/distinfo
+1-2dns/powerdns/Makefile
+4-52 files

FreeBSD/ports 85f0748dns/dnsdist Makefile distinfo

dns/dnsdist: Update 2.1.0 => 2.1.1

Changelog:
https://www.dnsdist.org/changelog.html#change-2.1.1

PR:             297320
Reported by:    Jordan Ostreff <jordan at ostreff.info> (author)
Approved by:    Ralf van der Enden <tremere at cainites.net> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
Security:       CVE-2026-52682
MFH:            2026Q3

(cherry picked from commit 90e1f4484a98ebdebe8ba9d5afdeb99328644b8e)
DeltaFile
+3-3dns/dnsdist/distinfo
+1-1dns/dnsdist/Makefile
+4-42 files

FreeBSD/ports 3673e1fdns/dnsdist pkg-plist Makefile, dns/dnsdist/files dnsdist.conf.sample patch-dnsdist-configuration-yaml.cc

dns/dnsdist: Update to 2.1.0

Changelog: https://www.dnsdist.org/changelog.html#change-2.1.0

PR:             296456
Reported by:    Jordan Ostreff <jordan at ostreff.info> (initial patch),
                Ralf van der Enden <tremere at cainites.net> (maintainer, committed patch)

(cherry picked from commit d4dec80c2c0412548c8a7cbd137862df0193aa08)
DeltaFile
+59-73dns/dnsdist/distinfo
+28-35dns/dnsdist/Makefile.crates
+0-11dns/dnsdist/files/patch-dnsdist-configuration-yaml.cc
+0-6dns/dnsdist/files/dnsdist.conf.sample
+2-2dns/dnsdist/Makefile
+1-0dns/dnsdist/pkg-plist
+90-1276 files

LLVM/project 5f3b907llvm/lib/Target/Hexagon HexagonISelLowering.cpp, llvm/test/CodeGen/Hexagon bitrev-alias-offset.ll bitrev-chain-offset.ll

[Hexagon] Fix MachineMemOperand for brev load ; set the offset of the memory operand (#212916)

`getTgtMemIntrinsic` describes the access of the bit-reverse load
intrinsics (`llvm.hexagon.L2.loadr*.pbr`) by attaching the underlying
object of the base pointer to the machine memory operand, for alias
analysis.

Such a load post-increments its base pointer by the modifier, and
accesses the address formed by reversing the low 16 bits of that
pointer:

    memXX(Rx++Mu:brev)        EA = Rx.h : bitrev(Rx.l)

So a load in a chain of them accesses the base pointer of the chain,
plus the bit-reverse of the sum of the modifiers of the loads before it.

The offset was always zero, so every load of a chain claimed to access
the first bytes of the object. Alias analysis concluded a store
elsewhere in the object could not alias the loads, the scheduler sank it

    [18 lines not shown]
DeltaFile
+79-0llvm/test/CodeGen/Hexagon/bitrev-chain-offset.ll
+46-4llvm/lib/Target/Hexagon/HexagonISelLowering.cpp
+50-0llvm/test/CodeGen/Hexagon/bitrev-alias-offset.ll
+175-43 files

FreeBSD/ports 5279fcbsecurity/vuxml/vuln 2026.xml

security/vuxml: Document dns/{dnsdist,powerdns,powerdns-recursor} vulnerability

PR:             297320, 297321, 297322
Approved by:    osa, vvd (Mentors, implicit)
DeltaFile
+33-0security/vuxml/vuln/2026.xml
+33-01 files

FreeBSD/ports a834950dns/powerdns-recursor Makefile distinfo

dns/powernds-recursor: Update 5.4.4 => 5.4.5

Changelog:
https://doc.powerdns.com/recursor/changelog/5.4.html#change-5.4.5

PR:             297322
Reported by:    Jordan Ostreff <jordan at ostreff.info> (author)
Approved by:    Ralf van der Enden <tremere at cainites.net> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
Security:       CVE-2026-52682
MFH:            2026Q3
DeltaFile
+3-3dns/powerdns-recursor/distinfo
+1-1dns/powerdns-recursor/Makefile
+4-42 files

FreeBSD/ports c8c63f7dns/powerdns Makefile distinfo

dns/powernds: Update 5.1.3 => 5.1.4

Changelog:
https://doc.powerdns.com/authoritative/changelog/5.1.html#change-5.1.4

PR:             297321
Reported by:    Jordan Ostreff <jordan at ostreff.info> (author)
Approved by:    Ralf van der Enden <tremere at cainites.net> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
Security:       CVE-2026-52682
MFH:            2026Q3
DeltaFile
+3-3dns/powerdns/distinfo
+1-2dns/powerdns/Makefile
+4-52 files

FreeBSD/ports 90e1f44dns/dnsdist Makefile distinfo

dns/dnsdist: Update 2.1.0 => 2.1.1

Changelog:
https://www.dnsdist.org/changelog.html#change-2.1.1

PR:             297320
Reported by:    Jordan Ostreff <jordan at ostreff.info> (author)
Approved by:    Ralf van der Enden <tremere at cainites.net> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
Security:       CVE-2026-52682
MFH:            2026Q3
DeltaFile
+3-3dns/dnsdist/distinfo
+1-2dns/dnsdist/Makefile
+4-52 files

LLVM/project 1d952eamlir/test/Dialect/MemRef elide-reinterpret-cast.mlir

[MemRef] Remove redundant elide-rc through load tests (#213033)

Remove test cases and naming highlighting the boundary non-unit dim
requirement - this has been relaxed in the current implementation.
DeltaFile
+30-127mlir/test/Dialect/MemRef/elide-reinterpret-cast.mlir
+30-1271 files

FreeBSD/src 2a2867csys/dev/ixgbe if_ixv.c

ixv: Defer reset after mailbox failure

When link polling loses mailbox clear-to-send or times out, request an
iflib reset instead of continuing with stale VF state.

The driver callback runs after iflib samples reset requests, so requeue
the admin task to make iflib consume the request on its next pass
rather than waiting for an unrelated timer or interrupt.

MFC after:      2 weeks
DeltaFile
+2-1sys/dev/ixgbe/if_ixv.c
+2-11 files

LLVM/project f8b029cclang/lib/AST ExprConstant.cpp, clang/lib/AST/ByteCode Interp.h Interp.cpp

[AST][NFC] Rename and refactor floating-point status checks in AST and ByteCode evaluators (#213750)

To clarify the purpose of floating-point status checks in AST and
ByteCode evaluators during translation (as opposed to mandatory constant
expression evaluation):
- Rename checkFloatingPointResult to
checkFloatingPointResultForConstantFolding in ExprConstant.cpp
- Update its Doxygen documentation comment
- CheckFloatResult in Interp.cpp is essentially the same as (Result NaN
check + checkFloatingPointResultForConstantFolding). So we split the
part that is equivalent to checkFloatingPointResultForConstantFolding in
CheckFloatResult into a separate CheckFloatStatus function.
DeltaFile
+22-13clang/lib/AST/ByteCode/Interp.cpp
+14-7clang/lib/AST/ExprConstant.cpp
+17-0clang/lib/AST/ByteCode/Interp.h
+53-203 files

LLVM/project 376fbd3clang/include/clang/AST StmtOpenMP.h, clang/lib/AST StmtOpenMP.cpp

[clang][OpenMP] Split OMPOrderedDirective into two classes

Now that OMPD_ordered has been replaced with two variants, split
the OMPOrderedDirective class into two classes, one for each
variant.
DeltaFile
+77-71clang/lib/CodeGen/CGStmtOpenMP.cpp
+63-17clang/include/clang/AST/StmtOpenMP.h
+25-20clang/lib/AST/StmtOpenMP.cpp
+18-5clang/lib/Serialization/ASTReaderStmt.cpp
+15-4clang/tools/libclang/CIndex.cpp
+14-3clang/lib/Sema/TreeTransform.h
+212-12017 files not shown
+300-14723 files

FreeBSD/src 545779asys/dev/ixgbe if_ix.c

ixgbe: Re-enable the SFP laser during initialization

ixgbe_if_stop() disables the transmit laser on every 82599 SFP fiber
port, but the iflib initialization path did not re-enable it. Re-enable
the laser before deferred SFP module setup so interface
reinitialization cannot leave either single-speed or multispeed optics
dark.

The hardware wrapper is a no-op when laser control is unavailable. The
placement follows Intel ix-3.4.39; this version deliberately applies to
every SFP port affected by the stop path.

MFC after:      1 week
DeltaFile
+2-0sys/dev/ixgbe/if_ix.c
+2-01 files

LLVM/project 7361c6bllvm/lib/Target/SPIRV SPIRVPreLegalizer.cpp, llvm/test/CodeGen/SPIRV/legalization signed-narrow-int.ll

[SPIR-V] Set MIB insert point before widened type lookup in widenSignSensitiveOps (#214424)

Fix an assertion crash (release: null-MBB walk) when a sub-pow2
sign-sensitive op has no preceding G_TRUNC to set the insert point
DeltaFile
+20-0llvm/test/CodeGen/SPIRV/legalization/signed-narrow-int.ll
+1-1llvm/lib/Target/SPIRV/SPIRVPreLegalizer.cpp
+21-12 files

LLVM/project fa1661aclang/lib/Parse ParseOpenMP.cpp, flang/lib/Parser openmp-parsers.cpp

[OpenMP] Delete now unused OMPD_ordered

It has been replaced by OMPD_ordered_standalone and
OMPD_ordered_blockassoc.
DeltaFile
+0-13llvm/include/llvm/Frontend/OpenMP/OMP.td
+1-2llvm/unittests/Frontend/OpenMPDirectiveNameParserTest.cpp
+1-2flang/lib/Semantics/check-omp-structure.cpp
+1-2flang/lib/Parser/openmp-parsers.cpp
+1-1llvm/lib/Frontend/OpenMP/OMPIRBuilder.cpp
+1-1clang/lib/Parse/ParseOpenMP.cpp
+5-216 files

LLVM/project e554990clang/include/clang/AST StmtOpenMP.h, clang/lib/AST StmtOpenMP.cpp

[clang][OpenMP] Use different ids for block and s/a ORDERED directive

Use OMPD_ordered_blockassoc for the block-associated ORDERED directive,
and OMPD_ordered_standalone for the standalone variant.

This still uses a single AST class for both though. The directive
kind stored in can now take either of the two values.
DeltaFile
+36-23clang/lib/Parse/ParseOpenMP.cpp
+33-20clang/lib/Sema/SemaOpenMP.cpp
+10-6clang/lib/CodeGen/CGOpenMPRuntime.cpp
+9-3clang/lib/AST/StmtOpenMP.cpp
+7-3clang/include/clang/AST/StmtOpenMP.h
+4-2llvm/lib/Frontend/OpenMP/DirectiveNameParser.cpp
+99-574 files not shown
+107-6210 files

LLVM/project 177ceedflang/include/flang/Semantics openmp-directive-sets.h, flang/lib/Lower/OpenMP OpenMP.cpp

[flang][OpenMP] Use different ids for block and s/a ORDERED directive

Use OMPD_ordered_blockassoc for the block-associated ORDERED directive,
and OMPD_ordered_standalone for the standalone variant.
DeltaFile
+31-4flang/lib/Parser/openmp-parsers.cpp
+8-7flang/lib/Lower/OpenMP/OpenMP.cpp
+9-5flang/lib/Semantics/check-omp-structure.cpp
+5-5flang/include/flang/Semantics/openmp-directive-sets.h
+3-2flang/lib/Semantics/check-omp-loop.cpp
+1-1flang/test/Lower/OpenMP/Todo/ordered.f90
+57-242 files not shown
+59-268 files

LLVM/project eb7cf57clang/include/clang/AST StmtOpenMP.h

Add comment
DeltaFile
+2-0clang/include/clang/AST/StmtOpenMP.h
+2-01 files

LLVM/project 24dca41clang/lib/Parse ParseOpenMP.cpp, llvm/include/llvm/Frontend/OpenMP OMP.td

[OpenMP] Create separate directives for two variants of ORDERED

The ORDERED directive comes in two flavors, standalone and block-
associated. Create two different directive ids, one for each kind.
This will allow a more precise connection between the directive id
and its properties.

This does not remove OMPD_ordered, nor does it change clang or
flang beyond the minimum required to keep working as before.
DeltaFile
+15-3llvm/unittests/Frontend/OpenMPDirectiveNameParserTest.cpp
+18-0llvm/include/llvm/Frontend/OpenMP/OMP.td
+7-0clang/lib/Parse/ParseOpenMP.cpp
+40-33 files

LLVM/project f27fd86llvm/lib/Target/SPIRV SPIRVStructurizer.cpp

[NFC][SPIR-V] Remove unused getSwitchConstructBlocks and getCaseConstructBlocks (#214271)
DeltaFile
+0-43llvm/lib/Target/SPIRV/SPIRVStructurizer.cpp
+0-431 files

LLVM/project 755cde6llvm/lib/Target/SPIRV SPIRVBuiltins.cpp SPIRVBuiltins.td

[NFC][SPIR-V] Remove unused IsBallot and IsBallotFindBit fields from GroupBuiltin (#214273)
DeltaFile
+2-2llvm/lib/Target/SPIRV/SPIRVBuiltins.td
+0-2llvm/lib/Target/SPIRV/SPIRVBuiltins.cpp
+2-42 files

LLVM/project 25e9de7clang/include/clang/AST StmtOpenMP.h

Add comment
DeltaFile
+2-0clang/include/clang/AST/StmtOpenMP.h
+2-01 files

LLVM/project bf927b2llvm/lib/Target/SPIRV SPIRVGlobalRegistry.h SPIRVGlobalRegistry.cpp

[NFC][SPIR-V] Remove unused SPIRVGlobalRegistry methods (#214270)
DeltaFile
+0-33llvm/lib/Target/SPIRV/SPIRVGlobalRegistry.cpp
+0-17llvm/lib/Target/SPIRV/SPIRVGlobalRegistry.h
+0-502 files

FreeBSD/src 31285bdshare/man/man4 ix.4, sys/dev/ixgbe ixgbe.h ixgbe_sriov.h

ixgbe: quarantine repeatedly faulting legacy VFs

A guest can reinitialize after a VF function-level reset and
repeatedly strand an 82599 or X540 PF with invalid descriptor DMA
targets. Count only distinct Received Master Abort events accepted by
the qualified transmit-stall detector and quarantine the VF after five
events.

Preserve quarantine across PF reinitialization, reject reset mailbox
requests, and keep transmit, receive, and clear-to-send disabled.
Recreating SR-IOV clears quarantine. Expose the affected pools through
a read-only bitmap.

After a successful quarantine FLR, leave the function in post-FLR
configuration, explicitly keep decode and bus mastering disabled,
verify the Command register, and refresh its PCI-layer cache so a later
restore cannot re-enable the function.

This addresses CVE-2021-33061 on 82599. Apply the same bounded-failure

    [6 lines not shown]
DeltaFile
+58-14sys/dev/ixgbe/if_sriov.c
+8-0sys/dev/ixgbe/if_ix.c
+7-0share/man/man4/ix.4
+3-1sys/dev/ixgbe/ixgbe_sriov.h
+3-0sys/dev/ixgbe/ixgbe.h
+79-155 files

FreeBSD/src 78547d5sys/dev/pci pci.c

pci: Skip PF SR-IOV state handling for VFs

A VF's pci_devinfo references its PF's pcicfg_iov for resource
bookkeeping, but only the PF implements the SR-IOV capability.
pci_cfg_save() and pci_cfg_restore() treated any non-NULL cfg.iov as
an owned capability and accessed the PF capability offset in VF
configuration space. Saving a VF could therefore replace the shared
PF settings with unrelated VF register values.

Skip SR-IOV capability save and restore for PCICFG_VF children. The
generic PCI and PCIe state of the VF remains preserved. This is also
required by drivers that save VF state around a PF-driven
function-level reset.

MFC after:      2 weeks
DeltaFile
+6-2sys/dev/pci/pci.c
+6-21 files

FreeBSD/src fe02e14share/man/man4 ix.4, sys/dev/ixgbe ixgbe_sriov.h ixgbe.h

ixgbe: Recover legacy VFs from invalid DMA targets

82599 and X540 lack the X550 malicious-driver detector. Detect a VF
whose PCI status reports a received master abort while its transmit
ring has outstanding descriptors and makes no progress across
consecutive samples.

Consume the accepted PCI status latch, gate that VF I/O, and recover
one pending VF per task pass with round-robin selection. This prevents
an unreadable function from starving detection or recovery of other
VFs.

Save the complete writable VF PCI configuration before FLR, restore it
afterward, and verify the hardware-backed Command state. Preserve the
first good snapshot and pending state across reset events until restore
and verification succeed.

Introduce a common I/O-disabled policy bitmask so later quarantine
policy can extend traffic gating without duplicating fault-state

    [3 lines not shown]
DeltaFile
+309-3sys/dev/ixgbe/if_sriov.c
+15-0sys/dev/ixgbe/if_ix.c
+9-1sys/dev/ixgbe/ixgbe_sriov.h
+10-0sys/dev/ixgbe/ixgbe.h
+4-0share/man/man4/ix.4
+347-45 files