NetBSD/pkgsrc OcAuRtOdoc TODO CHANGES-2026

   doc: Updated net/arti to 2.5.1
VersionDeltaFile
1.27699+1-2doc/TODO
1.5041+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc uNO3WiBnet/arti Makefile cargo-depends.mk

   arti: update to 2.5.1.

   # Arti 2.5.1 - 3 August 2026

   Arti 2.5.1 continues development on relays and directory authorities.
   It also adds some performance, security, and convenience features for
   onion services.

   # Arti 2.5.0 — 30 June 2026

   Arti 2.5.0 comes with lots of progress in the relay and directory authority
   space, including ntor handshake handling, as well as encoding/decoding support
   for router- and micro descriptors.

   This release also includes a number of important bug fixes, as well as two security
   fixes for medium-severity security issues, [TROVE-2026-24] and [TROVE-2026-27].
VersionDeltaFile
1.19+427-451net/arti/distinfo
1.19+141-149net/arti/cargo-depends.mk
1.24+3-3net/arti/Makefile
+571-6033 files

NetBSD/pkgsrc 3yolICcdoc CHANGES-2026 TODO

   doc: Updated devel/apr-util to 1.6.4
VersionDeltaFile
1.27698+3-2doc/TODO
1.5040+2-1doc/CHANGES-2026
+5-32 files

NetBSD/pkgsrc 1YqBWqwdevel/apr-util distinfo Makefile

   apr-util: update to 1.6.4.

   Changes with APR-util 1.6.4

     *) apr_brigade: Don't split the final LF in apr_brigade_split_line() to
        avoid producing an empty bucket.  PR 64273
        [Barnim Dzwillo <dzwillo strato.de>, Joe Orton]

     *) apr_brigade: Metadata buckets are now ignored in
        apr_brigade_split_line, apr_brigade_flatten and
        apr_brigade_to_iovec, fixing possible undefined behaviour.  PR 68278
        [Ben Kallus <benjamin.p.kallus.gr dartmouth.edu>, Joe Orton]

     *) apr_crypto_openssl: Compatibility with OpenSSL 3.  [Yann Ylavic]

     *) apr_crypto_openssl: use OPENSSL_init_crypto() to initialise OpenSSL
        on versions 1.1+. [Graham Leggett]

     *) apr_memcache: Fix name lookup to allow IPv6 as well as IPv4.

    [5 lines not shown]
VersionDeltaFile
1.79+7-3devel/apr-util/Makefile
1.28+4-4devel/apr-util/distinfo
+11-72 files

LLVM/project b3946b5llvm/lib/CodeGen Rematerializer.cpp

[CodeGen] Fix null pointer dereferencing issue (#214543)

Fixes #197580.  Fixes 99f7018958ed3daf2abf8d49178c24fbf1eb1010.

In Rematerializer::isRegIdenticalAtUses(), handle case when DefVN is
null.
DeltaFile
+2-0llvm/lib/CodeGen/Rematerializer.cpp
+2-01 files

LLVM/project 0f962d8llvm/lib/Target/AMDGPU SILowerControlFlow.cpp, llvm/test/CodeGen/AMDGPU lower-control-flow-other-terminators.mir

[AMDGPU] Fix combineMasks dropping condition (#203180)

The problem is related to `S_AND (S_AND x, x), exec` case

When the nested mask op is the outer S_AND/S_OR first operand with two
identical operands, combineMasks kept exec instead of a nested operand,
folding to S_AND exec, exec and dropping the condition
DeltaFile
+72-0llvm/test/CodeGen/AMDGPU/lower-control-flow-other-terminators.mir
+38-18llvm/lib/Target/AMDGPU/SILowerControlFlow.cpp
+110-182 files

FreeBSD/src bdea6e9sys/fs/nfsclient nfs_clrpcops.c

nfs_commonkrpc.c: Get rid of NFSv4.0 delegation cruft

Delegations in NFSv4.0 never worked well and, since
the NFSv4.0 protocol is now deprecated, use of delegations
for NFSv4.0 is disabled as far as the client can do so.

It turns out that some Illumos NFSv4.0 server issues
delegations anyhow (even when the callback path is
specified as 0.0.0.0) and this can cause use after free
problems.

This patch deleted some cruft that did an nfsrpc_openrpc()
call recursively when an NFSv4.0 server failed to issue
a delegation when it had previously done so.
This code was only meant to be an optimization and
would have been rarely exercised.  Since this recursive
call of nfsrpc_openrpc() is in some of the backtraces
in the bugzilla PR, getting rid of the cruft makes sense.


    [6 lines not shown]
DeltaFile
+0-27sys/fs/nfsclient/nfs_clrpcops.c
+0-271 files

FreeBSD/src ca0dcfdsys/fs/nfs nfs_commonkrpc.c

nfs_commonkrpc.c: Fix recovery that was broken by 4d80d4913e79

Commit 4d80d4913e79 added a check for nfsess_defunct already
being set.  This was incorrect because, once set, nfsess_defunct
remains set and an additional recovery might be needed.

This patch reverts this part of 4d80d4913e79.

PR:     297252

(cherry picked from commit 5ab48fb9f7ac43fb1242a678312a02df5d4d5b53)
DeltaFile
+9-3sys/fs/nfs/nfs_commonkrpc.c
+9-31 files

HardenedBSD/src 761157busr.bin/rpcinfo Makefile

HBSD: Resolve merge conflict

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
DeltaFile
+0-5usr.bin/rpcinfo/Makefile
+0-51 files

HardenedBSD/src 5677172sys/kern kern_event.c, sys/net if.c

Merge remote-tracking branch 'rad/freebsd/15-stable/main' into hardened/15-stable/main

Conflicts:
        usr.bin/rpcinfo/Makefile (unresolved)
DeltaFile
+83-65usr.bin/rpcinfo/rpcinfo.c
+100-0tests/sys/netinet/fib_bind.py
+30-32sys/kern/kern_event.c
+41-0sys/vm/vm_phys.c
+31-0tests/sys/kern/unix_passfd_test.c
+23-6sys/net/if.c
+308-10326 files not shown
+519-13232 files

LLVM/project 9bbd728clang/docs ReleaseNotes.md, clang/lib/Driver/ToolChains AMDGPU.cpp

[HIP] Add libhipcxx to the default header search path (#214279)

libhipcxx provides C++ library support for HIP device code, similar to
libcudacxx for CUDA. CUDA toolchains make libcudacxx available through
the
toolkit include path by default. HIP users should likewise be able to
include libhipcxx headers without an installation-specific include
option.

Add include/libhipcxx from the selected ROCm installation when the
directory exists. It follows the same search order and controls as the
other HIP include paths.
DeltaFile
+20-0clang/test/Driver/hip-include-path.hip
+6-0clang/lib/Driver/ToolChains/AMDGPU.cpp
+6-0clang/docs/ReleaseNotes.md
+1-0clang/test/Driver/Inputs/rocm/include/libhipcxx/cuda/std/atomic
+33-04 files

FreeBSD/src 6154eecsys/fs/nfsclient nfs_clrpcops.c

nfs_commonkrpc.c: Get rid of NFSv4.0 delegation cruft

Delegations in NFSv4.0 never worked well and, since
the NFSv4.0 protocol is now deprecated, use of delegations
for NFSv4.0 is disabled as far as the client can do so.

It turns out that some Illumos NFSv4.0 server issues
delegations anyhow (even when the callback path is
specified as 0.0.0.0) and this can cause use after free
problems.

This patch deleted some cruft that did an nfsrpc_openrpc()
call recursively when an NFSv4.0 server failed to issue
a delegation when it had previously done so.
This code was only meant to be an optimization and
would have been rarely exercised.  Since this recursive
call of nfsrpc_openrpc() is in some of the backtraces
in the bugzilla PR, getting rid of the cruft makes sense.


    [6 lines not shown]
DeltaFile
+0-27sys/fs/nfsclient/nfs_clrpcops.c
+0-271 files

FreeBSD/src 037232csys/fs/nfs nfs_commonkrpc.c

nfs_commonkrpc.c: Fix recovery that was broken by 4d80d4913e79

Commit 4d80d4913e79 added a check for nfsess_defunct already
being set.  This was incorrect because, once set, nfsess_defunct
remains set and an additional recovery might be needed.

This patch reverts this part of 4d80d4913e79.

PR:     297252
(cherry picked from commit 5ab48fb9f7ac43fb1242a678312a02df5d4d5b53)
DeltaFile
+9-3sys/fs/nfs/nfs_commonkrpc.c
+9-31 files

LLVM/project 92e1f6allvm/lib/Target/AMDGPU SIFoldOperands.cpp, llvm/test/CodeGen/AMDGPU do-not-fold-copy.mir

[AMDGPU] Fix SIFoldOperands miscompiling values that leave a divergent loop (#203256)

A scalar value latched per-lane inside a divergent loop was being folded
into a use after the loop, so every lane wrongly read the same value
DeltaFile
+54-11llvm/test/CodeGen/AMDGPU/do-not-fold-copy.mir
+53-8llvm/lib/Target/AMDGPU/SIFoldOperands.cpp
+107-192 files

FreeBSD/ports 63336f5net-p2p/hostd distinfo Makefile, net-p2p/hostd/files patch-vendor_modules.txt

net-p2p/{hostd,renterd,walletd}: Update ports

- net-p2p/hostd: 2.5.1 => 2.9.0
- net-p2p/renterd: 2.7.1 => 2.9.1
- net-p2p/walletd: 2.11.0 => 2.12.0

PR:             293580
Reported by:    bruno <bruno at tinkerbox.org> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
DeltaFile
+47-70net-p2p/renterd/files/patch-vendor_modules.txt
+43-66net-p2p/hostd/files/patch-vendor_modules.txt
+49-53net-p2p/hostd/Makefile
+45-49net-p2p/renterd/distinfo
+39-43net-p2p/hostd/distinfo
+31-50net-p2p/walletd/files/patch-vendor_modules.txt
+254-3316 files not shown
+364-45412 files

LLVM/project 7220098lldb/test/API/macosx/expedited-stack-memory TestExpeditedStackMemory.py

[lldb][test] Skip the frame 0 expedite test with an out-of-tree debugserver (#214448)

`test_memory_reads_when_examining_frame0_locals` asserts that examining
frame 0's locals reads no stack memory, which only holds when
debugserver
expedites the stopped frame's stack in `jThreadsInfo`.  That is
added in b631e0cbd1c9, so the assertion only holds for an in-tree
debugserver.

The GreenDragon `lldb-cmake-sanitized` bot configures with
`-DLLDB_USE_SYSTEM_DEBUGSERVER=ON`, so it tests against the debugserver
shipped in Xcode.  That one predates the expedite, so test fails:

```
FAIL: test_memory_reads_when_examining_frame0_locals
AssertionError: 2 != 0 : expected NO stack memory reads for frame 0 (its
stack is expedited in jThreadsInfo).
memory reads while examining locals: stack=2 heap=1 other=1 (total=4)
  stack region: [0x16b540000,0x16f53c000)

    [7 lines not shown]
DeltaFile
+1-0lldb/test/API/macosx/expedited-stack-memory/TestExpeditedStackMemory.py
+1-01 files

LLVM/project 429b2a7clang/lib/Basic/Targets SPIR.h, clang/test/CodeGenSPIRV spirv-host-adaptation-valist.cpp

[SYCL][SPIR-V][Windows] Extend BaseSPIRTargetInfo host-adaptation for Windows support (#208196)

The existing host-adaptation mechanism in BaseSPIRTargetInfo copies type
properties from the host but has gaps causing incorrect behavior on
Windows:

1. PointerWidth/PointerAlign, SizeType, PtrDiffType, IntPtrType were not
  copied from the host; derived classes hardcoded LP64 defaults.
  2. getBuiltinVaListKind() returned VoidPtr unconditionally instead of
  delegating to the host's va_list kind.
  3. Derived-class constructors unconditionally overwrote host-adapted
  values, working on Linux only by coincidence.

  This patch addresses these issues by copying pointer-related types
from the host in BaseSPIRTargetInfo, delegating va_list kind to the
host,
and setting architecture-appropriate defaults in derived classes when no
host is
  present or when host and device pointer widths differ.

    [2 lines not shown]
DeltaFile
+86-0clang/test/SemaSPIRV/spirv-host-adaptation-types.cpp
+73-0clang/test/Preprocessor/spirv-host-adaptation-macros.cpp
+49-8clang/lib/Basic/Targets/SPIR.h
+36-0clang/test/Preprocessor/spir-host-adaptation-macros.cpp
+29-0clang/test/SemaSPIRV/spirv-host-adaptation-valist.cpp
+24-0clang/test/CodeGenSPIRV/spirv-host-adaptation-valist.cpp
+297-83 files not shown
+319-89 files

LLVM/project fc33de1llvm/lib/Analysis IVDescriptors.cpp

remove ;
DeltaFile
+1-1llvm/lib/Analysis/IVDescriptors.cpp
+1-11 files

LLVM/project 0ef679dllvm/lib/Transforms/Vectorize VPlanRecipes.cpp, llvm/test/Transforms/LoopVectorize compress-idioms-negative-tests.ll compress-idioms.ll

Move negative tests to new file
DeltaFile
+0-105llvm/test/Transforms/LoopVectorize/compress-idioms.ll
+94-0llvm/test/Transforms/LoopVectorize/compress-idioms-negative-tests.ll
+0-1llvm/lib/Transforms/Vectorize/VPlanRecipes.cpp
+94-1063 files

LLVM/project fcef276llvm/lib/Transforms/Vectorize VPlanTransforms.cpp, llvm/test/Transforms/LoopVectorize/VPlan vplan-based-stride-mv.ll

Don't multiversion `i1 %stride`
DeltaFile
+12-22llvm/test/Transforms/LoopVectorize/VPlan/vplan-based-stride-mv.ll
+10-0llvm/lib/Transforms/Vectorize/VPlanTransforms.cpp
+22-222 files

LLVM/project 9ef3985llvm/lib/Transforms/Vectorize VPlanTransforms.cpp, llvm/test/Transforms/LoopVectorize/VPlan vplan-based-stride-mv.ll

Fix replace logic to use proper casts
DeltaFile
+12-7llvm/lib/Transforms/Vectorize/VPlanTransforms.cpp
+2-2llvm/test/Transforms/LoopVectorize/VPlan/vplan-based-stride-mv.ll
+14-92 files

FreeBSD/doc b0569d5website/content/en/status/report-2025-07-2025-09 nuageinit.adoc

website: fix link in status report

PR: 291319
DeltaFile
+1-1website/content/en/status/report-2025-07-2025-09/nuageinit.adoc
+1-11 files

LLVM/project 53ad2aeclang/lib/StaticAnalyzer/Checkers BuiltinFunctionChecker.cpp, clang/test/Analysis builtin_overflow.c

[clang][StaticAnalysis] Fix an false negative bug in handling '__builtin*overflow'

For a binary operation 'A op B' and a result type 'T', these builtins
return true/false for whether the operation's result is a value 'T'
cannot hold. CSA models this by computing the operation's result in a
temporary type and comparing it against the bounds of 'T'.  However,
the temporary type is only twice as wide as 'T', not the
operands. When either operand is wider than 'T's doubled width, the
result of 'A op B' can silently wrap around before the comparison,
producing a false negative.

The solution is to find the proper type to temporarily hold the result
of 'A op B' from types of 'A' and 'B'.
DeltaFile
+23-6clang/lib/StaticAnalyzer/Checkers/BuiltinFunctionChecker.cpp
+9-0clang/test/Analysis/builtin_overflow.c
+32-62 files

NetBSD/pkgsrc kIAhbXFdoc CHANGES-2026

   Updated devel/SDL3, devel/mimalloc
VersionDeltaFile
1.5039+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc df4T0Qkdevel/mimalloc Makefile distinfo

   mimalloc: updated to 3.4.5

   3.4.5
   Unknown changes
VersionDeltaFile
1.14+4-4devel/mimalloc/distinfo
1.18+2-2devel/mimalloc/Makefile
+6-62 files

NetBSD/pkgsrc 8qEVA45devel/SDL3 PLIST Makefile

   SDL3: updated to 3.4.14

   3.4.14

   This is a stable bugfix release, with the following changes:

   GPU buffers and textures can have multiple read usages
   Fixed X11 crash if the IME service was shutdown in the background
   Fixed hang when hiding an X11 window on some window managers
   Fixed being unable to get clipboard text on older versions of macOS
   Fixed the 8BitDo Pro 3 controller showing up twice on macOS
   Fixed Xbox controllers not being detected if SDL is built with GameInput support
   Fixed pen creating phantom mouse events in relative mode on Android
VersionDeltaFile
1.12+4-4devel/SDL3/distinfo
1.14+2-3devel/SDL3/Makefile
1.13+2-2devel/SDL3/PLIST
+8-93 files

NetBSD/pkgsrc HgHog1Qdoc CHANGES-2026

   Updated multimedia/gstreamer1, net/openvpn, security/p11-kit
VersionDeltaFile
1.5038+4-1doc/CHANGES-2026
+4-11 files

NetBSD/pkgsrc wvkSrcPsecurity/p11-kit PLIST Makefile

   p11-kit: updated to 0.26.5

   0.26.5 (stable)
   * rpc: guard against overflow when decoding nested attributes (CVE-2026-18938)
VersionDeltaFile
1.37+4-4security/p11-kit/distinfo
1.17+2-2security/p11-kit/PLIST
1.46+2-2security/p11-kit/Makefile
+8-83 files

NetBSD/pkgsrc 7lieE52net/openvpn Makefile.common distinfo, net/openvpn-acct-wtmpx distinfo

   openvpn: updated to 2.7.6

   2.7.6

   Enable TCP_NODELAY by default and push it to clients
   options: make 'tun' the default for '--dev'
   Correctly calculate packet id size when epoch packet format is in use
   test_tls_crypt: Fix issue with temp file name on big endian systems
   ssl_pkt: Fix doxygen warning about read_control_auth
   t_client.sh.in: Do not run resolvectl if systemd is not running
   test_tls_crypt: Fix test failure on Windows
   ssl: Ignore hard reset packets with a non-zero packet id
   mingw: avoid C99 "hh" scanf length modifier
   interactive: forbid "--setenv opt" in startup data
   CMake: detect cmocka_version.h via include path, not by linking
   options: limit ping and keepalive values to one day
   Make --x509-username-field work with Mbed TLS
   Remove --providers from --help output for Mbed TLS
VersionDeltaFile
1.82+4-4net/openvpn/distinfo
1.54+4-4net/openvpn-nagios/distinfo
1.57+4-4net/openvpn-acct-wtmpx/distinfo
1.51+2-2net/openvpn/Makefile.common
+14-144 files

NetBSD/pkgsrc l8MqK7umultimedia/gst-plugins1-bad distinfo, multimedia/gst-plugins1-base distinfo

   gstreamer1: updated to 1.28.6

   1.28.6

   Highlighted bugfixes:

   Various security fixes and playback fixes
   playbin3, playbin: fix stalls after re-enabling previously disabled subtitles
   Fix regression in core if a pad is re-linked while changed sticky events are being pushed
   dtls/webrtc: fix some issues with OpenSSL 4.0.0
   RTP retransmission bitrate estimation fixes
   Fix RTP depayloading of SMPTE ST291 frames with multiple ANC packets
   Add H.266 muxing support to the Rust (f)mp4 muxers
   Better handling of input buffers without timestamps in Rust (f)mp4 muxers
   webrtcsink H.264 level/profile negotiation fixes and support for nvv4l2h265enc encoder
   SMPTE ST2038 ancillary metadata and closed caption combiner improvements
   Fix SEI insertion into H.265/HEVC streams with alpha
   Windows D3D11 WinRT screen capture element fixes
   Improved coded buffer size handling for VA encoders

    [5 lines not shown]
VersionDeltaFile
1.40+4-4net/gst-rtsp-server/distinfo
1.54+4-4multimedia/py-gstreamer1/distinfo
1.80+4-4multimedia/gstreamer1/distinfo
1.43+4-4multimedia/gst-plugins1-editing-services/distinfo
1.87+4-4multimedia/gst-plugins1-base/distinfo
1.79+4-4multimedia/gst-plugins1-bad/distinfo
+24-244 files not shown
+38-3810 files