OPNSense/core 81ecc79src/opnsense/scripts/kea kea_prefix_watcher.py

kea: Add scope ID to prefix watcher link local address to fix route add (#9778)

(cherry picked from commit c145e5c30e0121153fcbaf125b29dbfbb68af101)
DeltaFile
+2-1src/opnsense/scripts/kea/kea_prefix_watcher.py
+2-11 files

OPNSense/core 82a3115src/opnsense/mvc/app/models/OPNsense/Firewall/FieldTypes FilterRuleField.php

Firewall: Rules [new] - missing implementation for disablereplyto, closes https://github.com/opnsense/core/issues/9785

(cherry picked from commit 4a6094b0019bbf99e74525338edb3829140bb86e)
DeltaFile
+6-1src/opnsense/mvc/app/models/OPNsense/Firewall/FieldTypes/FilterRuleField.php
+6-11 files

FreeBSD/ports 1f911e9net-im/ejabberd pkg-plist distinfo

net-im/ejabberd: Update to 26.02
DeltaFile
+31-1net-im/ejabberd/pkg-plist
+7-7net-im/ejabberd/distinfo
+6-4net-im/ejabberd/Makefile
+44-123 files

OPNSense/core 59cf594src/www firewall_nat_out_edit.php interfaces_ppps_edit.php

www: change all the others for previous
DeltaFile
+12-14src/www/firewall_nat_out_edit.php
+5-11src/www/interfaces_ppps_edit.php
+5-10src/www/firewall_rules.php
+4-6src/www/interfaces.php
+2-2src/www/system_authservers.php
+2-2src/www/firewall_nat_out.php
+30-452 files not shown
+32-478 files

LLVM/project 6e23353llvm/lib/CodeGen/SelectionDAG DAGCombiner.cpp, llvm/test/CodeGen/X86 dag-stlf-mismatch.ll

[DAGCombiner] Fix crash caused by illegal InterVT in ForwardStoreValueToDirectLoad (#181175)

This patch fixes an assertion failure in ForwardStoreValueToDirectLoad
during DAGCombine.

The crash occurs when `STLF (Store-to-Load Forwarding)` creates an
illegal intermediate bitcast type (e.g., `v128i1` when bridging a
128-bit store to a `<32 x i1>` load on X86). Since `v128i1` is not a
legal mask type for the backend, it violates the expectations of the
LegalizeDAG pass.

The fix adds a `TLI.isTypeLegal(InterVT)` check to ensure that the
intermediate type used for the transformation is supported by the
target.

Fixes #181130
DeltaFile
+92-33llvm/test/CodeGen/X86/dag-stlf-mismatch.ll
+2-1llvm/lib/CodeGen/SelectionDAG/DAGCombiner.cpp
+94-342 files

GhostBSD/ports c7dbec6graphics/blender pkg-plist, graphics/blender/files patch-extern_audaspace_plugins_ffmpeg_FFMPEGWriter.cpp patch-extern_audaspace_plugins_ffmpeg_FFMPEGReader.cpp

graphics/blender: update to 4.5.6
DeltaFile
+247-250graphics/blender/pkg-plist
+0-87graphics/blender/files/patch-extern_audaspace_plugins_ffmpeg_FFMPEGWriter.cpp
+10-66graphics/blender/files/patch-extern_audaspace_plugins_ffmpeg_FFMPEGReader.cpp
+0-26graphics/blender/files/patch-source_blender_imbuf_intern_anim__movie.cc
+0-18graphics/blender/files/patch-intern_ffmpeg_ffmpeg__compat.h
+16-0graphics/blender/files/patch-source_blender_imbuf_movie_intern_movie__write__audio.cc
+273-4474 files not shown
+279-47510 files

LLVM/project 45e666allvm/include/llvm/CodeGen InlineAsmPrepare.h, llvm/lib/CodeGen InlineAsmPrepare.cpp CallBrPrepare.cpp

[Clang][inlineasm] Add special support for "rm" output constraints (#92040)

Clang isn't able to support multiple constraints on inputs and outputs,
like "rm". Instead, it picks the "safest" one to use, i.e. the memory
constraint for "rm". This leads to obviously horrible code:

  asm __volatile__ ("pushf\n\t"
                    "popq %0"
                    : "=rm" (x));

is compiled to:

        pushf
        popq -8(%rsp)
        movq    -8(%rsp), %rax

It gets worse when inlined into other functions, because it may
introduce
a stack where none is needed.

    [16 lines not shown]
DeltaFile
+1,307-0llvm/test/CodeGen/X86/asm-constraints-rm.ll
+621-0llvm/lib/CodeGen/InlineAsmPrepare.cpp
+0-252llvm/lib/CodeGen/CallBrPrepare.cpp
+51-0llvm/test/CodeGen/X86/inline-asm-prepare-memory.ll
+30-1llvm/lib/CodeGen/SelectionDAG/TargetLowering.cpp
+31-0llvm/include/llvm/CodeGen/InlineAsmPrepare.h
+2,040-25334 files not shown
+2,128-33740 files

HardenedBSD/ports d7eb8a5databases/redis84 Makefile, databases/redis84/files redis.in

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+0-209java/openjdk19/files/patch-src_java.desktop_share_native_libfontmanager_freetypeScaler.c
+0-184java/openjdk19/Makefile
+0-89java/openjdk19/files/patch-src_jdk.management_unix_native_libmanagement__ext_OperatingSystemImpl.c
+85-0databases/redis84/Makefile
+67-0databases/redis84/files/redis.in
+0-46java/openjdk19/files/patch-src_hotspot_os__cpu_bsd__x86_safefetch__bsd__x86__32.S
+152-528101 files not shown
+714-882107 files

OPNSense/core 4a6094bsrc/opnsense/mvc/app/models/OPNsense/Firewall/FieldTypes FilterRuleField.php

Firewall: Rules [new] - missing implementation for disablereplyto, closes https://github.com/opnsense/core/issues/9785
DeltaFile
+6-1src/opnsense/mvc/app/models/OPNsense/Firewall/FieldTypes/FilterRuleField.php
+6-11 files

GhostBSD/ports 3206cd4x11/ghostbsd-xfce-settings Makefile

x11/ghostbsd-xfce-settings: fix indentation in Makefile
DeltaFile
+1-1x11/ghostbsd-xfce-settings/Makefile
+1-11 files

FreeBSD/ports e661d7fjava/openjdk19 Makefile, java/openjdk19/files patch-src_java.desktop_share_native_libfontmanager_freetypeScaler.c patch-src_jdk.management_unix_native_libmanagement__ext_OperatingSystemImpl.c

java/openjdk19: Remove expired port

2026-02-12 java/openjdk19: No longer supported by upstream
DeltaFile
+0-209java/openjdk19/files/patch-src_java.desktop_share_native_libfontmanager_freetypeScaler.c
+0-184java/openjdk19/Makefile
+0-89java/openjdk19/files/patch-src_jdk.management_unix_native_libmanagement__ext_OperatingSystemImpl.c
+0-46java/openjdk19/files/patch-src_hotspot_os__cpu_bsd__x86_safefetch__bsd__x86__32.S
+0-42java/openjdk19/files/patch-src_jdk.hotspot.agent_bsd_native_libsaproc_BsdDebuggerLocal.cpp
+0-21java/openjdk19/files/extra-patch-src_hotspot_share_runtime_arguments.cpp
+0-59113 files not shown
+1-73619 files

HardenedBSD/ports e661d7fjava/openjdk19 Makefile, java/openjdk19/files patch-src_java.desktop_share_native_libfontmanager_freetypeScaler.c patch-src_jdk.management_unix_native_libmanagement__ext_OperatingSystemImpl.c

java/openjdk19: Remove expired port

2026-02-12 java/openjdk19: No longer supported by upstream
DeltaFile
+0-209java/openjdk19/files/patch-src_java.desktop_share_native_libfontmanager_freetypeScaler.c
+0-184java/openjdk19/Makefile
+0-89java/openjdk19/files/patch-src_jdk.management_unix_native_libmanagement__ext_OperatingSystemImpl.c
+0-46java/openjdk19/files/patch-src_hotspot_os__cpu_bsd__x86_safefetch__bsd__x86__32.S
+0-42java/openjdk19/files/patch-src_jdk.hotspot.agent_bsd_native_libsaproc_BsdDebuggerLocal.cpp
+0-21java/openjdk19/files/extra-patch-src_hotspot_share_runtime_arguments.cpp
+0-59113 files not shown
+1-73619 files

HardenedBSD/ports a8fe008Mk bsd.default-versions.mk, Mk/Uses java.mk

Mk: unregister expired java/openjdk19
DeltaFile
+3-6Mk/Uses/java.mk
+1-1Mk/bsd.default-versions.mk
+4-72 files

FreeBSD/ports a8fe008Mk bsd.default-versions.mk, Mk/Uses java.mk

Mk: unregister expired java/openjdk19
DeltaFile
+3-6Mk/Uses/java.mk
+1-1Mk/bsd.default-versions.mk
+4-72 files

FreeBSD/ports 6ddce15security/openssl33-quictls patch-crypto_async_arch_async__posix.h Makefile

security/openssl33-quictls: Unbreak build
DeltaFile
+32-0security/openssl33-quictls/patch-crypto_async_arch_async__posix.h
+0-2security/openssl33-quictls/Makefile
+32-22 files

HardenedBSD/ports 6ddce15security/openssl33-quictls patch-crypto_async_arch_async__posix.h Makefile

security/openssl33-quictls: Unbreak build
DeltaFile
+32-0security/openssl33-quictls/patch-crypto_async_arch_async__posix.h
+0-2security/openssl33-quictls/Makefile
+32-22 files

FreeNAS/freenas 4548de8src/middlewared/middlewared/utils security.py, tests/unit test_shadow_account_policy.py

Do not ever apply password aging rules to root

When STIG mode is enabled we enforce password aging rules,
among other things, an expired account will fail internal
pam_acct_mgmt calls (even through unix authentication).

Password aging rules are a separate account control mechanism
from disabling a password (* in the shadow file) and should
not be applied ever to the root account. The proper STIG
mode configuration should be having password disabled for
root, but never allowing the account to age out. The reason
for this is that there are various local processes that
use the root account, and require pam_acct_mgmt to succeed:
for example, cronjobs will login() as root to perform tasks.

This commit ensures that the root account will never have
password aging rules applied.
DeltaFile
+4-3tests/unit/test_shadow_account_policy.py
+6-1src/middlewared/middlewared/utils/security.py
+10-42 files

FreeBSD/ports 716ec19devel/protoc-gen-go-grpc distinfo Makefile

devel/protoc-gen-go-grpc: Update to snapshot 830c909
DeltaFile
+5-5devel/protoc-gen-go-grpc/distinfo
+3-2devel/protoc-gen-go-grpc/Makefile
+8-72 files

HardenedBSD/ports 716ec19devel/protoc-gen-go-grpc distinfo Makefile

devel/protoc-gen-go-grpc: Update to snapshot 830c909
DeltaFile
+5-5devel/protoc-gen-go-grpc/distinfo
+3-2devel/protoc-gen-go-grpc/Makefile
+8-72 files

FreeBSD/ports d8aec2bnet-im/py-slack-sdk distinfo Makefile

net-im/py-slack-sdk: Update version 3.39.0=>3.40.0

Changelog: https://github.com/slackapi/python-slack-sdk/releases/tag/v3.40.0
DeltaFile
+3-3net-im/py-slack-sdk/distinfo
+1-1net-im/py-slack-sdk/Makefile
+4-42 files

FreeBSD/ports 4c7579csysutils/opentofu distinfo Makefile

sysutils/opentofu: Update version 1.11.4=>1.11.5

Changelog: https://github.com/opentofu/opentofu/releases/tag/v1.11.5
DeltaFile
+5-5sysutils/opentofu/distinfo
+1-2sysutils/opentofu/Makefile
+6-72 files

FreeBSD/ports f68b637databases/redis84 Makefile, databases/redis84/files redis.in patch-deps_hiredis_Makefile

databases/redis84: New port

This is the redis 8.4.X branch of redis copied from databases/redis in
preparation for upgrading redis to redis 8.6.X branch.
DeltaFile
+85-0databases/redis84/Makefile
+67-0databases/redis84/files/redis.in
+41-0databases/redis84/files/patch-deps_hiredis_Makefile
+39-0databases/redis84/files/patch-deps_hiredis_net.c
+39-0databases/redis84/files/sentinel.in
+38-0databases/redis84/files/patch-redis.conf
+309-012 files not shown
+462-018 files

FreeBSD/ports 6c90df3emulators/qemu distinfo Makefile

emulators/qemu: Update version 10.2.0=>10.2.1

Changelog: https://wiki.qemu.org/ChangeLog/10.2
DeltaFile
+3-3emulators/qemu/distinfo
+1-2emulators/qemu/Makefile
+4-52 files

HardenedBSD/ports f68b637databases/redis84 Makefile, databases/redis84/files redis.in patch-deps_hiredis_Makefile

databases/redis84: New port

This is the redis 8.4.X branch of redis copied from databases/redis in
preparation for upgrading redis to redis 8.6.X branch.
DeltaFile
+85-0databases/redis84/Makefile
+67-0databases/redis84/files/redis.in
+41-0databases/redis84/files/patch-deps_hiredis_Makefile
+39-0databases/redis84/files/patch-deps_hiredis_net.c
+39-0databases/redis84/files/sentinel.in
+38-0databases/redis84/files/patch-redis.conf
+309-012 files not shown
+462-018 files

HardenedBSD/ports 6c90df3emulators/qemu distinfo Makefile

emulators/qemu: Update version 10.2.0=>10.2.1

Changelog: https://wiki.qemu.org/ChangeLog/10.2
DeltaFile
+3-3emulators/qemu/distinfo
+1-2emulators/qemu/Makefile
+4-52 files

HardenedBSD/ports d8aec2bnet-im/py-slack-sdk distinfo Makefile

net-im/py-slack-sdk: Update version 3.39.0=>3.40.0

Changelog: https://github.com/slackapi/python-slack-sdk/releases/tag/v3.40.0
DeltaFile
+3-3net-im/py-slack-sdk/distinfo
+1-1net-im/py-slack-sdk/Makefile
+4-42 files

HardenedBSD/ports 4c7579csysutils/opentofu distinfo Makefile

sysutils/opentofu: Update version 1.11.4=>1.11.5

Changelog: https://github.com/opentofu/opentofu/releases/tag/v1.11.5
DeltaFile
+5-5sysutils/opentofu/distinfo
+1-2sysutils/opentofu/Makefile
+6-72 files

FreeBSD/ports f5f7e74devel/py-capstone distinfo Makefile

devel/py-capstone: Update version 5.0.6=>5.0.7

Changelog: https://github.com/capstone-engine/capstone/releases/tag/5.0.7
DeltaFile
+3-3devel/py-capstone/distinfo
+1-1devel/py-capstone/Makefile
+4-42 files

FreeBSD/ports 89f4505devel/py-tox Makefile distinfo

devel/py-tox: Update version 4.34.1=>4.35.0

Changelog: https://github.com/tox-dev/tox/releases/tag/4.35.0
DeltaFile
+5-5devel/py-tox/Makefile
+3-3devel/py-tox/distinfo
+8-82 files

FreeBSD/ports 42fd25awww/py-gunicorn distinfo Makefile

www/py-gunicorn: Update version 25.0.2=>25.0.3

Changelog: https://github.com/benoitc/gunicorn/releases/tag/25.0.3
DeltaFile
+3-3www/py-gunicorn/distinfo
+1-1www/py-gunicorn/Makefile
+4-42 files