FreeBSD/ports 646e75dsecurity/vuxml/vuln 2026.xml

security/vuxml: Add mongodb vulnerabilities

CVE-2026-6914
        Base Score:     7.5 HIGH
        Vector:         CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

 CVE-2026-6915
        Base Score:     4.3 MEDIUM
        Vector:         CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
DeltaFile
+41-0security/vuxml/vuln/2026.xml
+41-01 files

LLVM/project f93fc5elldb/tools/lldb-dap/extension/src debug-configuration-provider.ts, lldb/tools/lldb-dap/tool lldb-dap.cpp

[lldb-dap][vscode][windows] check if Python is installed properly before starting lldb-dap (#181124)
DeltaFile
+20-4lldb/tools/lldb-dap/extension/src/debug-configuration-provider.ts
+4-0lldb/tools/lldb-dap/tool/lldb-dap.cpp
+24-42 files

LLVM/project 37ff1f2.ci compute_projects.py compute_projects_test.py

[lldb][windows] build lldb and lldb-dap in PR testing (#195884)
DeltaFile
+24-6.ci/compute_projects.py
+18-6.ci/compute_projects_test.py
+42-122 files

OPNSense/core 3074b2e. plist, src/opnsense/mvc/app/models/OPNsense/Base BaseModel.php

mvc: fix validation via string cast, mostly for UpdateOnlyTextField

PR: https://github.com/opnsense/plugins/pull/5404
(cherry picked from commit 25b80452fd4776b917656d905a4bfce011609ea3)
DeltaFile
+64-0src/opnsense/mvc/tests/app/models/OPNsense/Base/FieldTypes/UpdateOnlyTextFieldTest.php
+27-26src/opnsense/mvc/tests/app/models/OPNsense/Base/FieldTypes/Field_Framework_TestCase.php
+2-2src/opnsense/mvc/app/models/OPNsense/Base/BaseModel.php
+1-0plist
+94-284 files

OPNSense/core 8344941src/opnsense/mvc/app/views/OPNsense/Routing groups.volt

small style tweaks
DeltaFile
+6-5src/opnsense/mvc/app/views/OPNsense/Routing/groups.volt
+6-51 files

LLVM/project e878583mlir/docs/DefiningDialects _index.md Operations.md, mlir/include/mlir/IR DialectBase.td

[MLIR][ODS] Add strict property assembly format mode

Introduce a dialect-level ODS flag for strict property handling in declarative
assembly formats. It is disabled by default for now, preserving existing parser
behavior unless a dialect opts in.

Enable the mode immediately for dialects whose declarative assembly formats
already satisfy these binding rules.

When enabled, a property-backed op format must bind every inherent attribute
and property directly or include prop-dict.

Generated parsers for opted-in dialects also reject inherent attributes that
arrive through attr-dict, preventing Operation::setAttrs from populating
properties through that path.

Add mlir-tblgen coverage and document default and strict dialect behavior.

Assisted-by: Codex
DeltaFile
+57-3mlir/tools/mlir-tblgen/OpFormatGen.cpp
+58-0mlir/test/mlir-tblgen/op-format.td
+26-0mlir/test/mlir-tblgen/op-format-invalid.td
+20-0mlir/docs/DefiningDialects/_index.md
+7-0mlir/docs/DefiningDialects/Operations.md
+6-0mlir/include/mlir/IR/DialectBase.td
+174-322 files not shown
+202-328 files

OPNSense/core 89d15a5src/opnsense/mvc/app/models/OPNsense/Kea KeaDhcpv6.php

Add a small guard to the pd_pool generation so it doesnt pass null into explode
DeltaFile
+3-0src/opnsense/mvc/app/models/OPNsense/Kea/KeaDhcpv6.php
+3-01 files

OPNSense/core 01b79c6src/etc/inc/plugins.inc.d kea.inc

Always pass model into kea_generate_dhcpv6()
DeltaFile
+2-3src/etc/inc/plugins.inc.d/kea.inc
+2-31 files

FreeBSD/ports 3f49881news/inn Makefile, news/inn-current distinfo Makefile

news/inn-current: refresh ovsqlite patches
DeltaFile
+11-1news/inn-current/distinfo
+5-0news/inn/Makefile
+1-1news/inn-current/Makefile
+17-23 files

FreeBSD/src 5aedbafsys/dev/sound/pcm sound.c sound.h

sound: Retire unused snddev_info->bufsz

Sponsored by:   The FreeBSD Foundation
MFC after:      1 week

(cherry picked from commit 5e9f2a6aefabec01c587a169fd5efe3a2720a8e5)
DeltaFile
+0-9sys/dev/sound/pcm/sound.c
+0-1sys/dev/sound/pcm/sound.h
+0-102 files

FreeBSD/src ed919bfsys/dev/sound/usb uaudio.c, sys/dev/usb usbdevs

snd_uaudio: Support Roland UA-33

Apply the appropriate quirk. Also, introduce a new uaudio_vendor_audio
table, similar to uaudio_vendor_midi, which includes non-standard USB
audio devices. The Roland UA-33 needs this, bceause it comes with
bInterfaceClass = 0xff (vendor-specific), so snd_uaudio(4) doesn't
detect it.

PR:             294814
Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Reviewed by:    emaste
Pull Request:   https://ron-dev.freebsd.org/FreeBSD/src/pulls/24

(cherry picked from commit 549e740619873716b796a841a10f56fae3c3ad49)
DeltaFile
+10-0sys/dev/sound/usb/uaudio.c
+1-0sys/dev/usb/quirk/usb_quirk.c
+1-0sys/dev/usb/usbdevs
+12-03 files

OPNSense/core 67c172asrc/etc/inc/plugins.inc.d kea.inc

Use mwexecf instead
DeltaFile
+1-1src/etc/inc/plugins.inc.d/kea.inc
+1-11 files

LLVM/project 535814fllvm/lib/CodeGen/SelectionDAG LegalizeDAG.cpp TargetLowering.cpp, llvm/test/CodeGen/AMDGPU arbitrary-fp-to-float.ll

[SelectionDAG] Support vector types in llvm.convert.from.arbitrary.fp expansion (#196185)

Move the bit-twiddling expansion of ISD::CONVERT_FROM_ARBITRARY_FP from
LegalizeDAG to TargetLowering and make it working on vector destination
types.
DeltaFile
+665-0llvm/test/CodeGen/NVPTX/arbitrary-fp-to-float.ll
+595-8llvm/test/CodeGen/AMDGPU/arbitrary-fp-to-float.ll
+3-224llvm/lib/CodeGen/SelectionDAG/LegalizeDAG.cpp
+69-151llvm/test/CodeGen/X86/arbitrary-fp-to-float.ll
+190-0llvm/lib/CodeGen/SelectionDAG/TargetLowering.cpp
+6-0llvm/lib/CodeGen/SelectionDAG/LegalizeVectorOps.cpp
+1,528-3831 files not shown
+1,534-3837 files

FreeBSD/ports 7878106java/javavmwrapper Makefile, java/javavmwrapper/src javavmwrapper.sh

java/javavmwrapper: JAVA_VERSION does not work with openjdk25

Remove the hard coded lists of java version numbers to iterate over when
JAVA_VERSION is set to N+. Instead use N as the lowest boundary, and the
latest available JDK as the upper bound, and just scan for the highest
available version satisfying the requirement.

Ideally it should be possible to deduce the upper bound from the
available java versions in ${PREFIX}/etc/javavms, but leaving that for
later.

Co-authored-by: jonc at chen.org.nz
PR:             293231
Reported by:    jonc at chen.org.nz
Sponsored by:   The FreeBSD Foundation
DeltaFile
+5-20java/javavmwrapper/src/javavmwrapper.sh
+1-1java/javavmwrapper/Makefile
+6-212 files

LLVM/project 75f8a17llvm/lib/Target/AMDGPU AMDGPURegBankLegalizeRules.cpp, llvm/test/CodeGen/AMDGPU llvm.amdgcn.rsq.ll llvm.amdgcn.rsq.f16.ll

[AMDGPU][GlobalISel] Add register bank legalize rules for PST rsq. (#196116)
DeltaFile
+71-0llvm/test/CodeGen/AMDGPU/llvm.amdgcn.rsq.ll
+8-2llvm/test/CodeGen/AMDGPU/llvm.amdgcn.rsq.f16.ll
+4-2llvm/lib/Target/AMDGPU/AMDGPURegBankLegalizeRules.cpp
+83-43 files

LLVM/project 32f909ellvm/test/TableGen/GlobalISelEmitter RegSequenceBadSubReg.td, llvm/utils/TableGen GlobalISelEmitter.cpp

[TableGen][GlobalISel] Skip REG_SEQUENCE with incompatible subreg index (#196184)

The REG_SEQUENCE branch of GlobalISelEmitter::constrainOperands called
SuperClass->getMatchingSubClassWithSubRegs(...) and dereferenced the
returned SrcRCDstRCPair unconditionally, aborting on a libstdc++
optional assertion when incorrect subreg index was passed.

Add the missing guard so the malformed pattern is reported via
failedImport (a skipped pattern) instead of crashing tblgen.

Assisted by Claude.

Fixes https://github.com/llvm/llvm-project/issues/172690
DeltaFile
+14-0llvm/test/TableGen/GlobalISelEmitter/RegSequenceBadSubReg.td
+3-0llvm/utils/TableGen/GlobalISelEmitter.cpp
+17-02 files

OPNSense/core 8ed46cdsrc/etc/inc/plugins.inc.d kea.inc

use nested ifs inside kea_newwanip
DeltaFile
+9-10src/etc/inc/plugins.inc.d/kea.inc
+9-101 files

FreeBSD/doc c06ad42documentation/content/en/books/porters-handbook/uses _index.adoc

[phb][Uses]: Improve nodejs

Update versions and arguments.
DeltaFile
+3-2documentation/content/en/books/porters-handbook/uses/_index.adoc
+3-21 files

OPNSense/core 28ac053src/opnsense/mvc/app/controllers/OPNsense/Interfaces/Api VipSettingsController.php

interfaces: style sweep
DeltaFile
+0-1src/opnsense/mvc/app/controllers/OPNsense/Interfaces/Api/VipSettingsController.php
+0-11 files

OpenBSD/ports P1m5lMznet/powerdns_recursor distinfo Makefile

   Update to PowerDNS Recursor 5.4.1

   See https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2026-03.html
VersionDeltaFile
1.62+2-2net/powerdns_recursor/distinfo
1.73+1-2net/powerdns_recursor/Makefile
+3-42 files

OPNSense/core cfc150esrc/etc/inc/plugins.inc.d kea.inc

Update src/etc/inc/plugins.inc.d/kea.inc

Co-authored-by: Franco Fichtner <franco at opnsense.org>
DeltaFile
+1-1src/etc/inc/plugins.inc.d/kea.inc
+1-11 files

OPNSense/core d5a6489src/etc/inc/plugins.inc.d kea.inc

Update src/etc/inc/plugins.inc.d/kea.inc

Co-authored-by: Franco Fichtner <franco at opnsense.org>
DeltaFile
+1-3src/etc/inc/plugins.inc.d/kea.inc
+1-31 files

OPNSense/core 6d45f52src/opnsense/mvc/app/models/OPNsense/Kea KeaDhcpv6.php

Remove some unused cruft in KeaDhcpv6.php
DeltaFile
+0-3src/opnsense/mvc/app/models/OPNsense/Kea/KeaDhcpv6.php
+0-31 files

OPNSense/core 91eb9f9src/opnsense/mvc/app/controllers/OPNsense/Interfaces/Api VipSettingsController.php

interfaces: restructure this, move null check up
DeltaFile
+7-3src/opnsense/mvc/app/controllers/OPNsense/Interfaces/Api/VipSettingsController.php
+7-31 files

OPNSense/core afa7434src/opnsense/mvc/app/controllers/OPNsense/Interfaces/Api VipSettingsController.php

interfaces: account for multiple UUIDs in VIP deletion

https://github.com/opnsense/core/issues/10269
DeltaFile
+31-22src/opnsense/mvc/app/controllers/OPNsense/Interfaces/Api/VipSettingsController.php
+31-221 files

LLVM/project 02b072emlir/include/mlir/Dialect/SPIRV/IR SPIRVBase.td, mlir/test/Dialect/SPIRV/IR logical-ops.mlir

[mlir][spirv] Allow composite types in SelectOp (#196105)

This is allowed from the version 1.4 of the spec.
DeltaFile
+25-0mlir/test/Target/SPIRV/logical-ops.mlir
+18-0mlir/test/Dialect/SPIRV/IR/logical-ops.mlir
+2-2mlir/include/mlir/Dialect/SPIRV/IR/SPIRVBase.td
+45-23 files

NetBSD/pkgsrc G54pyi0doc CHANGES-2026

   doc: Updated graphics/inkscape to 1.4.4
VersionDeltaFile
1.2861+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc UV74b2Jgraphics/inkscape distinfo PLIST

   inkscape: update to 1.4.4.

   Inkscape 1.4.4 is a maintenance and bugfix release, which brings you

       20 crash fixes, among them for three nasty bugs where Inkscape wouldn't even start
       almost 20 bug fixes
       6 performance improvements
       a new palette
       a new button for rotating stars and polygons into their 'neutral' or 'upright' position
       27 updated interface translations
       15 updated documentation translations
       installation files for Windows on Arm
VersionDeltaFile
1.107+4-4graphics/inkscape/distinfo
1.42+6-2graphics/inkscape/PLIST
1.323+3-4graphics/inkscape/Makefile
+13-103 files

OPNSense/core bc10a18src/etc/inc/plugins.inc.d kea.inc

Do not call kea_generage_dhcpv6 helper directly
DeltaFile
+6-1src/etc/inc/plugins.inc.d/kea.inc
+6-11 files

LLVM/project 9dc3d00clang/lib/Basic TargetInfo.cpp

Update clang/lib/Basic/TargetInfo.cpp
DeltaFile
+1-1clang/lib/Basic/TargetInfo.cpp
+1-11 files