FreeBSD/ports aae1170security/py-passlib Makefile, security/py-passlib/files patch-bcrypt.py

security/py-passlib: unbreak with bcrypt 5

PR:             293464
Reported by:    Thomas Kurschel
Obtained from:  https://github.com/ansible/ansible/issues/85919

While here actually add dependency on py-bcrypt
DeltaFile
+55-0security/py-passlib/files/patch-bcrypt.py
+2-1security/py-passlib/Makefile
+57-12 files

LLVM/project 1adc2cautils/bazel/llvm-project-overlay/libc BUILD.bazel, utils/bazel/llvm-project-overlay/libc/test/src/stdlib BUILD.bazel

[bazel][libc] Add targets for realpath
DeltaFile
+142-12utils/bazel/llvm-project-overlay/libc/BUILD.bazel
+28-0utils/bazel/llvm-project-overlay/libc/test/src/stdlib/BUILD.bazel
+170-122 files

FreeBSD/src 0343ab8sys/sys videoio.h

video: disable the static assertions for now

The previous version of this work included the definitions but
not the static asserts.  It's tripping up in some CI builds, likely
due to compat API building.

Since this isn't any more or less broken than before, disable the
static assertions until we figure out a proper path for this.

Fixes: 9c9428825f4c55e3cb37412c661bb9d385db4c68 (video: add generic video(4) capture framework)
DeltaFile
+6-0sys/sys/videoio.h
+6-01 files

HardenedBSD/src 7f23ff7sys/dev/firewire fwcam.c, sys/dev/usb/video uvideo_v4l2.h uvideo.c

Merge remote-tracking branch 'rad/hardened/current/master' into hardened/current/pledge
DeltaFile
+501-1,327sys/dev/usb/video/uvideo.c
+1,382-0sys/dev/video/video.c
+528-292sys/dev/firewire/fwcam.c
+512-0sys/sys/videoio.h
+0-502sys/dev/usb/video/uvideo_v4l2.h
+0-450usr.sbin/fwcamctl/fwcamctl.c
+2,923-2,57117 files not shown
+3,506-2,84323 files

HardenedBSD/src dc98fc9sys/dev/firewire fwcam.c, sys/dev/usb/video uvideo_v4l2.h uvideo.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+501-1,327sys/dev/usb/video/uvideo.c
+1,382-0sys/dev/video/video.c
+528-292sys/dev/firewire/fwcam.c
+512-0sys/sys/videoio.h
+0-502sys/dev/usb/video/uvideo_v4l2.h
+0-450usr.sbin/fwcamctl/fwcamctl.c
+2,923-2,57117 files not shown
+3,506-2,84323 files

HardenedBSD/ports 71a4dcbsecurity/vuxml/vuln 2026.xml, www/nginx-acme Makefile Makefile.cargo

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+67-69www/nginx-acme/distinfo
+69-46www/tgpt/files/modules.txt
+33-34www/nginx-acme/Makefile.cargo
+38-0security/vuxml/vuln/2026.xml
+15-17www/nginx-acme/Makefile
+0-29www/py-flask-limiter3/Makefile
+222-19570 files not shown
+481-39176 files

LLVM/project 08cb7d9llvm/include/llvm/Support GenericDomTreeConstruction.h

[DomTree] Store immediate dominator as DFS number. NFC (#215059)

Replace the local variable `IDoms` and the pointer `InfoRec::IDom` with
a DFS number member.

Since `attachNewSubtree` and `reattachExistingSubtree` walk NumToNode in
DFS order, they can index IDom directly. Replace an always-false `if
(DT.getNode(W))` condition with an assert.
DeltaFile
+20-31llvm/include/llvm/Support/GenericDomTreeConstruction.h
+20-311 files

OpenZFS/src eec144acmd/zstream zstream_queue.h zstream_queue.c

zstream: zstream_queue bug fixes and simplifications

This PR makes several changes to `zstream_queue.c` aimed at
bulletproofing and simplification.

### Remove thread pool spindown

This PR removes code that decomissioned worker threads once the last
remaining queue had completed. The interlock between this operation and
the creation of new queues complicated the locking system significantly
and is known to have introduced at least two subtle locking bugs. With
this change, the thread pool will be created once and retained until
the process exits.

### Remove lock-free queue scoring

The code is designed to work correctly even without scoring threads
holding the queue mutexes of the queues they're examining. However,
I've confirmed through performance testing that lock-free operation

    [39 lines not shown]
DeltaFile
+134-180cmd/zstream/zstream_queue.c
+5-1cmd/zstream/zstream_queue.h
+139-1812 files

NetBSD/pkgsrc Fb8ZeTMmk/defaults options.description

   mk: describe libshumate option
VersionDeltaFile
1.764+1-0mk/defaults/options.description
+1-01 files

NetBSD/pkgsrc i29edOygraphics/geeqie distinfo, graphics/geeqie/patches patch-src_cellrenderericon.cc

   geeqie: add upstream bug report URL
VersionDeltaFile
1.48+2-2graphics/geeqie/distinfo
1.2+2-1graphics/geeqie/patches/patch-src_cellrenderericon.cc
+4-32 files

HardenedBSD/ports 2122221sysutils/powerdxx/files patch-src_libloadplay.cpp patch-src_utility.hpp

sysutils/powerdxx: Fix build error on 15-Stable

PR:             296481
Submitted by:   Martin Neubauer
DeltaFile
+11-0sysutils/powerdxx/files/patch-src_libloadplay.cpp
+11-0sysutils/powerdxx/files/patch-src_utility.hpp
+22-02 files

FreeBSD/ports 2122221sysutils/powerdxx/files patch-src_utility.hpp patch-src_libloadplay.cpp

sysutils/powerdxx: Fix build error on 15-Stable

PR:             296481
Submitted by:   Martin Neubauer
DeltaFile
+11-0sysutils/powerdxx/files/patch-src_utility.hpp
+11-0sysutils/powerdxx/files/patch-src_libloadplay.cpp
+22-02 files

NetBSD/pkgsrc 5B6Mte5doc TODO CHANGES-2026

   doc: Updated textproc/rumdl to 0.2.52
VersionDeltaFile
1.27726+1-2doc/TODO
1.5116+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc 1AA4KNttextproc/rumdl Makefile distinfo

   rumdl: update to 0.2.52.

   0.2.52

   Fixed

       md012: report blank lines before a code block that ends the document (#791) (e897556)
       rules: treat a template shortcode tag as opaque markup (6962184)
       cli: report a piped document's findings on stdout like every other run (47f8a50)

   0.2.51

   Added

       md088: normalize quotes and dashes to ASCII (#763) (52e9844)

   Fixed

       config: keep a file's per-file-ignores out of the workspace index it feeds (2bb0ce7)

    [34 lines not shown]
VersionDeltaFile
1.48+4-4textproc/rumdl/distinfo
1.50+2-2textproc/rumdl/Makefile
+6-62 files

LLVM/project 3d88682compiler-rt/test/sanitizer_common/TestCases sanitizer_coverage_stack_depth.cpp sanitizer_coverage_inline_bool_flag.cpp

[sanitizer-common][rtsan] Mark unsupported tests (#213404)

From #213170, turning that PR into separate commits as suggested.

To enable rtsan in sanitizer common, first disable the tests that are
not trivially fixable (or will remain permanently unsupported).


Quoting from that other review, assuming all of these are merged and
rtsan is enabled for sanitizer-common
---
Darwin:
New tests that run and pass: 249
UNSUPPORTED: 26
Total: 275
UNSUPPORTED percentage: 9.5%

Linux is about the same, few additional unsupported:
New tests that run and pass: 249

    [6 lines not shown]
DeltaFile
+2-0compiler-rt/test/sanitizer_common/TestCases/sanitizer_coverage_stack_depth.cpp
+2-0compiler-rt/test/sanitizer_common/TestCases/sanitizer_coverage_inline_bool_flag.cpp
+2-0compiler-rt/test/sanitizer_common/TestCases/sanitizer_coverage_inline8bit_counter.cpp
+2-0compiler-rt/test/sanitizer_common/TestCases/sanitizer_coverage_control_flow.cpp
+2-0compiler-rt/test/sanitizer_common/TestCases/max_allocation_size.cpp
+2-0compiler-rt/test/sanitizer_common/TestCases/malloc_hook_get_allocated_size_fast.cpp
+12-036 files not shown
+71-142 files

NetBSD/pkgsrc-wip 9ed09d1. TODO, whisper.cpp Makefile distinfo

whisper.cpp: update to 1.9.2
DeltaFile
+3-3whisper.cpp/distinfo
+1-1whisper.cpp/Makefile
+0-1TODO
+4-53 files

NetBSD/pkgsrc qEMTeMwdatabases/rrdtool/patches patch-doc_Makefile.in

   rrdtool: remove obsolete patch
VersionDeltaFile
1.2+1-1databases/rrdtool/patches/patch-doc_Makefile.in
+1-11 files

NetBSD/pkgsrc hxBpPYxdoc TODO CHANGES-2026

   doc: Updated graphics/openexr to 3.4.14
VersionDeltaFile
1.27725+1-2doc/TODO
1.5115+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc 035E90xgraphics/openexr Makefile distinfo

   openexr: update to 3.4.14.

   ## Version 3.4.14 (August 6, 2026)

   v3.4.14 is a security-focused patch release. It fixes 15 CVEs plus a
   broad set of additional hardening changes uncovered by the same
   fuzzing/audit effort.

   For each of these vulnerabilities, an attacker's vector is a
   maliciously crafted `.exr` file that must be opened by a victim,
   whether through the OpenEXR/OpenEXRUtil C++ libraries, the
   command-line tools (`exrmetrics`, `exrmultiview`, `exrmultipart`), or
   the PyOpenEXR Python bindings. The primary flaw for most of the CVEs
   is **memory corruption** — heap buffer overflows and out-of-bounds
   reads/writes — which at minimum crashes the reading process (denial of
   service) and in several cases could plausibly be leveraged for
   information disclosure or, in the worst cases, arbitrary code
   execution.


    [243 lines not shown]
VersionDeltaFile
1.77+4-4graphics/openexr/distinfo
1.88+2-3graphics/openexr/Makefile
+6-72 files

LLVM/project b5f3fedllvm/lib/Transforms/Vectorize VPlanVerifier.cpp VPlan.cpp, llvm/unittests/Transforms/Vectorize VPlanVerifierTest.cpp

[VPlan] Move structural loop-region verification to verifier. (#215079)

VPlan::getVectorLoopRegion() finds the vector loop region by following
the last successor of each block, starting at the plan's entry. Verify
that plans have the shape this relies on: the entry must have no
predecessors, the region must be the only top-level loop region, and
each block on the path from the entry to the region must have a single
predecessor which has that block as its last successor.

This replaces the EXPENSIVE_CHECKS-only assert by checking in the
verifier, allowing better handling for VPlans violating the expectations
in unit tests.

Fixes an assertion with expensive checks after
https://github.com/llvm/llvm-project/pull/199437:
https://lab.llvm.org/buildbot/#/builders/187/builds/22485.
DeltaFile
+106-8llvm/unittests/Transforms/Vectorize/VPlanVerifierTest.cpp
+8-28llvm/lib/Transforms/Vectorize/VPlan.cpp
+19-0llvm/lib/Transforms/Vectorize/VPlanVerifier.cpp
+133-363 files

NetBSD/pkgsrc 5u0SBoEdoc TODO CHANGES-2026

   doc: Updated graphics/geeqie to 3.1
VersionDeltaFile
1.27724+1-2doc/TODO
1.5114+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc PzWAEeRgraphics/geeqie distinfo Makefile, graphics/geeqie/patches patch-src_cellrenderericon.cc

   geeqie: update to 3.1.

   Migrate to GTK4.
VersionDeltaFile
1.13+7-19graphics/geeqie/options.mk
1.1+17-0graphics/geeqie/patches/patch-src_cellrenderericon.cc
1.170+7-3graphics/geeqie/Makefile
1.47+5-4graphics/geeqie/distinfo
+36-264 files

NetBSD/pkgsrc EV3DnTZgeography/libshumate buildlink3.mk

   libshumate: add bl3.mk
VersionDeltaFile
1.1+20-0geography/libshumate/buildlink3.mk
+20-01 files

NetBSD/pkgsrc-wip 6e2931b. Makefile, libshumate DESCR distinfo

libshumate: remove, imported to pkgsrc/geography
DeltaFile
+0-588libshumate/PLIST
+0-32libshumate/Makefile
+0-5libshumate/distinfo
+0-1libshumate/DESCR
+0-1Makefile
+0-6275 files

NetBSD/pkgsrc r6yuZyVdoc CHANGES-2026

   doc: Added geography/libshumate version 1.6.2
VersionDeltaFile
1.5113+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc inLjKm0geography Makefile

   geography/Makefile: + libshumate
VersionDeltaFile
1.152+2-1geography/Makefile
+2-11 files

NetBSD/pkgsrc aKll8ySgeography/libshumate DESCR distinfo

   geography/libshumate: import libshumate-1.6.2

   libshumate is a GTK4 widget to display maps.
VersionDeltaFile
1.1+588-0geography/libshumate/PLIST
1.1+32-0geography/libshumate/Makefile
1.1+5-0geography/libshumate/distinfo
1.1+1-0geography/libshumate/DESCR
+626-04 files

OpenZFS/src b4f70cbmodule/zfs ddt.c

Fix negative time overflows in DDT pruning

- Account DDT entries created after prune start to histogram bin 0
(now) instead of the last one (long ago) due to negative overflow.
 - Return error when requested to prune for more days than passed
since the epoch.

Reviewed-by: Brian Behlendorf <behlendorf1 at llnl.gov>
Signed-off-by: Alexander Motin <alexander.motin at TrueNAS.com>
Closes #18886
DeltaFile
+7-4module/zfs/ddt.c
+7-41 files

NetBSD/pkgsrc EPwRZpNdoc TODO CHANGES-2026

   doc: Updated databases/hiredis to 1.4.1
VersionDeltaFile
1.27723+1-2doc/TODO
1.5112+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc 13bDuCFdatabases/hiredis PLIST Makefile

   hiredis: update to 1.4.1.

   This is a security fix release. All users of hiredis 1.4.x are
   strongly encouraged to upgrade.
VersionDeltaFile
1.19+4-4databases/hiredis/distinfo
1.9+2-2databases/hiredis/PLIST
1.15+2-2databases/hiredis/Makefile
+8-83 files