FreeBSD/ports 82aeb38security/vuxml/vuln 2026.xml

security/vuxml: update lang/python315 poplib entry

Commit existed since 3.15.0.a6
DeltaFile
+2-2security/vuxml/vuln/2026.xml
+2-21 files

LLVM/project 125c8d3llvm/lib/DWARFLinker/Parallel AcceleratorRecordsSaver.cpp, llvm/test/tools/dsymutil/AArch64 lit.local.cfg debug-names-accel-table-types.ll

[DWARFLinker] Index Swift mangled type names in the parallel linker (#216429)

Swift records a type's mangled name in DW_AT_linkage_name. The classic
linker indexes it as a type accelerator entry alongside the short
DW_AT_name, but the parallel linker indexed only the short name.

Port the DW_LANG_Swift block added to the classic linker in 8234f8ae2685
to the parallel linker's type case.
DeltaFile
+213-0llvm/test/tools/dsymutil/X86/DWARFLinkerParallel/debug-names-swift-mangled-type.s
+35-14llvm/lib/DWARFLinker/Parallel/AcceleratorRecordsSaver.cpp
+3-3llvm/test/tools/dsymutil/AArch64/debug-names-accel-table-types.ll
+1-1llvm/test/tools/dsymutil/AArch64/lit.local.cfg
+252-184 files

NetBSD/pkgsrc c04sM5Xdoc CHANGES-2026

   doc: Updated textproc/py-libxml2 to 2.15.3
VersionDeltaFile
1.5292+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc TBJUE7tdoc CHANGES-2026

   doc: Updated textproc/libxml2 to 2.15.3
VersionDeltaFile
1.5291+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc Fx7SIkLtextproc/libxml2 Makefile.common distinfo

   libxml2: update to 2.15.3.

   From Showta Ishizaki in PR 60591.

   v2.15.3: Apr 15 2026

   ### Security

   - parser: Pass userData to SAX text callbacks in xmlParseReference (type-confusion)
   - entities: copy children in xmlCopyEntity
   - c14n: Fix Type confusion in xmlC14NProcessAttrsAxis
   - python: Do not decref string after adding to the list (double-free / use-after-free)
   - c14n: Reuse tmp_str, xmlStrcat reallocates *cur (double-free)

   ### Improvements

   - schemas: Fix relative schemaLocation resolution in XSI assembly in streaming mode
   - xmlreader: propagate reader resource loaders to validator parsers
   - python: Make python bindings python2 compatible

    [44 lines not shown]
VersionDeltaFile
1.158+4-4textproc/libxml2/distinfo
1.32+2-2textproc/libxml2/Makefile.common
+6-62 files

NetBSD/pkgsrc V0eRphzeditors/emacs30-nox11 version.mk

   emacs30-nox11: fix typo

   Reported by Showta Ishizaki in PR 60590.
VersionDeltaFile
1.2+2-2editors/emacs30-nox11/version.mk
+2-21 files

LLVM/project 34cce43llvm/lib/Transforms/Vectorize SLPVectorizer.cpp, llvm/test/Transforms/SLPVectorizer/AArch64 recalc-copyable-deps-on-reorder.ll

Revert "[SLP]Recalculate copyable-element deps after tree reordering"

This reverts commit 8024076c7591b6477d23c3519652a7c6487d97d3 to fix
buildbot https://lab.llvm.org/buildbot/#/builders/210/builds/12275

Reviewers: 

Pull Request: https://github.com/llvm/llvm-project/pull/216444
DeltaFile
+0-188llvm/test/Transforms/SLPVectorizer/AArch64/recalc-copyable-deps-on-reorder.ll
+0-50llvm/test/Transforms/SLPVectorizer/RISCV/recalc-copyable-deps-on-reorder.ll
+2-34llvm/lib/Transforms/Vectorize/SLPVectorizer.cpp
+2-2723 files

LLVM/project 101a9b5llvm/lib/Transforms/Vectorize SLPVectorizer.cpp, llvm/test/Transforms/SLPVectorizer/AArch64 recalc-copyable-deps-on-reorder.ll

[𝘀𝗽𝗿] initial version

Created using spr 1.3.7
DeltaFile
+0-188llvm/test/Transforms/SLPVectorizer/AArch64/recalc-copyable-deps-on-reorder.ll
+0-50llvm/test/Transforms/SLPVectorizer/RISCV/recalc-copyable-deps-on-reorder.ll
+2-34llvm/lib/Transforms/Vectorize/SLPVectorizer.cpp
+2-2723 files

OpenBSD/src yHN4jWAusr.bin/ssh sshd.8

   Refer to id_mldsa44_ed25519.pub in the pubkey list. bz#3989.
VersionDeltaFile
1.331+3-3usr.bin/ssh/sshd.8
+3-31 files

OpenBSD/src EgCIGaagnu/usr.bin/perl regexp.h regexec.c

   Fix out-of-bounds heap reads and writes in perl regex

   Perl versions through 5.45.1 have out-of-bounds heap reads and writes
   during regular expression matching via an undersized superlinear cache
   in S_regmatch

   This is CVE-2026-15534

   https://github.com/Perl/perl5/commit/568e6fd238867bb9e99fa3f47cba3169009239e0
   https://github.com/Perl/perl5/commit/54cf3d44cbbedd17d774e9a37921963e8fd5d0cb
VersionDeltaFile
1.33+19-12gnu/usr.bin/perl/regexec.c
1.22+2-2gnu/usr.bin/perl/regexp.h
+21-142 files

LLVM/project 8024076llvm/lib/Transforms/Vectorize SLPVectorizer.cpp, llvm/test/Transforms/SLPVectorizer/AArch64 recalc-copyable-deps-on-reorder.ll

[SLP]Recalculate copyable-element deps after tree reordering

Reordering permutes the operand columns of the entries and may move an
operand between copyable-covered and plain edges, making the computed
dependency counts stale and tripping the unscheduled-deps assertion.

Reviewers: 

Pull Request: https://github.com/llvm/llvm-project/pull/216442
DeltaFile
+188-0llvm/test/Transforms/SLPVectorizer/AArch64/recalc-copyable-deps-on-reorder.ll
+50-0llvm/test/Transforms/SLPVectorizer/RISCV/recalc-copyable-deps-on-reorder.ll
+34-2llvm/lib/Transforms/Vectorize/SLPVectorizer.cpp
+272-23 files

LLVM/project ef3a908clang/docs/analyzer checkers.md, clang/docs/analyzer/developer-docs InitializerLists.md

[docs][clang] Finish MyST migration for analyzer docs
DeltaFile
+210-198clang/docs/analyzer/user-docs/Annotations.md
+32-33clang/docs/analyzer/developer-docs/InitializerLists.md
+21-22clang/docs/analyzer/user-docs/CommandLineUsage.md
+15-16clang/docs/analyzer/user-docs/CrossTranslationUnit.md
+12-13clang/docs/analyzer/checkers.md
+5-6clang/docs/analyzer/user-docs/UsingWithXCode.md
+295-2889 files not shown
+312-31415 files

FreeBSD/ports c2c1facwww/librewolf Makefile distinfo

www/librewolf: Update 153.0.3-1 => 153.0.4-1

Release Notes:
https://www.firefox.com/en-US/firefox/153.0.4/releasenotes/

PR:             297532
Sponsored by:   UNIS Labs
MFH:            2026Q3

(cherry picked from commit 1b9363321d5824df7e4cb8ce33475259d9ff6355)
DeltaFile
+3-3www/librewolf/distinfo
+2-2www/librewolf/Makefile
+5-52 files

FreeBSD/ports 1b93633www/librewolf Makefile distinfo

www/librewolf: Update 153.0.3-1 => 153.0.4-1

Release Notes:
https://www.firefox.com/en-US/firefox/153.0.4/releasenotes/

PR:             297532
Sponsored by:   UNIS Labs
MFH:            2026Q3
DeltaFile
+3-3www/librewolf/distinfo
+2-2www/librewolf/Makefile
+5-52 files

LLVM/project 7dc88ccllvm/lib/Target/RISCV RISCVInstrInfoSFB.td RISCVFeatures.td, llvm/test/CodeGen/RISCV short-forward-branch-opt-zibi.ll sfb-merge-base-offset.ll

[RISCV] Remove short-forward-branch-imm. (#216401)

Just use short-forward-branch-ialu. I hope implentations that implement
short-forward-branch, do it equally for all branch types. Doing anything
else would create complex tradeoffs.

I'm planning to add conditional c.mv fusion support for Zibi and I don't
want to add an immediate version flag there.

The patterns that checked NoShortForwardBranchImm were not checking that
an immediate branch ISA was enabled. So I've changed them to
NoVendorXqcibiOrNoShortForwardBranch.
DeltaFile
+7-7llvm/lib/Target/RISCV/RISCVInstrInfoXqci.td
+2-7llvm/lib/Target/RISCV/RISCVFeatures.td
+3-3llvm/test/CodeGen/RISCV/sfb-merge-base-offset.ll
+2-2llvm/test/CodeGen/RISCV/short-forward-branch-opt-zibi.ll
+2-2llvm/lib/Target/RISCV/RISCVInstrInfoSFB.td
+1-2llvm/unittests/TargetParser/RISCVTargetParserTest.cpp
+17-2313 files not shown
+29-3619 files

FreeBSD/ports da456a7net-im/parla pkg-plist Makefile

net-im/parla: Update to 0.8.0
DeltaFile
+3-3net-im/parla/distinfo
+1-1net-im/parla/Makefile
+1-0net-im/parla/pkg-plist
+5-43 files

LLVM/project 47aa7b9llvm/test/Transforms/SLPVectorizer/AMDGPU elementwise-fma-operand1.ll

[NFC][SLP] Add a test for fma fusion with the fmul on operand 1 (#216428)

canConvertToFMA only looks at operand 0 of the fadd, so the accumulator
shape fadd c, a * b is never recognised, and the fmul it does find is
priced with the target's fusion discount already applied. The threshold
puts the decision right at the cost boundary so the checks record which
way SLP goes today.
DeltaFile
+114-0llvm/test/Transforms/SLPVectorizer/AMDGPU/elementwise-fma-operand1.ll
+114-01 files

LLVM/project 8a6a59allvm/include/llvm/DWARFLinker AddressesMap.h, llvm/lib/DWARFLinker/Classic DWARFLinker.cpp

[DWARFLinker] Constrain a function's high_pc to its own symbol (#216432)

Mach-O objects built with .subsections_via_symbols make every symbol an
independently placeable atom, and the linker packs atoms without
preserving the spacing they had in the object file.

I have an example where the compiler describes such a subprogram as
extending past its own atom. While it's debatable whether that's a good
idea, it's not invalid in the object file. However, once linked, it is
invalid.

We can make dsymutil resilient against this by looking at the size of
the symbol in the debug map and adjusting the end_pc. I'm doing so
conservatively so that only a collision is repaired. Already
overlapping/invalid ranges remain untouched.

rdar://184768778
DeltaFile
+88-0llvm/test/tools/dsymutil/subprogram-high-pc-past-symbol.test
+76-0llvm/test/tools/dsymutil/Inputs/subprogram-high-pc-past-symbol.s
+72-0llvm/test/tools/dsymutil/Inputs/subprogram-high-pc-past-symbol-dwarf2.s
+38-8llvm/include/llvm/DWARFLinker/AddressesMap.h
+34-2llvm/lib/DWARFLinker/Classic/DWARFLinker.cpp
+24-6llvm/tools/dsymutil/DwarfLinkerForBinary.h
+332-163 files not shown
+371-209 files

HardenedBSD/src 5429957include stdio.h, share/man/man4 iflib.4

Merge remote-tracking branch 'rad/hardened/current/master' into hardened/current/pledge
DeltaFile
+208-60sys/net/iflib.c
+189-11sys/arm64/arm64/pmap.c
+59-0share/man/man4/iflib.4
+14-0sys/dev/pci/pci.c
+7-3sys/dev/enetc/if_enetc.c
+7-3include/stdio.h
+484-7717 files not shown
+536-9623 files

HardenedBSD/src 2fca36ainclude stdio.h, share/man/man4 iflib.4

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+208-60sys/net/iflib.c
+189-11sys/arm64/arm64/pmap.c
+59-0share/man/man4/iflib.4
+14-0sys/dev/pci/pci.c
+7-3sys/dev/enetc/if_enetc.c
+7-3include/stdio.h
+484-7717 files not shown
+536-9623 files

LLVM/project 5f491a4llvm/include/llvm/ABI TargetInfo.h, llvm/lib/ABI CMakeLists.txt

[LLVMABI] Create a skeleton for AArch64 ABI handling (#216222)

This change adds the most basic implementation of llvm::abi::TargetInfo
for AArch64 targets and establishes a unit test for it.

There was no isolated testing for previous targets implemented in the
ABI library. They were only tested through clang. My plan with AArch64
is to create unit tests so that the library can be tested without
building the clang target, but also to have clang tests so that the
handling can be compared to clang's ABI handling as a meaningful point
of reference for correct behavior.

For this initial change, because no real handling is implemented yet, I
am not introducing the clang hook or any clang-based tests.

Assisted-by: Cursor / Grok 4.5 (test generation)
DeltaFile
+94-0llvm/unittests/ABI/AArch64TargetInfoTest.cpp
+41-0llvm/lib/ABI/Targets/AArch64.cpp
+10-0llvm/include/llvm/ABI/TargetInfo.h
+9-0llvm/unittests/ABI/CMakeLists.txt
+1-0llvm/unittests/CMakeLists.txt
+1-0llvm/lib/ABI/CMakeLists.txt
+156-06 files

NetBSD/pkgsrc zjnSpG1doc CHANGES-2026

   doc: Updated www/gitea to 1.27.2
VersionDeltaFile
1.5290+2-1doc/CHANGES-2026
+2-11 files

LLVM/project 5aec94alldb/include/lldb/Symbol SymbolLocator.h, lldb/source/Core DynamicLoader.cpp

[lldb] Search for a corefile's images before loading any of them (#216431)

A userland or kernel corefile can list hundreds of images, and searching
for one can shell out to a symbol server or fetch over the network.
Searching for them one at a time is where loading such a corefile spends
its time.

Add a batch form of SymbolLocator::Locate that runs the searches on the
debugger's thread pool, gated on target.parallel-module-load. Results
come back in the order the requests were given, since that order decides
the Target's module order. Only the results are ordered, and anything a
search reports to the user arrives in whatever order the searches finish
in.

Only the plugin searches run concurrently, so a platform hook does not
have to be thread safe to take part, and reading a binary's UUID out of
memory stays on the calling thread.

Setting up a platform binary can replace the Target's platform and

    [5 lines not shown]
DeltaFile
+141-4lldb/unittests/Symbol/SymbolLocatorTest.cpp
+79-63lldb/source/Plugins/ObjectFile/Mach-O/ObjectFileMachO.cpp
+76-11lldb/source/Symbol/SymbolLocator.cpp
+34-20lldb/source/Core/DynamicLoader.cpp
+25-0lldb/test/API/macosx/lc-note/multiple-binary-corefile/TestMultipleBinaryCorefile.py
+19-0lldb/include/lldb/Symbol/SymbolLocator.h
+374-986 files

NetBSD/pkgsrc JJ1aNyOwww/gitea Makefile go-modules.mk

   www/gitea: update to 1.27.2

   Changes in 1.27.2:

   * SECURITY
     - Fix: update collaborator access mode and httpsign
     - Refactor: external render
     - Fix(actions): resolve pull_request_target reusable workflows at the
       base commit
     - Refactor: markup render
     - Fix(deps): update dependency mermaid to v11.16.1
     - Fix(auth): set WebAuthn user verification per request
     - Fix: render highlight language
   * ENHANCEMENTS
     - enhance: add missing npm package metadata properties
   *  BUGFIXES
     - fix(actions): keep github.event.inputs as strings for
       workflow_dispatch
     - fix(actions): let a rerun of selected jobs read the previous

    [419 lines not shown]
VersionDeltaFile
1.45+523-559www/gitea/distinfo
1.22+320-302www/gitea/PLIST
1.13+173-185www/gitea/go-modules.mk
1.140+2-2www/gitea/Makefile
+1,018-1,0484 files

FreeBSD/ports faf01aasysutils/screen-devel Makefile

sysutils/screen-devel: Bump PORTREVISION

Fixes:          118191c692f3
DeltaFile
+1-0sysutils/screen-devel/Makefile
+1-01 files

HardenedBSD/ports faf01aasysutils/screen-devel Makefile

sysutils/screen-devel: Bump PORTREVISION

Fixes:          118191c692f3
DeltaFile
+1-0sysutils/screen-devel/Makefile
+1-01 files

LLVM/project 9a592bdclang/docs/analyzer conf.py, libc/docs/_static copybutton.js

[clang][docs] Prototype Furo theme setup
DeltaFile
+140-0utils/docs/llvm_sphinx/_static/furo-common.css
+0-71llvm/docs/_static/custom.css
+0-56llvm/docs/_static/copybutton.js
+0-56libc/docs/_static/copybutton.js
+56-0utils/docs/llvm_sphinx/_static/copybutton.js
+10-34clang/docs/analyzer/conf.py
+206-2179 files not shown
+335-39215 files

LLVM/project af1ce4doffload/languages/kernel/src LanguageRuntime.cpp, offload/test/offloading/CUDA devicesync_streams.cu

add proper deviceSync
DeltaFile
+98-0offload/test/offloading/CUDA/devicesync_streams.cu
+97-0offload/test/offloading/HIP/devicesync_streams.hip
+19-5offload/languages/kernel/src/LanguageRuntime.cpp
+1-1offload/test/offloading/HIP/launch_tu.hip
+1-1offload/test/offloading/HIP/basic_launch_multi_arg.hip
+1-1offload/test/offloading/HIP/basic_launch_blocks_and_threads.hip
+217-87 files not shown
+224-1113 files

LLVM/project c1dbf96clang/docs Toolchain.md LanguageExtensions.md, clang/docs/analyzer checkers.rst

[clang][docs] Remove page-local contents directives
DeltaFile
+0-10clang/docs/DriverInternals.md
+0-4clang/include/clang/Basic/BuiltinsAMDGPUDocs.td
+0-4clang/docs/analyzer/checkers.rst
+0-4clang/docs/Toolchain.md
+0-4clang/docs/LanguageExtensions.md
+0-4clang/docs/FunctionEffectAnalysis.md
+0-3074 files not shown
+0-25080 files

LLVM/project 7a1dedeoffload/languages/kernel/include LanguageUtils.h, offload/languages/kernel/src LanguageLaunch.cpp LanguageRuntime.cpp

add blocking semantics to LaunchKernel and Memcpy
DeltaFile
+131-0offload/test/offloading/CUDA/blocking_stream_semantics.cu
+125-0offload/test/offloading/HIP/blocking_stream_semantics.hip
+50-4offload/languages/kernel/include/LanguageUtils.h
+20-5offload/languages/kernel/src/LanguageRuntime.cpp
+17-3offload/languages/kernel/src/LanguageLaunch.cpp
+4-2offload/test/offloading/HIP/stream_api.hip
+347-143 files not shown
+355-179 files