OPNSense/src 4b9ebd5sys/dev/ciss cissvar.h ciss.c

Revert "ciss: Add max physical target"

This reverts commit 45645518ea19ccb4761aee3a525aab2f323d37d4.

Although this changed looks like it should just be a harmless change to
bookkeeping, it turns out that it changes the termination condition of
the initial device scan, resulting in it never finishing. This causes
the boot to hang forever coming up. Since I don't have good access to
hardware, I'm reverting until the exact details can be sorted out.

Reported by: Edward Scroop
Sponsored by: Netflix
MFC After: 1 week

(cherry picked from commit ba9aaed01a484778f1c1f2fb5d7e30dbb1a8f5ad)
DeltaFile
+1-10sys/dev/ciss/ciss.c
+0-1sys/dev/ciss/cissvar.h
+1-112 files

FreeBSD/ports 234facdwww/phpbb3 Makefile distinfo

www/phpbb3: update to 3.3.17

3.3.14 is affected by CVE-2026-29199 (CVSS 8.1): with force_server_vars
disabled, phpBB builds the password reset link from the HTTP Host
header,
so an attacker who can control that header makes reset mails point to a
domain of their choice, which may lead to account takeover.

Also fixed since 3.3.14: improper state verification in the OAuth
implementation (SECURITY-293), IDOR when composing private messages
(SECURITY-286), CSRF on report submission (SECURITY-287), cross-user
notification read state manipulation (SECURITY-290) and HTML generation
from page data (SECURITY-283).

Changelog:
https://github.com/phpbb/phpbb/blob/release-3.3.17/phpBB/docs/CHANGELOG.html
Security:       CVE-2026-29199
Security:       4d06b948-a323-11f1-a655-3497f65b111b
MFH:            2026Q3

    [3 lines not shown]
DeltaFile
+14-6www/phpbb3/pkg-plist
+3-3www/phpbb3/distinfo
+1-1www/phpbb3/Makefile
+18-103 files

FreeBSD/ports 501e44bwww/phpbb3 Makefile distinfo

www/phpbb3: update to 3.3.17

3.3.14 is affected by CVE-2026-29199 (CVSS 8.1): with force_server_vars
disabled, phpBB builds the password reset link from the HTTP Host
header,
so an attacker who can control that header makes reset mails point to a
domain of their choice, which may lead to account takeover.

Also fixed since 3.3.14: improper state verification in the OAuth
implementation (SECURITY-293), IDOR when composing private messages
(SECURITY-286), CSRF on report submission (SECURITY-287), cross-user
notification read state manipulation (SECURITY-290) and HTML generation
from page data (SECURITY-283).

Changelog:
https://github.com/phpbb/phpbb/blob/release-3.3.17/phpBB/docs/CHANGELOG.html
Security:       CVE-2026-29199
Security:       4d06b948-a323-11f1-a655-3497f65b111b
MFH:            2026Q3
Sponsored by:   Netzkommune GmbH
DeltaFile
+14-6www/phpbb3/pkg-plist
+3-3www/phpbb3/distinfo
+1-1www/phpbb3/Makefile
+18-103 files

FreeBSD/ports 7f1feafwww/zoraxy Makefile distinfo

www/zoraxy: Update to 3.3.4

Changes:        https://github.com/tobychui/zoraxy/releases/tag/v3.3.4

Sponsored by:   Netzkommune GmbH
DeltaFile
+5-5www/zoraxy/distinfo
+1-2www/zoraxy/Makefile
+6-72 files

FreeBSD/ports 60690a6www/bunkerweb distinfo Makefile

www/bunkerweb: Update to 1.6.14

Changelog: https://github.com/bunkerity/bunkerweb/releases/tag/v1.6.14

Sponsored by: Netzkommune GmbH
DeltaFile
+77-1,177www/bunkerweb/pkg-plist
+6-3www/bunkerweb/Makefile
+3-3www/bunkerweb/distinfo
+86-1,1833 files

FreeBSD/ports 4c4a713security/vuxml/vuln 2026.xml

security/vuxml: Document phpBB vulnerabilities

Sponsored by:   Netzkommune GmbH
DeltaFile
+45-0security/vuxml/vuln/2026.xml
+45-01 files

LLVM/project daf9f25llvm/test/Transforms/SLPVectorizer/RISCV splat-gather-trim.ll

[SLP][NFC]Add an extra test for gathered splats, NFC



Reviewers: 

Pull Request: https://github.com/llvm/llvm-project/pull/219574
DeltaFile
+152-0llvm/test/Transforms/SLPVectorizer/RISCV/splat-gather-trim.ll
+152-01 files

FreeBSD/ports df58e34devel/sentry-cli Makefile distinfo

devel/sentry-cli: Update to 3.7.0

Changelog: https://github.com/getsentry/sentry-cli/blob/3.7.0/CHANGELOG.md

Reported by:    GitHub (watch releases)
DeltaFile
+3-3devel/sentry-cli/distinfo
+1-1devel/sentry-cli/Makefile
+4-42 files

FreeBSD/src 0230605. UPDATING

UPDATING: Fix entry for getgroups(2)/setgroups(2)

Fix a typo, grammar, and generally rephrase for better clarity.

Fixes:          3463f02706db ("UPDATING: add an entry for [gs]etgroups")
MFC after:      1 day
MFC to:         stable/15
Sponsored by:   The FreeBSD Foundation

(cherry picked from commit b7cff2a8c47eb09968430e53cab8b05cf8897d3f)
DeltaFile
+6-4UPDATING
+6-41 files

LLVM/project 0ad77a6clang/include/clang/Basic HLSLIntrinsics.td, clang/lib/Headers/hlsl hlsl_intrinsic_helpers.h hlsl_detail.h

[HLSL] Add matrix support for degrees(), radians() (#218573)

Resolves #184480, #184485

Assisted-by: Claude Opus 4
DeltaFile
+155-0clang/test/CodeGenHLSL/builtins/radians_mat.hlsl
+155-0clang/test/CodeGenHLSL/builtins/degrees_mat.hlsl
+11-0clang/lib/Headers/hlsl/hlsl_detail.h
+0-8clang/lib/Headers/hlsl/hlsl_intrinsic_helpers.h
+4-4clang/include/clang/Basic/HLSLIntrinsics.td
+325-125 files

FreeBSD/ports c8db52csecurity/libgcrypt Makefile

security/libgcrypt: Fix logic

I reversed my logic

Pointy hat to:  cy
Fixes:          ded0edf8229e
DeltaFile
+4-4security/libgcrypt/Makefile
+4-41 files

FreeNAS/freenas 7f7af42src/middlewared/middlewared/api/v27_0_0 iscsi_global.py

Allow iSCSI mode=2
DeltaFile
+1-1src/middlewared/middlewared/api/v27_0_0/iscsi_global.py
+1-11 files

FreeNAS/freenas 17ff213src/middlewared/middlewared/plugins/iscsi_ alua.py extents.py, src/middlewared/middlewared/utils/lio config.py

Add middleware support for LIO ALUA HA

Wire up the middleware side of LIO ALUA high-availability: load
lio_ha.ko with per-node addresses on service start, manage ALUA
state across failover events, clean up STANDBY configfs on pool
export, and add pre-flight validation that targets have static
initiator ACLs before ALUA can be enabled.

For each target, create a portal-less phantom TPG carrying the peer
node's controller group so that a single RTPG response from any
connected port lists both ALUA groups.  Write tpgt_N/rtpi explicitly
before enable so that relative target port IDs in RTPG match the
tag formula (portal.tag on Node A, portal.tag + 32000 on Node B)
rather than being auto-assigned sequentially by the kernel.

ALUA group states are driven by role and ha_state:

  MASTER  + synced        local=OPTIMIZED     remote=NONOPTIMIZED
  MASTER  + connected     local=OPTIMIZED     remote=TRANSITIONING

    [4 lines not shown]
DeltaFile
+537-135src/middlewared/middlewared/utils/lio/config.py
+214-2src/middlewared/middlewared/plugins/iscsi_/lio.py
+87-71src/middlewared/middlewared/plugins/iscsi_/fs_attachment_delegate.py
+89-58src/middlewared/middlewared/plugins/iscsi_/target_to_extent.py
+59-47src/middlewared/middlewared/plugins/iscsi_/extents.py
+62-9src/middlewared/middlewared/plugins/iscsi_/alua.py
+1,048-3228 files not shown
+1,232-37114 files

FreeBSD/ports a99646emultimedia/moonshine Makefile Makefile.crates, multimedia/moonshine/files moonshine.in

multimedia/moonshine: Update to 0.15.0
DeltaFile
+363-361multimedia/moonshine/distinfo
+180-179multimedia/moonshine/Makefile.crates
+17-3multimedia/moonshine/files/moonshine.in
+2-2multimedia/moonshine/Makefile
+562-5454 files

LLVM/project 93ff4delldb/include/lldb/Target Process.h, lldb/source/Target Process.cpp

[lldb] Fix ProcessProperties reading the wrong experimental collection (#218939)

`ePropertyExperimental` was defined as one past the last generated
process
property, on the assumption that "experimental" is appended next.

lldb/source/Target/Process.cpp:
```
 enum {
 #define LLDB_PROPERTIES_process
 #include "TargetPropertiesEnum.inc" // 0..20
   ePropertyExperimental,            // 21
 };
```

However, the global collection appends "thread" first in
`ProcessProperties::ProcessProperties`,

```

    [28 lines not shown]
DeltaFile
+145-0lldb/unittests/Target/ProcessPropertiesTest.cpp
+17-19lldb/source/Target/Process.cpp
+3-0lldb/include/lldb/Target/Process.h
+1-0lldb/unittests/Target/CMakeLists.txt
+166-194 files

LLVM/project f058685clang/lib/CIR/CodeGen CIRGenRecordLayoutBuilder.cpp, clang/lib/CIR/Dialect/Transforms/TargetLowering CIRABIRewriteContext.cpp

[CIR] Layout _BitInt types in record/array in CIR as it is in LLVM-IR (#219487)

I've worked through this quite a bit, and spent some time working on
seeing if I could do this during LowerToLLVM, however this causes a ton
of complication, as this level of change affects basically every
member-access invariant that we have. Additionally, we have prior art
(bool -> 8 bits, FP80 -> 128 bits), that I think it makes sense at least
to 'put it with the rest'.

The problem is that the 'i' types for bitint(which they are lowered to)
don't match alignment-wise to the BitInt types. As a result, unless we
do a bunch of transformations to change the struct/array/etc types (plus
    the get-member/initialization, etc stuff this entails), we're going
to be reprensenting these types incorrectly. We have prior art for this
as well, particularly around zero-length bitfields (which we represent
    as a field in the LLVM-IR to prevent the above conflicts).

This patch does this layout at the CIR level, which gives us layout
parity to LLVM-IR, as well as making sure we represent things correctly

    [3 lines not shown]
DeltaFile
+235-0clang/test/CIR/CodeGen/bitint-record-layout.c
+1-64clang/lib/CIR/Lowering/DirectToLLVM/LowerToLLVM.cpp
+56-2clang/lib/CIR/Lowering/LoweringHelpers.cpp
+17-7clang/lib/CIR/CodeGen/CIRGenRecordLayoutBuilder.cpp
+22-0clang/test/CIR/CodeGen/bitint-split-storage-nyi.c
+19-2clang/lib/CIR/Dialect/Transforms/TargetLowering/CIRABIRewriteContext.cpp
+350-755 files not shown
+391-8211 files

FreeBSD/ports 8c0eb06devel/R-cran-kit Makefile, devel/R-cran-kit/files patch-fix-tests-PULL52

devel/R-cran-kit: Fix tests

Apply upstream patch.

See also: https://github.com/fastverse/kit/pull/52
DeltaFile
+157-0devel/R-cran-kit/files/patch-fix-tests-PULL52
+2-2devel/R-cran-kit/Makefile
+159-22 files

FreeBSD/ports 8411f0cdevel/aws-sdk-cpp Makefile distinfo

devel/aws-sdk-cpp: Update to 1.11.880

ChangeLog: https://github.com/aws/aws-sdk-cpp/compare/1.11.873...1.11.880
DeltaFile
+3-3devel/aws-sdk-cpp/distinfo
+1-1devel/aws-sdk-cpp/Makefile
+4-42 files

FreeBSD/ports 9c50393devel/aws-crt-cpp Makefile

devel/aws-crt-cpp: Bump portrevision

Upstream did changes in all aws dependencies. Bump just in case.
DeltaFile
+1-0devel/aws-crt-cpp/Makefile
+1-01 files

FreeBSD/ports 3649e2esecurity/aws-c-auth pkg-plist Makefile

security/aws-c-auth: Update to 1.0.0

CMakeLists.txt looks for AwsGetVersion.cmake from the installed
aws-c-common before project() runs, so LOCALBASE was not searched.
Use USES=localbase, which exports CMAKE_PREFIX_PATH to the environment.

ChangeLog: https://github.com/awslabs/aws-c-auth/releases/tag/v1.0.0
DeltaFile
+3-3security/aws-c-auth/distinfo
+2-2security/aws-c-auth/Makefile
+1-0security/aws-c-auth/pkg-plist
+6-53 files

FreeBSD/ports 92a3fa0devel/aws-c-event-stream pkg-plist Makefile

devel/aws-c-event-stream: Update to 1.0.0

CMakeLists.txt looks for AwsGetVersion.cmake from the installed
aws-c-common before project() runs, so LOCALBASE was not searched.
Use USES=localbase, which exports CMAKE_PREFIX_PATH to the environment.

ChangeLog: https://github.com/awslabs/aws-c-event-stream/releases/tag/v1.0.0
DeltaFile
+3-3devel/aws-c-event-stream/distinfo
+2-2devel/aws-c-event-stream/Makefile
+1-0devel/aws-c-event-stream/pkg-plist
+6-53 files

FreeBSD/ports 75f032bdevel/aws-c-s3 pkg-plist Makefile

devel/aws-c-s3: Update to 1.0.0

CMakeLists.txt looks for AwsGetVersion.cmake from the installed
aws-c-common before project() runs, so LOCALBASE was not searched.
Use USES=localbase, which exports CMAKE_PREFIX_PATH to the environment.

ChangeLog: https://github.com/awslabs/aws-c-s3/releases/tag/v1.0.0
DeltaFile
+3-3devel/aws-c-s3/distinfo
+2-2devel/aws-c-s3/Makefile
+1-1devel/aws-c-s3/pkg-plist
+6-63 files

FreeBSD/ports df3a3dddevel/aws-c-sdkutils pkg-plist Makefile

devel/aws-c-sdkutils: Update to 1.0.0

CMakeLists.txt looks for AwsGetVersion.cmake from the installed
aws-c-common before project() runs, so LOCALBASE was not searched.
Use USES=localbase, which exports CMAKE_PREFIX_PATH to the environment.

ChangeLog: https://github.com/awslabs/aws-c-sdkutils/releases/tag/v1.0.0
DeltaFile
+3-3devel/aws-c-sdkutils/distinfo
+2-2devel/aws-c-sdkutils/Makefile
+1-0devel/aws-c-sdkutils/pkg-plist
+6-53 files

FreeBSD/ports b76aacfdevel/aws-checksums pkg-plist Makefile

devel/aws-checksums: Update to 1.0.0

CMakeLists.txt looks for AwsGetVersion.cmake from the installed
aws-c-common before project() runs, so LOCALBASE was not searched.
Use USES=localbase, which exports CMAKE_PREFIX_PATH to the environment.

ChangeLog: https://github.com/awslabs/aws-checksums/releases/tag/v1.0.0
DeltaFile
+3-3devel/aws-checksums/distinfo
+2-2devel/aws-checksums/Makefile
+1-0devel/aws-checksums/pkg-plist
+6-53 files

FreeBSD/ports a283b32devel/aws-c-mqtt pkg-plist Makefile

devel/aws-c-mqtt: Update to 1.0.0

CMakeLists.txt looks for AwsGetVersion.cmake from the installed
aws-c-common before project() runs, so LOCALBASE was not searched.
Use USES=localbase, which exports CMAKE_PREFIX_PATH to the environment.

ChangeLog: https://github.com/awslabs/aws-c-mqtt/releases/tag/v1.0.0
DeltaFile
+3-3devel/aws-c-mqtt/distinfo
+2-2devel/aws-c-mqtt/Makefile
+1-0devel/aws-c-mqtt/pkg-plist
+6-53 files

FreeBSD/ports 062c821devel/aws-c-io pkg-plist Makefile

devel/aws-c-io: Update to 1.0.0

CMakeLists.txt looks for AwsGetVersion.cmake from the installed
aws-c-common before project() runs, so LOCALBASE was not searched.
Use USES=localbase, which exports CMAKE_PREFIX_PATH to the environment.

ChangeLog: https://github.com/awslabs/aws-c-io/releases/tag/v1.0.0
DeltaFile
+3-3devel/aws-c-io/distinfo
+2-2devel/aws-c-io/Makefile
+1-0devel/aws-c-io/pkg-plist
+6-53 files

FreeBSD/ports 8bc16d2security/aws-c-cal pkg-plist Makefile

security/aws-c-cal: Update to 1.0.0

CMakeLists.txt looks for AwsGetVersion.cmake from the installed
aws-c-common before project() runs, so LOCALBASE was not searched.
Use USES=localbase, which exports CMAKE_PREFIX_PATH to the environment.

ChangeLog: https://github.com/awslabs/aws-c-cal/releases/tag/v1.0.0
DeltaFile
+3-3security/aws-c-cal/distinfo
+2-2security/aws-c-cal/Makefile
+1-0security/aws-c-cal/pkg-plist
+6-53 files

FreeBSD/ports 517261ddevel/aws-c-http pkg-plist Makefile

devel/aws-c-http: Update to 1.0.0

CMakeLists.txt looks for AwsGetVersion.cmake from the installed
aws-c-common before project() runs, so LOCALBASE was not searched.
Use USES=localbase, which exports CMAKE_PREFIX_PATH to the environment.

ChangeLog: https://github.com/awslabs/aws-c-http/releases/tag/v1.0.0
DeltaFile
+3-3devel/aws-c-http/distinfo
+2-2devel/aws-c-http/Makefile
+1-0devel/aws-c-http/pkg-plist
+6-53 files

FreeBSD/ports a110199devel/aws-c-compression pkg-plist distinfo

devel/aws-c-compression: Update to 1.0.0

CMakeLists.txt looks for AwsGetVersion.cmake from the installed
aws-c-common before project() runs, so LOCALBASE was not searched.
Use USES=localbase, which exports CMAKE_PREFIX_PATH to the environment.

While here, fix typo CNAKE_OFF->CMAKE_OFF

ChangeLog: https://github.com/awslabs/aws-c-compression/releases/tag/v1.0.0
DeltaFile
+3-3devel/aws-c-compression/distinfo
+3-3devel/aws-c-compression/Makefile
+1-0devel/aws-c-compression/pkg-plist
+7-63 files

FreeBSD/ports 3c9baa4devel/aws-c-common Makefile pkg-plist, devel/aws-c-common/files patch-source_posix_clock.c patch-CMakeLists.txt

devel/aws-c-common: Update to 1.0.0

ChangeLog: https://github.com/awslabs/aws-c-common/releases/tag/v1.0.0
DeltaFile
+3-3devel/aws-c-common/files/patch-CMakeLists.txt
+3-3devel/aws-c-common/distinfo
+3-2devel/aws-c-common/pkg-plist
+2-2devel/aws-c-common/files/patch-source_posix_clock.c
+1-1devel/aws-c-common/Makefile
+12-115 files