FreeBSD/src 7ffc4eccontrib/xz ChangeLog, contrib/xz/src/common my_landlock.h

MFV: xz 5.8.4.

MFC after:      3 days
DeltaFile
+1,488-0contrib/xz/ChangeLog
+172-92contrib/xz/src/liblzma/common/index.c
+76-82contrib/xz/src/xz/xz.1
+49-10contrib/xz/src/liblzma/common/index_decoder.c
+29-12contrib/xz/src/common/my_landlock.h
+20-16contrib/xz/src/liblzma/check/crc32_arm64.h
+1,834-21224 files not shown
+2,016-28730 files

FreeBSD/ports f92cef0security/nuclei Makefile distinfo

security/nuclei: Update to 3.11.1

ChangeLog:
https://github.com/projectdiscovery/nuclei/releases/tag/v3.11.1
DeltaFile
+5-5security/nuclei/distinfo
+1-2security/nuclei/Makefile
+6-72 files

LLVM/project 6d7e7fbllvm/lib/Transforms/InstCombine InstCombineCasts.cpp, llvm/test/Transforms/InstCombine uitofp.ll

[InstCombine] Fold uitofp of masked truncations (#222592)

Fold an unsigned integer-to-floating-point conversion of a masked
truncation by widening the mask and eliminating the truncation:

`uitofp((trunc X) & C)` → `uitofp(X & zext(C))`

Apply the fold when the intermediate instructions have one use and
widening the integer operation is desirable.

This reduces the instruction count on both AMDGPU and NVPTX.

AMDGPU example: https://godbolt.org/z/rTYhM61ce
NVPTX example: https://godbolt.org/z/fWhsrne19
DeltaFile
+129-0llvm/test/Transforms/InstCombine/uitofp.ll
+20-0llvm/lib/Transforms/InstCombine/InstCombineCasts.cpp
+149-02 files

Linux/linux 704340farch/x86/include/asm pgtable.h div64.h, arch/x86/kernel amd_node.c alternative.c

Merge tag 'x86_urgent_for_7.3-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

Pull x86 fixes from Dave Hansen:
 "The most notable fix is THP not silently losing user data and having
  been around for a couple of years. The main explanation I'd have for
  its longevity is that it requires a few different things to align at
  the same time: MADV_FREE, THP and heavy reclaim.

   - Fix user-space data loss with THP

   - Fix set_memory oopses

   - Fix addition of large constants in mul_u64_add_u64_div_u64()

   - Fix FineIBT hash offset in cfi_get_func_hash()

   - Fix PCI device reference counting in amd_smn_init()"

* tag 'x86_urgent_for_7.3-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:

    [8 lines not shown]
DeltaFile
+74-37arch/x86/kernel/alternative.c
+41-12arch/x86/mm/pat/set_memory.c
+2-4arch/x86/kernel/amd_node.c
+1-1arch/x86/include/asm/pgtable.h
+1-1arch/x86/include/asm/div64.h
+2-0include/linux/mmap_lock.h
+121-556 files

FreeBSD/src 4564e1flib/msun/src s_fmaf.c

lib/msun: use the same algorithm for sw fmaf(3) as for fma(3)

PR:     298260

(cherry picked from commit b08e6a3882b44a09fbda84dd315a431c7a585219)
DeltaFile
+230-24lib/msun/src/s_fmaf.c
+230-241 files

FreeBSD/src 3825e6blib/msun/tests fma_test.c

lib/msun: add tests for fmaf(3) subnormals

PR:     298260

(cherry picked from commit cb82cc9f0e3bdf2b39734851c74b9a13edb0cbdc)
DeltaFile
+27-1lib/msun/tests/fma_test.c
+27-11 files

FreeBSD/src cf46693lib/msun/amd64 Makefile.inc s_fma_avx.S, lib/msun/src s_fmaf.c s_fma.c

lib/msun amd64: use AVX FMA instructions for fma(3) and fmaf(3) when available

(cherry picked from commit 18a5549bcb81ec084f284a98046631db277ad47c)
DeltaFile
+24-0lib/msun/amd64/s_fma_avx.S
+24-0lib/msun/amd64/s_fmaf_avx.S
+10-1lib/msun/src/s_fmaf.c
+10-1lib/msun/src/s_fma.c
+8-1lib/msun/amd64/Makefile.inc
+76-35 files

FreeBSD/src d6c9a08sys/dev/mlx5/mlx5_ib mlx5_ib_qp.c

mlx5ib: use the hardware Toeplitz id when creating an RSS TIR

(cherry picked from commit 36256f77c7de2bbfdff6922648f4d445d7212dc2)
DeltaFile
+2-1sys/dev/mlx5/mlx5_ib/mlx5_ib_qp.c
+2-11 files

FreeBSD/src 2c02bfblib/msun Makefile

lib/msun: move the calculation of LIBC_SRCTOP earlier

(cherry picked from commit b45fd24a3ca666fbb1c754d9de94a9b33fa7949e)
DeltaFile
+5-4lib/msun/Makefile
+5-41 files

OpenBSD/src p4sAKR8share/man/man5 bsd.port.mk.5

   archs -> architectures in DEBUGINFO_ARCHS description

   matches how other ARCHS variables are described
VersionDeltaFile
1.656+4-3share/man/man5/bsd.port.mk.5
+4-31 files

FreeBSD/src 77535f9sys/fs/nfs nfs_commonkrpc.c, sys/rpc svc.h clnt_rc.c

nfscl: Yet more fixes for the NFS over RDMA client glue

Yet again.  I was trying to make the svc_vc_backchannel()
operations do double duty and be used by the clnt_rdma.c code
as well.  It got too messy, so this reverts svc_vc.c back to
its pre-glue form and adds the small changes needed to support
a separate set of svc_rdma_backchannel_xxx() functions.

This commit should not affect non-RDMA behaviour.

MFC after:      3 months
Fixes:  884ee8d6c9b4 ("nfscl: Add some glue for client side NFS over RDMA")
DeltaFile
+12-7sys/fs/nfs/nfs_commonkrpc.c
+2-10sys/rpc/svc_vc.c
+2-3sys/rpc/krpc.h
+1-1sys/rpc/clnt_rc.c
+1-0sys/rpc/svc.h
+18-215 files

HardenedBSD/ports 6943dbbdevel/rustup-init Makefile Makefile.crates, devel/rustup-init/files patch-Cargo.lock

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+537-597devel/rustup-init/distinfo
+267-297devel/rustup-init/Makefile.crates
+134-0security/vuxml/vuln/2026.xml
+26-0devel/rustup-init/files/patch-Cargo.lock
+20-4devel/rustup-init/Makefile
+0-23security/strongswan/files/patch-src_libcharon_plugins_smp_smp.c
+984-92144 files not shown
+1,142-1,01450 files

FreeBSD/ports 53071e1devel/golangci-lint Makefile distinfo

devel/golangci-lint: Update to 2.13.2

ChangeLog:
https://github.com/golangci/golangci-lint/releases/tag/v2.13.2
DeltaFile
+5-5devel/golangci-lint/distinfo
+2-3devel/golangci-lint/Makefile
+7-82 files

HardenedBSD/ports 53071e1devel/golangci-lint Makefile distinfo

devel/golangci-lint: Update to 2.13.2

ChangeLog:
https://github.com/golangci/golangci-lint/releases/tag/v2.13.2
DeltaFile
+5-5devel/golangci-lint/distinfo
+2-3devel/golangci-lint/Makefile
+7-82 files

HardenedBSD/ports e5c1988graphics/gpxsee Makefile distinfo

graphics/gpxsee: Update to 16.15

https://github.com/tumic0/GPXSee/releases/tag/16.15

PR:             298449
Approved by:    fluffy (mentor)
DeltaFile
+3-3graphics/gpxsee/distinfo
+1-1graphics/gpxsee/Makefile
+4-42 files

FreeBSD/ports e5c1988graphics/gpxsee Makefile distinfo

graphics/gpxsee: Update to 16.15

https://github.com/tumic0/GPXSee/releases/tag/16.15

PR:             298449
Approved by:    fluffy (mentor)
DeltaFile
+3-3graphics/gpxsee/distinfo
+1-1graphics/gpxsee/Makefile
+4-42 files

LLVM/project 1b0b6b1llvm/docs CodeReview.md CIBestPractices.md

[LLVM][docs] Address batch 10 Markdown review feedback
DeltaFile
+72-372llvm/docs/ConvergenceAndUniformity.md
+23-27llvm/docs/ConvergentOperations.md
+17-18llvm/docs/GitBisecting.md
+12-12llvm/docs/CIBestPractices.md
+4-4llvm/docs/CodeReview.md
+128-4335 files

HardenedBSD/ports 53f5066sysutils/tflint Makefile distinfo

sysutils/tflint: Update to 0.64.0

ChangeLog:
https://github.com/terraform-linters/tflint/releases/tag/v0.64.0
DeltaFile
+5-5sysutils/tflint/distinfo
+1-2sysutils/tflint/Makefile
+6-72 files

FreeBSD/ports 53f5066sysutils/tflint Makefile distinfo

sysutils/tflint: Update to 0.64.0

ChangeLog:
https://github.com/terraform-linters/tflint/releases/tag/v0.64.0
DeltaFile
+5-5sysutils/tflint/distinfo
+1-2sysutils/tflint/Makefile
+6-72 files

LLVM/project 63d2e62clang/include/clang/Lex Preprocessor.h MacroInfo.h, clang/lib/Lex PPMacroExpansion.cpp

[clang][Lex] Unique ModuleMacros with a UniquingSet (NFC) (#223270)

This patch migrates ModuleMacros in Preprocessor from llvm::FoldingSet
to llvm::UniquingSet.

ModuleMacro keys on a pair of Module * and const IdentifierInfo *.
Switching to UniquingSet allows us to look up macros with a typed key,
eliminating FoldingSetNodeID serialization at lookup sites and removing
ModuleMacro::Profile.

Assisted-by: Antigravity
DeltaFile
+3-9clang/include/clang/Lex/MacroInfo.h
+2-8clang/lib/Lex/PPMacroExpansion.cpp
+1-1clang/include/clang/Lex/Preprocessor.h
+6-183 files

NetBSD/src dQJhjyMsys/net/npf npf_ext_route.c

   rprocs are called from a softintr, so use kmem_intr_*
VersionDeltaFile
1.8+3-3sys/net/npf/npf_ext_route.c
+3-31 files

LLVM/project bce20f5clang/test/Preprocessor riscv-target-features.c, llvm/lib/Target/RISCV RISCVFeatures.td

[RISCV][MC] Add experimental Smidctrl, Ssidctrl, Smnip, and Ssnip support (#218108)

Add experimental MC support for Smidctrl, Ssidctrl, Smnip, and Ssnip
extensions.

This completes MC support for the ACLIC v0.20 extensions.
DeltaFile
+46-0clang/test/Preprocessor/riscv-target-features.c
+42-0llvm/test/MC/RISCV/supervisor-csr-names.s
+42-0llvm/test/MC/RISCV/machine-csr-names.s
+18-0llvm/lib/Target/RISCV/RISCVFeatures.td
+16-0llvm/test/CodeGen/RISCV/attributes.ll
+12-0llvm/test/MC/RISCV/attribute-arch.s
+176-06 files not shown
+198-812 files

HardenedBSD/ports d128625security/vuxml/vuln 2026.xml

security/vuxml: Document gitea < 1.27.3 vulnerabilities

Gitea 1.27.3 fixes 26 security issues, hardens issue searching
that an unfiltered query no longer enumerates every public
repository into the indexer filter and removes unsafe code
from the internal private endpoints.

PR:             298072
Approved by:    osa, vvd (Mentors, implicit)
DeltaFile
+56-0security/vuxml/vuln/2026.xml
+56-01 files

FreeBSD/ports d128625security/vuxml/vuln 2026.xml

security/vuxml: Document gitea < 1.27.3 vulnerabilities

Gitea 1.27.3 fixes 26 security issues, hardens issue searching
that an unfiltered query no longer enumerates every public
repository into the indexer filter and removes unsafe code
from the internal private endpoints.

PR:             298072
Approved by:    osa, vvd (Mentors, implicit)
DeltaFile
+56-0security/vuxml/vuln/2026.xml
+56-01 files

OpenBSD/ports kQpgTPesysutils/docker-compose Makefile modules.inc

   sysutils/docker-compose: update to 5.5.1
VersionDeltaFile
1.37+688-798sysutils/docker-compose/distinfo
1.33+242-260sysutils/docker-compose/modules.inc
1.40+1-1sysutils/docker-compose/Makefile
+931-1,0593 files

LLVM/project c577c6clldb/test/Shell/Unwind signal-frame-undefined-ra.test, lldb/test/Shell/Unwind/Inputs signal-frame-undefined-ra.s

[lldb] Test undefined return addresses in signal frames (#223046)

Signal-frame CFI can explicitly mark its return-address register
undefined to represent a terminal synthetic context. This is useful for
contexts such as newly created FreeBSD kernel threads that do not have
an interrupted caller.

Verify that LLDB keeps the signal frame in the backtrace and terminates
the unwind without creating a caller.

Assisted-by: GPT
DeltaFile
+19-0lldb/test/Shell/Unwind/Inputs/signal-frame-undefined-ra.s
+18-0lldb/test/Shell/Unwind/signal-frame-undefined-ra.test
+37-02 files

FreeBSD/ports 344a598www/gitea Makefile distinfo

www/gitea: Security update 1.27.2 => 1.27.3

Release Notes:
https://blog.gitea.com/release-of-1.27.3/

PR:             298072
Approved by:    ports at foss-daily.org (maintainer timeout, 2 weeks)
Approved by:    osa, vvd (Mentors, implicit)
Security:       CVE-2026-66877
Security:       CVE-2026-71184
Security:       CVE-2026-68957
Security:       CVE-2026-60010
Security:       CVE-2026-70406
Security:       CVE-2026-63792
Security:       CVE-2026-66874
Security:       CVE-2026-68964
Security:       CVE-2026-67577
Security:       CVE-2026-66849
Security:       CVE-2026-73135

    [18 lines not shown]
DeltaFile
+3-3www/gitea/distinfo
+1-2www/gitea/Makefile
+4-52 files

FreeBSD/ports 8d487eawww/gitea Makefile distinfo

www/gitea: Security update 1.27.2 => 1.27.3

Release Notes:
https://blog.gitea.com/release-of-1.27.3/

PR:             298072
Approved by:    ports at foss-daily.org (maintainer timeout, 2 weeks)
Approved by:    osa, vvd (Mentors, implicit)
Security:       CVE-2026-66877
Security:       CVE-2026-71184
Security:       CVE-2026-68957
Security:       CVE-2026-60010
Security:       CVE-2026-70406
Security:       CVE-2026-63792
Security:       CVE-2026-66874
Security:       CVE-2026-68964
Security:       CVE-2026-67577
Security:       CVE-2026-66849
Security:       CVE-2026-73135

    [16 lines not shown]
DeltaFile
+3-3www/gitea/distinfo
+1-2www/gitea/Makefile
+4-52 files

HardenedBSD/ports 8d487eawww/gitea Makefile distinfo

www/gitea: Security update 1.27.2 => 1.27.3

Release Notes:
https://blog.gitea.com/release-of-1.27.3/

PR:             298072
Approved by:    ports at foss-daily.org (maintainer timeout, 2 weeks)
Approved by:    osa, vvd (Mentors, implicit)
Security:       CVE-2026-66877
Security:       CVE-2026-71184
Security:       CVE-2026-68957
Security:       CVE-2026-60010
Security:       CVE-2026-70406
Security:       CVE-2026-63792
Security:       CVE-2026-66874
Security:       CVE-2026-68964
Security:       CVE-2026-67577
Security:       CVE-2026-66849
Security:       CVE-2026-73135

    [16 lines not shown]
DeltaFile
+3-3www/gitea/distinfo
+1-2www/gitea/Makefile
+4-52 files

OpenBSD/ports brsfJQLsysutils/docker-cli Makefile distinfo

   sysutils/docker: update to 29.8.0
VersionDeltaFile
1.46+2-2sysutils/docker-cli/distinfo
1.51+1-1sysutils/docker-cli/Makefile
+3-32 files