NetBSD/pkgsrc k4BwHQFdoc CHANGES-2026

   doc: Updated mail/rspamd to 4.1.4
VersionDeltaFile
1.4845+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc jcfm1cQmail/rspamd cfgfiles.mk Makefile

   mail/rspamd: update to 4.1.4

   pkgsrc change: remove a pkglint warning of cfgfiles.mk.


   4.1.4 (2026-07-29)

   Incompatible changes

   * Build: rspamd now links a single shared jemalloc instance per process and
     refuses a static-only jemalloc — duplicated allocators caused segfaults
     at startup

   Features

   * WebUI: read-only users can now access the Selectors tab and the Errors
     history

   Bug fixes

    [21 lines not shown]
VersionDeltaFile
1.77+4-4mail/rspamd/distinfo
1.138+2-2mail/rspamd/Makefile
1.23+1-2mail/rspamd/cfgfiles.mk
+7-83 files

FreeBSD/ports 87276c7irc/weechat Makefile distinfo

irc/weechat: Update to 4.9.5

PR:             297169
Reported by:    Fabian Wenk

(cherry picked from commit e497d8f48cf847ff13fff9bc738b72026ecfc337)
DeltaFile
+3-3irc/weechat/distinfo
+1-1irc/weechat/Makefile
+4-42 files

NetBSD/pkgsrc uFOSWEcdoc CHANGES-2026

   doc: Updated net/samba4 to 4.24.5
VersionDeltaFile
1.4844+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc kVHYmE5net/samba4 Makefile distinfo, net/samba4/patches patch-lib_util_util__crypt.c

   net/samba4: update to 4.24.5

   pkgsrc change:

   * remove pkglint warnings of patches/patch-lib_util_util__crypt.c


                      ==============================
                      Release Notes for Samba 4.24.5
                              July 28, 2026
                      ==============================


   This is a security release in order to address the following defects:

   o CVE-2026-6949:   TSIG packet with name compression can crash DNS

                      Incorrect size calculations when a TSIG record contains
                      compressed names can lead to a large out-of-bounds write

    [72 lines not shown]
VersionDeltaFile
1.129+5-5net/samba4/distinfo
1.4+3-3net/samba4/patches/patch-lib_util_util__crypt.c
1.220+2-2net/samba4/Makefile
+10-103 files

FreeBSD/ports 3818881security/vuxml/vuln 2026.xml

security/vuxml: Document Weechat vulnerabilities
DeltaFile
+27-0security/vuxml/vuln/2026.xml
+27-01 files

LLVM/project e5bc20blldb/docs dil-expr-lang.ebnf, lldb/source/ValueObject DILLexer.cpp DILEval.cpp

[lldb] Add bitwise operators to DIL (#209768)

Add binary bitwise operators `|`, `^`, `&`, and unary bitwise `~`.
DeltaFile
+79-4lldb/source/ValueObject/DILParser.cpp
+65-0lldb/source/ValueObject/DILEval.cpp
+59-0lldb/test/API/commands/frame/var-dil/expr/Bitwise/TestFrameVarDILBitwise.py
+9-3lldb/docs/dil-expr-lang.ebnf
+12-0lldb/test/API/commands/frame/var-dil/expr/Bitwise/main.cpp
+9-0lldb/source/ValueObject/DILLexer.cpp
+233-75 files not shown
+252-711 files

NetBSD/pkgsrc B4RqDbOdoc CHANGES-2026

   doc: Update www/ruby-rails80 and related pacakges to 8.0.5.1

        devel/ruby-activesupport80
        devel/ruby-activemodel80
        devel/ruby-activejob80
        databases/ruby-activerecord80
        www/ruby-actionview80
        www/ruby-actionpack80
        www/ruby-actioncable80
        devel/ruby-railties80
        devel/ruby-activestorage80
        mail/ruby-actionmailer80
        mail/ruby-actionmailbox80
        textproc/ruby-actiontext80
        www/ruby-rails80
VersionDeltaFile
1.4843+14-1doc/CHANGES-2026
+14-11 files

NetBSD/src B5S0h6Xdoc CHANGES-11.0, external/gpl2/groff/tmac mdoc.local

   Welcome to 11.0!
VersionDeltaFile
1.1.2.141+7-1doc/CHANGES-11.0
1.11.4.9+3-3external/gpl2/groff/tmac/mdoc.local
1.738.2.9+2-2sys/sys/param.h
+12-63 files

NetBSD/pkgsrc D6yclerdevel/ruby-activemodel80 distinfo, devel/ruby-activesupport80 distinfo

   www/ruby-rails80: update to 8.0.5.1

   Ruby on Rails 8.0.5.1 (2026-07-29)

   Active Storage

   * A possible arbitrary file read and remote code execution in Active Storage
     variant processing (CVE-2026-66066)
VersionDeltaFile
1.7+4-4www/ruby-actionview80/distinfo
1.7+4-4www/ruby-actionpack80/distinfo
1.7+4-4www/ruby-actioncable80/distinfo
1.7+4-4devel/ruby-railties80/distinfo
1.7+4-4devel/ruby-activesupport80/distinfo
1.7+4-4devel/ruby-activemodel80/distinfo
+24-249 files not shown
+56-5515 files

NetBSD/pkgsrc 4N4tuwIdoc CHANGES-2026

   doc: Update www/ruby-rails72 and related pacakges to 7.2.3.2

        devel/ruby-activesupport72
        devel/ruby-activemodel72
        devel/ruby-activejob72
        databases/ruby-activerecord72
        www/ruby-actionview72
        www/ruby-actionpack72
        www/ruby-actioncable72
        devel/ruby-railties72
        devel/ruby-activestorage72
        mail/ruby-actionmailer72
        mail/ruby-actionmailbox72
        textproc/ruby-actiontext72
        www/ruby-rails72
VersionDeltaFile
1.4842+14-1doc/CHANGES-2026
+14-11 files

LLVM/project e696fb5clang/lib/StaticAnalyzer/Checkers LifetimeModeling.cpp UseAfterLifetimeEnd.cpp, clang/test/Analysis lifetime-bound.cpp

 [analyzer] Improve UseAfterLifetimeEnd checker's diagnostic with descriptive names and value tracking (#212158)

Currently the `UseAfterLifetimeEnd` checker used `getString()` for
constructing error message. However, `getString()` is a debug only
stringification and should not be used for emitting reports to the
users. That is why I have changed it to `getDescriptiveName()` and also
implemented the `getRegionName`(#211552) function to return the region's
descriptive name. The `getRegionName()` function got also moved to the
modeling checker since both of the reporting checkers consume it
(#211818). This PR also uses the `trackStoredValue()` for value tracking
path notes, so the report points at where the value's source came from.
DeltaFile
+63-32clang/test/Analysis/lifetime-bound.cpp
+7-5clang/lib/StaticAnalyzer/Checkers/UseAfterLifetimeEnd.cpp
+3-2clang/lib/StaticAnalyzer/Checkers/LifetimeModeling.cpp
+73-393 files

NetBSD/pkgsrc dcBLZI1devel/ruby-activemodel72 distinfo, devel/ruby-activesupport72 distinfo

   www/ruby-rails72: update to 7.2.3.2

   Ruby on Rails 7.2.3.2 (2026-07-29)

   Active Storage

   * A possible arbitrary file read and remote code execution in Active Storage
     variant processing (CVE-2026-66066)
VersionDeltaFile
1.5+4-4www/ruby-actionview72/distinfo
1.5+4-4www/ruby-actionpack72/distinfo
1.5+4-4www/ruby-actioncable72/distinfo
1.5+4-4devel/ruby-railties72/distinfo
1.5+4-4devel/ruby-activesupport72/distinfo
1.5+4-4devel/ruby-activemodel72/distinfo
+24-249 files not shown
+56-5515 files

LLVM/project 9f75b6bllvm/docs AMDGPUMemoryModel.md

[AMDGPU][Docs] Memory Model: Refactor location-order to cover reads

This shouldn't change anything semantically, only make the spec
(a) closer to the Vulkan spec, which includes reads in their location-ordered
    relation: https://docs.vulkan.org/spec/latest/appendices/memorymodel.html#memory-model-location-ordered
(b) more uniform: this way, the may-see constraints are the same as the vanilla
    LLVM constraints, only with all occurrences of "happens-before" replaced by
    "location-ordered before".
DeltaFile
+7-3llvm/docs/AMDGPUMemoryModel.md
+7-31 files

LLVM/project 5993d28llvm/lib/Transforms/Vectorize VPlanTransforms.cpp

[VPlan] Process simplifyRecipes in a worklist

For now just push the new recipe onto the worklist, not its users. For users we need to be careful if we're introducing cycles.
DeltaFile
+22-23llvm/lib/Transforms/Vectorize/VPlanTransforms.cpp
+22-231 files

LLVM/project 6e56fa3llvm/lib/Target/AMDGPU AMDGPUSwLowerLDS.cpp

changes as per review feedback
DeltaFile
+33-30llvm/lib/Target/AMDGPU/AMDGPUSwLowerLDS.cpp
+33-301 files

LLVM/project 66d049clibcxx/include/__random mersenne_twister_engine.h, libcxx/test/std/numerics/rand/rand.eng/rand.eng.mers seed_sseq.pass.cpp ctor_sseq.pass.cpp

[libc++] Fix std::mt19937 seeding with std::seed_seq under vectorized ABI (#209860)

This PR fixes a bug in `std::mersenne_twister_engine::seed(_Sseq&)`
where the initialization twist is bypassed when the vectorized engine
optimization (`_LIBCPP_ABI_VECTORIZED_MERSENNE_TWISTER_ENGINE`) is
enabled.

In the vectorized implementation introduced in #206423, the engine state
must be pre-twisted during initialization by calling
`__update_all_states()` at the end of the `seed` functions.

However, in `seed(_Sseq& __q)`, the all-zero state check contains an
early `return;` when a non-zero state is verified. This early return
bypasses the trailing `__update_all_states()` call. Consequently, the
generator is initialized with raw, untwisted seed values (tempered)
rather than the standard twisted values.

This only manifests when compiled with unstable ABI settings
(`_LIBCPP_ABI_VERSION >= 2`) which enables the vectorized

    [7 lines not shown]
DeltaFile
+63-63libcxx/test/std/numerics/rand/rand.eng/rand.eng.mers/ctor_sseq.pass.cpp
+23-1libcxx/test/std/numerics/rand/rand.eng/rand.eng.mers/seed_sseq.pass.cpp
+5-3libcxx/include/__random/mersenne_twister_engine.h
+91-673 files

LLVM/project 7ccf4e6llvm/lib/Target/RISCV RISCVISelLowering.cpp, llvm/test/CodeGen/RISCV rvp-simd-64.ll

[RISCV] Improve lowerVECTOR_SHUFFLEAsPPair. (#212895)

Allow V1 and V2 to be swapped. Allow V1 or V2 to be used twice.

Assisted-by: Claude
DeltaFile
+147-0llvm/test/CodeGen/RISCV/rvp-simd-64.ll
+50-31llvm/lib/Target/RISCV/RISCVISelLowering.cpp
+197-312 files

NetBSD/src y34Jpgbsys/arch/arm/ti am18xx_usbphyclk.c am18xx_usbphy.c

   fix cvs revision comment not expanding
VersionDeltaFile
1.3+2-2sys/arch/arm/ti/ti_motgphy.c
1.2+2-2sys/arch/arm/ti/am18xx_platform.c
1.3+1-1sys/arch/arm/ti/am18xx_usbphyclk.c
1.2+1-1sys/arch/arm/ti/am18xx_usbphy.c
1.2+1-1sys/arch/arm/ti/am18xx_timer.c
1.4+1-1sys/arch/arm/ti/am18xx_psc.c
+8-84 files not shown
+12-1210 files

OpenBSD/ports JnASezPgraphics/colorexplorer Makefile

   MODTK_VERSION=8.6
VersionDeltaFile
1.11+8-2graphics/colorexplorer/Makefile
+8-21 files

LLVM/project 11b58f0libcxx/test/std/ranges/range.adaptors/range.elements/iterator ctor.base.pass.cpp, libcxx/test/std/ranges/range.adaptors/range.elements/sentinel ctor.base.pass.cpp

[libc++][ranges] P3059R2: Making user-defined constructors of view iterators/sentinels private (#193891)

Implements https://wg21.link/P3059R2 (DR)

Closes #189599

1. Made constructors of iterator and sentinel types of the following
views private:
  - `iota_view`
  - `basic_istream_view`
  - `filter_view`
  - `transform_view`
  - `take_view`
  - `take_while_view`
  - `join_view`
  - `lazy_split_view`
  - `split_view`
  - `elements_view`
2. Updated all relevant tests to fix the usages of the now private

    [10 lines not shown]
DeltaFile
+0-86libcxx/test/std/ranges/range.adaptors/range.take.while/sentinel/ctor.base.pass.cpp
+0-60libcxx/test/std/ranges/range.adaptors/range.filter/sentinel/ctor.parent.pass.cpp
+0-58libcxx/test/std/ranges/range.factories/range.istream.view/iterator/ctor.pass.cpp
+0-54libcxx/test/std/ranges/range.adaptors/range.elements/iterator/ctor.base.pass.cpp
+0-53libcxx/test/std/ranges/range.adaptors/range.split/iterator/ctor.base.pass.cpp
+0-52libcxx/test/std/ranges/range.adaptors/range.elements/sentinel/ctor.base.pass.cpp
+0-36350 files not shown
+640-83556 files

FreeBSD/ports 0dddf9dnet/kea-devel Makefile distinfo

net/kea-devel: Update to 3.3.0

Upstream's develpment branch has been created. We will track it now.
DeltaFile
+3-3net/kea-devel/distinfo
+2-2net/kea-devel/Makefile
+5-52 files

LLVM/project 73d6181libc/src/__support/math ceilf128.h, libc/src/math/generic CMakeLists.txt ceilf128.cpp

test
DeltaFile
+7-0libc/src/math/generic/ceilf128.cpp
+2-2libc/src/__support/math/ceilf128.h
+1-0libc/src/math/generic/CMakeLists.txt
+10-23 files

FreeBSD/ports e497d8firc/weechat Makefile distinfo

irc/weechat: Update to 4.9.5

PR:             297169
Reported by:    Fabian Wenk
DeltaFile
+3-3irc/weechat/distinfo
+1-1irc/weechat/Makefile
+4-42 files

LLVM/project 2f08dfflibc/hdr/types struct_statfs.h, libc/include/llvm-libc-types struct_statfs.h

[libc] Refactor statfs Linux syscalls and provide 'struct statfs' (#212930)

* Extract statfs/fstatfs Linux syscall wrappers to
`linux/syscall_wrappers` directory;
* Provide our own definition of `struct statfs` type and a corresponding
proxy header (to use system type in overlay mode);
* Migrate callers (e.g. statfs->statvfs translation) to use the new
syscall wrapper.

This would allow us to add Linux-specific (non-POSIX) `<sys/statfs.h>`
header as a next step.

Assisted by: Gemini, human-reviewed
DeltaFile
+8-59libc/src/sys/statvfs/linux/statfs_utils.h
+43-0libc/src/__support/OSUtil/linux/syscall_wrappers/fstatfs.h
+43-0libc/src/__support/OSUtil/linux/syscall_wrappers/statfs.h
+39-0libc/include/llvm-libc-types/struct_statfs.h
+27-0libc/hdr/types/struct_statfs.h
+26-0libc/src/__support/OSUtil/linux/syscall_wrappers/CMakeLists.txt
+186-5911 files not shown
+286-10017 files

LLVM/project aa07c1fllvm/lib/Target/SPIRV SPIRVNonSemanticDebugHandler.h SPIRVNonSemanticDebugHandler.cpp, llvm/test/CodeGen/SPIRV/debug-info debug-function-with-declaration.ll debug-function.ll

Implement support for NSDI DebugFunction opcode. (#211760)

Add support for
[DebugFunction](https://github.khronos.org/SPIRV-Registry/nonsemantic/NonSemantic.Shader.DebugInfo.html#DebugFunction).
DeltaFile
+55-4llvm/lib/Target/SPIRV/SPIRVNonSemanticDebugHandler.cpp
+44-0llvm/test/CodeGen/SPIRV/debug-info/debug-function-namespace-scope.ll
+43-0llvm/test/CodeGen/SPIRV/debug-info/debug-function.ll
+27-13llvm/lib/Target/SPIRV/SPIRVNonSemanticDebugHandler.h
+37-0llvm/test/CodeGen/SPIRV/debug-info/debug-function-with-declaration.ll
+206-175 files

OpenBSD/ports s8ekd8ssecurity/yara/python Makefile distinfo

   update to py3-yara-4.5.5
VersionDeltaFile
1.15+2-2security/yara/python/distinfo
1.27+1-1security/yara/python/Makefile
+3-32 files

OpenBSD/ports 7PP9eTCsecurity/yara/main distinfo Makefile, security/yara/main/patches patch-configure_ac patch-libyara_modules_pe_pe_c

   update to yara-4.5.8
VersionDeltaFile
1.3+4-4security/yara/main/patches/patch-libyara_modules_pe_pe_c
1.12+3-3security/yara/main/Makefile
1.16+2-2security/yara/main/distinfo
1.2+1-1security/yara/main/patches/patch-configure_ac
+10-104 files

NetBSD/src HX90Nsfsys/arch/powerpc/powerpc bus_dma.c

   Don't forget to advance within the segment in _bus_dmamap_load_raw.

   This went unnoticed, because the function is rarely used. While it is
   wired in PowerPC DMA routines, no PowerPC specific drivers actually
   use it. It only appears in a few MI drivers.

   With small _dm_segcnt, load just failed with EFBIG, with large value
   all segments pointed to the same page, which resulted in corrupting
   the transfer.
VersionDeltaFile
1.60+3-2sys/arch/powerpc/powerpc/bus_dma.c
+3-21 files

OpenBSD/ports XsEviUblang/php/8.5 Makefile distinfo, lang/php/8.5/patches patch-ext_openssl_openssl_backend_common_c patch-ext_hash_hash_xxhash_c

   update to php-8.5.9
VersionDeltaFile
1.5.2.1+2-2lang/php/8.5/patches/patch-ext_openssl_openssl_backend_common_c
1.1.2.1+2-2lang/php/8.5/patches/patch-ext_hash_hash_xxhash_c
1.5.2.4+2-2lang/php/8.5/distinfo
1.9.2.4+1-2lang/php/8.5/Makefile
+7-84 files