FreeBSD/ports 9ba3832 — graphics/openexr Makefile distinfo, graphics/openexr-website-docs Makefile distinfo

graphics/openexr*: Security update to 3.4.17

Changelog:
https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.4.17

PR:             300513
Pull Request:   https://github.com/freebsd/freebsd-ports/pull/661
Security:       GHSA-WHF5-29MJ-GP53
Security:       GHSA-VP77-HHRC-M2C3
Security:       GHSA-RXWG-X3WX-PGFH
Security:       GHSA-RJG8-982X-JHC2
Security:       GHSA-J76P-H7GW-VMPF
Security:       GHSA-G248-596F-9995
Security:       GHSA-FRX8-5P4H-J8M7
Security:       GHSA-638X-X7MR-89XC
Security:       GHSA-3CP4-779M-H837
MFH:            2026Q4

(cherry picked from commit 303a08d439869e8796f987ec116d1a83d231adb0)
DeltaFile
+3-3graphics/openexr/distinfo
+3-3graphics/openexr-website-docs/distinfo
+1-1graphics/openexr/Makefile
+1-1graphics/openexr-website-docs/Makefile
+8-84 files

FreeBSD/ports 303a08d — graphics/openexr Makefile distinfo, graphics/openexr-website-docs Makefile distinfo

graphics/openexr*: Security update to 3.4.17

Changelog:
https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.4.17

PR:             300513
Pull Request:   https://github.com/freebsd/freebsd-ports/pull/661
Security:       GHSA-WHF5-29MJ-GP53
Security:       GHSA-VP77-HHRC-M2C3
Security:       GHSA-RXWG-X3WX-PGFH
Security:       GHSA-RJG8-982X-JHC2
Security:       GHSA-J76P-H7GW-VMPF
Security:       GHSA-G248-596F-9995
Security:       GHSA-FRX8-5P4H-J8M7
Security:       GHSA-638X-X7MR-89XC
Security:       GHSA-3CP4-779M-H837
MFH:            2026Q4
DeltaFile
+3-3graphics/openexr/distinfo
+3-3graphics/openexr-website-docs/distinfo
+1-1graphics/openexr/Makefile
+1-1graphics/openexr-website-docs/Makefile
+8-84 files

LLVM/project 22e6c38 — libcxx/include/__configuration attributes.h, libcxx/include/__numeric reduce.h transform_reduce.h

[libc++] Allow the compiler to reorder computation in reduction loops (#237918)

This PR allows Clang to vectorize and interleave loops in the reduction
algorithms: `std::reduce` and `std::transform_reduce`.
This is permitted by
https://eel.is/c++draft/numerics.defns#lib:GENERALIZED_SUM.

Currently it's enabled only for Clang, it's unclear if GCC has a direct
equivalent.

A new macro `_LIBCPP_ENABLE_LOOP_VECTORIZATION` is tentatively placed in
`__configuration/attributes.h`, though it's not an attribute per-se.
Ideally we might want to refactor `__configuration/pstl.h` to be less
PSTL-specific and put the new macro there instead.

Part of #234887
DeltaFile
+6-0libcxx/include/__configuration/attributes.h
+2-0libcxx/include/__numeric/transform_reduce.h
+1-0libcxx/include/__numeric/reduce.h
+9-03 files

LLVM/project 7adfcc6 — llvm/lib/CodeGen RegAllocBase.cpp

Remove braces around single line

*grumble* *grumble*
DeltaFile
+1-2llvm/lib/CodeGen/RegAllocBase.cpp
+1-21 files

FreeBSD/ports 97fadf7 — security/vuxml/vuln 2026.xml

security/vuxml: Document OpenEXR vulnerabilities

PR:             300513
Approved by:    osa, vvd (mentors, implicit)
DeltaFile
+48-0security/vuxml/vuln/2026.xml
+48-01 files

LLVM/project 63122d8 — mlir/lib/Dialect/SMT/IR SMTTypes.cpp SMTAttributes.cpp, mlir/lib/Dialect/Transform/IR TransformTypes.cpp TransformAttrs.cpp

[mlir][NFC] Remove includes provided by generated declarations and definitions (#238848)

#236155 and #238735 made the generated declarations and definitions of
ops, attributes, types and interfaces include the core MLIR headers they
require. Includes that headers and source files only had for the
generated code are therefore redundant. This removes them in MLIR, Flang
and ClangIR.

Includes of headers that the hand-written code uses directly are kept,
even when the generated code includes them as well.

---------

Co-authored-by: Claude <noreply at anthropic.com>
DeltaFile
+0-4mlir/lib/Dialect/WasmSSA/IR/WasmSSADialect.cpp
+0-4mlir/lib/Dialect/Transform/IR/TransformAttrs.cpp
+0-3mlir/lib/Dialect/X86/IR/X86Dialect.cpp
+0-3mlir/lib/Dialect/Transform/IR/TransformTypes.cpp
+0-3mlir/lib/Dialect/SMT/IR/SMTTypes.cpp
+0-3mlir/lib/Dialect/SMT/IR/SMTAttributes.cpp
+0-20157 files not shown
+0-259163 files

LLVM/project 9c8451e — llvm/lib/Transforms/IPO FunctionSpecialization.cpp, llvm/test/Transforms/FunctionSpecialization recursive-penalty.ll

Revert "[FuncSpec] Relax restrictions on code size growth (#196570)"

This reverts commit 63869fbf169963adb7c737bc3e6be2fe86531253.
DeltaFile
+3-3llvm/lib/Transforms/IPO/FunctionSpecialization.cpp
+1-1llvm/test/Transforms/FunctionSpecialization/recursive-penalty.ll
+4-42 files

FreeBSD/ports d079708 — www/vaultwarden-web_vault Makefile distinfo

www/vaultwarden-web_vault: Update to 2026.10.1

PR:             300505
Reported by:    courtney at courtnix.systems
DeltaFile
+3-3www/vaultwarden-web_vault/distinfo
+1-1www/vaultwarden-web_vault/Makefile
+4-42 files

OPNSense/plugins 4e78e0f — security/acme-client pkg-descr, security/acme-client/src/opnsense/mvc/app/library/OPNsense/AcmeClient LeCommon.php LeCertificate.php

Merge pull request #5877 from fraenki/acme_418a

security/acme-client: additions for release 4.18
DeltaFile
+153-38security/acme-client/src/opnsense/mvc/app/library/OPNsense/AcmeClient/LeCertificate.php
+6-0security/acme-client/pkg-descr
+3-0security/acme-client/src/opnsense/mvc/app/library/OPNsense/AcmeClient/LeCommon.php
+162-383 files

pkgng/pkgng a031b07 — . NEWS, libpkg pkg_elf.c

elf: do not read past the note section data

The loop copied a note header while any byte was left, so a last note
followed by padding shorter than a header made it read past the section.
The ABI descriptor was then read without checking that it fits, and the
name was compared with strcmp() although it is not necessarily
terminated.

Only read a whole header, check that the name and the descriptor fit
before using them, compare the name with the length the note declares,
and advance with the per field padding the format defines.
DeltaFile
+36-14libpkg/pkg_elf.c
+38-1tests/frontend/create-parsebin.sh
+3-0NEWS
+2-0tests/Makefile.in
+0-0tests/frontend/note-abi.binin
+0-0tests/frontend/note-padding.binin
+79-156 files

LLVM/project 6c1a8ed — llvm/lib/Target/AMDGPU AMDGPUEventTracking.h AMDGPUEventTracking.cpp, llvm/unittests/Target/AMDGPU AMDGPUEventTrackingTest.cpp

[AMDGPU][NewInsertWaitcnt] Event Tracker (2/2)

See #226970 for context and history regarding this patch.
This is intended to begin review as a 1-1 equivalent of #226970 with only one change: a "Drain"
test that Claude added and I found useful, so I left it in.

Builds upon the previous patch to include the functionality needed to import
events from predecessor basic blocks into a basic block, so a MBB can be aware of
previous state.

This adds the "age" system, which is necessary to preserve chronology across control-flow edges,
especially in asymmetrical diamonds, alongside a way to import predecessor state via a `enterBlock`
function.

Assisted-by: AI Coding Assistants for basic boilerplate/research/etc. - no logic was written by LLMs except some unit tests.
DeltaFile
+474-0llvm/unittests/Target/AMDGPU/AMDGPUEventTrackingTest.cpp
+179-14llvm/lib/Target/AMDGPU/AMDGPUEventTracking.cpp
+114-14llvm/lib/Target/AMDGPU/AMDGPUEventTracking.h
+767-283 files

LLVM/project 32bb12b — llvm/lib/CodeGen ShadowStackGCLowering.cpp, llvm/lib/Target/DirectX DXILMemIntrinsics.cpp

[LLVM] Use CreatePtrAddFrom(Signed|Unsigned)Offset helpers more (#239153)

Both to simplify code and make sure that the correct offset type
is always used (some places were hardcoding 64 or 32 bits, which
may not match the pointer index type).
DeltaFile
+11-16llvm/lib/Transforms/Instrumentation/MemorySanitizer.cpp
+6-6llvm/lib/Transforms/Instrumentation/AddressSanitizer.cpp
+6-6llvm/lib/CodeGen/ShadowStackGCLowering.cpp
+4-7llvm/lib/Transforms/Scalar/LowerMatrixIntrinsics.cpp
+5-5llvm/lib/Transforms/Scalar/MemCpyOptimizer.cpp
+4-3llvm/lib/Target/DirectX/DXILMemIntrinsics.cpp
+36-439 files not shown
+53-6415 files

NetBSD/pkgsrc GhRtWt2 — doc TODO CHANGES-2026

   doc: Updated net/arti to 2.8.0
VersionDeltaFile
1.28294+1-2doc/TODO
1.7666+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc ynQ0JY4 — net/arti Makefile cargo-depends.mk

   arti: update to 2.8.0.

   # Arti 2.8.0 — 3 November 2026

   Arti 2.8.0 continues our steady progress on relay and directory authority development,
   including on computing the consensus from votes,
   bootstrapping router descriptors and microdescriptors,
   as well as relay bandwidth rate-limiting,
   descriptor encoding, and the relay DNS cache implementation.
   Additionally, we have made a number of cleanups and
   clarifications to the Tor specification.

   This release has a number of security fixes; please see below.

   As usual, there are also many under-the-hood improvements and bug fixes,
   which are documented below.

   ### Security fixes


    [17 lines not shown]
VersionDeltaFile
1.22+487-499net/arti/distinfo
1.22+162-166net/arti/cargo-depends.mk
1.27+2-2net/arti/Makefile
+651-6673 files

LLVM/project 1c62b66 — llvm/test/CodeGen/NVPTX atomic-load-store-128-ptx83.ll load-store-128.ll

[NVPTX] Support native 128-bit atomic load + store (#236423)

Lower i128 atomic loads and stores to ld/st.b128 on SM 70 and newer with
PTX 8.3, instead of emulating them with compare-and-swap or exchange.

Split values into pairs of i64 operands and preserve the memory ordering
and scope so instruction selection inserts the required fences.

Add coverage for i128 and fp128 loads and stores, including memory
ordering, address spaces, volatile accesses, and unsupported targets.

Update scalar and elementwise atomic CAS loop checks to use 128-bit
loads.

Assisted by: Codex

---------

Co-authored-by: Akshay Deodhar <adeodhar at nvidia.com>
DeltaFile
+447-1,183llvm/test/CodeGen/NVPTX/atomicrmw-elementwise-sm90.ll
+384-672llvm/test/CodeGen/NVPTX/store-sm90.ll
+288-672llvm/test/CodeGen/NVPTX/load-sm90.ll
+484-0llvm/test/CodeGen/NVPTX/atomic-load-store-128.ll
+332-0llvm/test/CodeGen/NVPTX/load-store-128.ll
+131-0llvm/test/CodeGen/NVPTX/atomic-load-store-128-ptx83.ll
+2,066-2,52712 files not shown
+2,529-2,59618 files

LLVM/project 35ccf5c — llvm/lib/Target/AMDGPU AMDGPUEventTracking.cpp AMDGPUEventTracking.h

Address comments
DeltaFile
+4-4llvm/lib/Target/AMDGPU/AMDGPUEventTracking.h
+0-4llvm/lib/Target/AMDGPU/AMDGPUEventTracking.cpp
+4-82 files

LLVM/project 3a2f0ae — flang/lib/Semantics check-omp-structure.cpp, flang/test/Semantics/OpenMP reduction-array-singleton.f90

[flang][OpenMP] Avoid duplicate array section diagnostics (#238889)

Follow up to
https://github.com/llvm/llvm-project/pull/235855#pullrequestreview-5756315151

Assisted-by: AI
DeltaFile
+14-0flang/test/Semantics/OpenMP/reduction-array-singleton.f90
+3-1flang/lib/Semantics/check-omp-structure.cpp
+17-12 files

NetBSD/pkgsrc N45svFn — doc CHANGES-2026

   doc: Added textproc/ruby-json_schemer version 2.5.0
VersionDeltaFile
1.7665+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc JRrysRk — textproc Makefile

   textproc/Makefile: add and enable ruby-json_schemer
VersionDeltaFile
1.1617+2-1textproc/Makefile
+2-11 files

NetBSD/pkgsrc pyWTHPf — textproc/ruby-json_schemer ALTERNATIVES DESCR

   textproc/ruby-json_schemer: add version 2.5.0

   ruby-json_schemer is required by ruby-mcp package.
   My apologies for forgetting to commit ths package first.


   JSONSchemer

   JSON Schema validator.  Supports drafts 4, 6, 7, 2019-09, 2020-12, OpenAPI
   3.0, and OpenAPI 3.1.
VersionDeltaFile
1.1+68-0textproc/ruby-json_schemer/PLIST
1.1+20-0textproc/ruby-json_schemer/Makefile
1.1+5-0textproc/ruby-json_schemer/distinfo
1.1+4-0textproc/ruby-json_schemer/DESCR
1.1+1-0textproc/ruby-json_schemer/ALTERNATIVES
+98-05 files

NetBSD/pkgsrc uxLapx5 — doc CHANGES-2026

   doc: Added textproc/ruby-hana version 1.3.7
VersionDeltaFile
1.7664+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc TqosuvA — textproc Makefile

   textproc/Makefile: add and enable ruby-hana
VersionDeltaFile
1.1616+2-1textproc/Makefile
+2-11 files

LLVM/project 55c3016 — llvm/lib/Target/AMDGPU CMakeLists.txt AMDGPUHWEvents.h, llvm/unittests/Target/AMDGPU CMakeLists.txt AMDGPUEventTrackingTest.cpp

[AMDGPU][NewInsertWaitcnt] Event Tracker (1/2)

See #226970 for context and history regarding this patch.

Adds the basic infrastructure needed to track in-flight records for each InstCounterType.
This is not a full functional replacement of SIInsertWaitcnts::WaitcntBrackets and it does not
aim to be one, as we'd like to break up its functionality into multiple different pieces.

This patch only contains the functionality needed for tracking events in one block, without importing events from previous blocks.

Assisted-by: Claude Opus 5.5
After requests to split the patch, I used Claude to help me create this patch which is a subset of #226970 with all functionality pertaining to importing incoming events removed.
DeltaFile
+207-0llvm/unittests/Target/AMDGPU/AMDGPUEventTrackingTest.cpp
+206-0llvm/lib/Target/AMDGPU/AMDGPUEventTracking.cpp
+194-0llvm/lib/Target/AMDGPU/AMDGPUEventTracking.h
+27-0llvm/lib/Target/AMDGPU/AMDGPUHWEvents.h
+1-0llvm/unittests/Target/AMDGPU/CMakeLists.txt
+1-0llvm/lib/Target/AMDGPU/CMakeLists.txt
+636-06 files

NetBSD/pkgsrc XTamVS2 — textproc/ruby-hana DESCR distinfo

   textproc/ruby-hana: add version 1.3.7

   ruby-hana is required by forthcoming ruby-json_schemer package which
   is required by ruby-mcp.


   hana

   Implementation of JSON Patch(rfc6902) and JSON Pointer(rfc6901) RFC.
VersionDeltaFile
1.1+17-0textproc/ruby-hana/PLIST
1.1+14-0textproc/ruby-hana/Makefile
1.1+5-0textproc/ruby-hana/distinfo
1.1+3-0textproc/ruby-hana/DESCR
+39-04 files

LLVM/project d5d7694 — llvm/test/tools/llvm-readobj/wasm stackmap.test unwind.test, llvm/tools/llvm-readobj WasmDumper.cpp

[llvm-readobj] Avoid crashes for unsupported WebAssembly options (#237555)

Fix crashes when using --unwind, --stackmap, or --all on valid
WebAssembly object files. Before that WasmDumper used llvm_unreachable
for unwind information and stack maps, while they could be reached with
valid command line options. The fix replaces handlers with empty
functions to avoid crashing

AI assisted with understanding the issue, producing tests, and reviewing
implementation. I also ran the focused tests locally

Fixes #226398
DeltaFile
+19-0llvm/test/tools/llvm-readobj/wasm/all.test
+11-0llvm/test/tools/llvm-readobj/wasm/stackmap.test
+11-0llvm/test/tools/llvm-readobj/wasm/unwind.test
+2-2llvm/tools/llvm-readobj/WasmDumper.cpp
+43-24 files

LLVM/project e556de4 — clang/lib/CIR/Dialect/Transforms/TargetLowering CIRABIRewriteContext.cpp, clang/test/CIR/Transforms/abi-lowering amdgpu-byref.cir indirect-byval.cir

[CIR][AMDGPU] Look through address_space views when forwarding indirect args
DeltaFile
+29-20clang/lib/CIR/Dialect/Transforms/TargetLowering/CIRABIRewriteContext.cpp
+47-0clang/test/CIR/Transforms/abi-lowering/indirect-non-byval-forward-param.cir
+0-45clang/test/CIR/Transforms/abi-lowering/indirect-non-byval-nyi.cir
+9-11clang/test/CIR/Transforms/abi-lowering/indirect-byval.cir
+16-0clang/test/CIR/Transforms/abi-lowering/amdgpu-byref.cir
+101-765 files

NetBSD/pkgsrc o2aA1Wl — doc CHANGES-2026

   doc: Added time/ruby-strptime version 0.2.5
VersionDeltaFile
1.7663+2-1doc/CHANGES-2026
+2-11 files

LLVM/project 59edc10 — clang/lib/StaticAnalyzer/Checkers StdLibraryFunctionsChecker.cpp, clang/test/Analysis std-c-library-functions-restrict.cpp std-c-library-functions-restrict.c

[analyzer] Match standard libraries regardless `restrict` qualifier

Remove the `restrict` sensitivity from StdLibraryFunctionsChecker to
simplify the code and remove the risk of a failure to match.

c5dd283d2f2409dfca13628e15bbf0e526dfc3f0 demonstrates that UCRT does not
specify the `restrict` qualifiers leading to non-matches in
StdLibraryFunctionsChecker. There might be other non-standard-compliant
libc implementations that share this drawback.

The `restrict` sensitivity does not seem to improve analyzer precision
in any practical case, yet it increases code complexity and adds a risk
of FNs as happened with UCRT.

--

CPP-9480
DeltaFile
+66-154clang/lib/StaticAnalyzer/Checkers/StdLibraryFunctionsChecker.cpp
+8-15clang/test/Analysis/std-c-library-functions-restrict-msvc.c
+2-9clang/test/Analysis/std-c-library-functions-restrict.c
+2-5clang/test/Analysis/std-c-library-functions-restrict.cpp
+78-1834 files

NetBSD/pkgsrc 3UE8tVS — time Makefile

   time/Makefile: add and enable ruby-strptime
VersionDeltaFile
1.292+2-1time/Makefile
+2-11 files

NetBSD/pkgsrc IZ389ow — time/ruby-strptime DESCR distinfo

   time/ruby-strptime: add version 0.2.5

   ruby-strptime is required by ruby-rasn1 package.  My apologies for
   forgetting to commit ths package first.


   Strptime

   A fast strptime/strftime engine which uses VM.
VersionDeltaFile
1.1+25-0time/ruby-strptime/PLIST
1.1+12-0time/ruby-strptime/Makefile
1.1+5-0time/ruby-strptime/distinfo
1.1+3-0time/ruby-strptime/DESCR
+45-04 files