FreeBSD/ports b29dd2asecurity/vuxml/vuln 2026.xml

security/vuxml: Report new p5-Dancer2 vulnerability
DeltaFile
+82-0security/vuxml/vuln/2026.xml
+82-01 files

FreeBSD/ports ccfdb77devel/ode/files patch-CMakeLists.txt

devel/ode: Fix building with CMake 4

Approved by:    portmgr (fixit blanket)
DeltaFile
+11-5devel/ode/files/patch-CMakeLists.txt
+11-51 files

FreeBSD/ports 9925105multimedia/quodlibet Makefile, multimedia/quodlibet/files pkg-message.in

multimedia/quodlibet: remove dependency and add a pkg-message

Remove dependency to deskutils/notification-daemon and
add a pkg-message for additional ports to enable plugins

PR:             296564
Reported by:    David Gilbert <dave at daveg.ca>, pi
Approved by:    maintainer (aly at aaronly.me)
DeltaFile
+22-0multimedia/quodlibet/files/pkg-message.in
+2-2multimedia/quodlibet/Makefile
+24-22 files

FreeBSD/ports da3b04emultimedia/quodlibet distinfo Makefile, multimedia/quodlibet/files patch-quodlibet_player_gstbe_util.py patch-pyproject.toml

multimedia/quodlibet: update to 4.7.1

PR:             296564
Reported by:    David Gilbert <dave at daveg.ca>
Tested by:      David Gilbert <dave at daveg.ca>
Approved by:    maintainer (aly at aaronly.me)
DeltaFile
+8-8multimedia/quodlibet/Makefile
+14-0multimedia/quodlibet/files/patch-pyproject.toml
+3-3multimedia/quodlibet/files/patch-quodlibet_player_gstbe_util.py
+3-3multimedia/quodlibet/distinfo
+28-144 files

FreeBSD/ports 0767820Mk bsd.port.mk

Mk/bsd.port.mk: add a comment about do-fetch                                                                                                                                                                                                                             
DeltaFile
+5-0Mk/bsd.port.mk
+5-01 files

LLVM/project 44c4c02llvm/lib/Target/X86 X86ISelLowering.cpp, llvm/test/CodeGen/X86 vector-sext.ll

[X86] Move PSHUF(SHIFT(X,C0),C1) -> SHIFT(PSHUF(X,C1),C0) to canonicalizeShuffleWithOp (#225313)

No need for this to be in combineTargetShuffle, and we can generalize it
to work with more shuffles in a future patch.
DeltaFile
+42-38llvm/lib/Target/X86/X86ISelLowering.cpp
+2-2llvm/test/CodeGen/X86/vector-sext.ll
+44-402 files

FreeBSD/ports 28fd974finance/fava Makefile, finance/fava/files patch-hatch__build.py

finance/fava: Fix build.
DeltaFile
+19-0finance/fava/files/patch-hatch__build.py
+1-0finance/fava/Makefile
+20-02 files

FreeBSD/ports 257cc17games/odamex Makefile

games/odamex: Mark deprecated

(cherry picked from commit e301a7e31262fc903043cca34587fd308ae457e1)
DeltaFile
+4-1games/odamex/Makefile
+4-11 files

FreeBSD/ports e301a7egames/odamex Makefile

games/odamex: Mark deprecated
DeltaFile
+4-1games/odamex/Makefile
+4-11 files

LLVM/project 2ccc678llvm/lib/Target/AArch64 AArch64A53Fix835769.cpp, llvm/test/CodeGen/AArch64 aarch64-fix-cortex-a53-835769-debug.ll

[AArch64] Fix position of nop inserted for +fix-cortex-a53-835769 under debug. (#224830)

Make sure that the position of the nop added for +fix-cortex-a53-835769
is not dependant on debug instructions at the start of the block.

Fixes #224661
DeltaFile
+56-0llvm/test/CodeGen/AArch64/aarch64-fix-cortex-a53-835769-debug.ll
+1-1llvm/lib/Target/AArch64/AArch64A53Fix835769.cpp
+57-12 files

LLVM/project 1833848clang/lib/Interpreter Interpreter.cpp Wasm.cpp

[clang-repl] Support wasm64 execution (#225311)

Emscripten-forge is adding wasm64 builds on its emscripten 6-x branch
which exposed two wasm32 hardcoded assumptions in clang-repl's
WebAssembly execution path.

`IncrementalCompilerBuilder::CreateCpp()` currently hardcodes
`wasm32-unknown-emscripten`, even when clang-repl itself is built for
wasm64.

Once Clang emits a wasm64 object, the in-process linker must also select
the correct emulation. `wasm-ld` defaults to wasm32 and otherwise fails
in `InputFile::checkArch()` with:

```text
must specify -mwasm64 to process wasm64 object files
```

The pipeline is this 

    [12 lines not shown]
DeltaFile
+3-2clang/lib/Interpreter/Interpreter.cpp
+5-0clang/lib/Interpreter/Wasm.cpp
+8-22 files

FreeBSD/ports b19b239misc/github-copilot-language-server distinfo.amd64 Makefile, misc/github-copilot-language-server/files package-lock-kerberos.json package-lock.json

misc/github-copilot-language-server: update 1.465.0 → 1.549.0
DeltaFile
+355-0misc/github-copilot-language-server/files/package-lock-watcher.json
+274-19misc/github-copilot-language-server/pkg-plist
+237-39misc/github-copilot-language-server/files/package-lock.json
+32-9misc/github-copilot-language-server/Makefile
+12-12misc/github-copilot-language-server/files/package-lock-kerberos.json
+13-0misc/github-copilot-language-server/distinfo.amd64
+923-794 files not shown
+942-9610 files

FreeBSD/ports 060a6f6www/oatpp/files patch-CMakeLists.txt

www/oatpp: Fix building with CMake 4

Approved by:    portmgr (fixit blanket)
DeltaFile
+8-0www/oatpp/files/patch-CMakeLists.txt
+8-01 files

LLVM/project 999b8c4orc-rt/test/regression lit.cfg.py, orc-rt/test/regression/darwin check-rt-process-info.test

[orc-rt] Make check-rt-process-info.test test more generic. (#225314)

Add %host-arch and %host-os substitutions to orc-rt-lit's config, and
use them to make the regression test platform agnostic.
DeltaFile
+7-0orc-rt/test/regression/lit.cfg.py
+0-6orc-rt/test/regression/darwin/check-rt-process-info.test
+7-62 files

OPNSense/core 626369dsrc/etc/inc filter.lib.inc filter.inc, src/etc/inc/plugins.inc.d pf.inc kea.inc

Review: Use config_read_array() instead of a settings function in the firewall plugin, that makes it more obvious where settings came from
DeltaFile
+26-26src/etc/inc/filter.inc
+11-11src/etc/inc/filter.lib.inc
+6-12src/opnsense/mvc/app/library/OPNsense/Firewall/Plugin.php
+4-4src/etc/inc/plugins.inc.d/kea.inc
+4-4src/etc/inc/plugins.inc.d/ipsec.inc
+3-3src/etc/inc/plugins.inc.d/pf.inc
+54-601 files not shown
+56-627 files

LLVM/project 3a4d8a9clang/lib/CodeGen CGBuilder.h CGExpr.cpp, clang/test/CodeGenCXX strict-vtable-pointers.cpp

[Clang] Stop using strip.invariant.group (#225072)

Clang currently emits calls to llvm.strip.invariant.group under
`-fstrict-vtable-pointers` whenever a pointer to a dynamic object is
used in a comparison or might be used in a comparison through operations
we cannot track.

The purpose of the llvm.strip.invariant.group intrinsic is to make sure
that if we have a dominating condition like `a ==
launder.invariant.group(a)`, we don't end up replacing the latter with
the former, as that would allow the optimizer to assume that the memory
stays invariant, despite going through a launder operation (e.g. on
placement new).

However, since this was introduced, we've come to the understanding that
replacing pointers based on equality comparison is generally only legal
if they have the same provenance, and stopped doing such replacements.
The specific strip.invariant.group/launder.invariant.group case was
still buggy due to an implementation bug, but this was fixed in

    [4 lines not shown]
DeltaFile
+13-33clang/test/CodeGenCXX/strict-vtable-pointers.cpp
+2-37clang/lib/CodeGen/CGExprScalar.cpp
+0-12clang/lib/CodeGen/CGExpr.cpp
+0-6clang/lib/CodeGen/CGBuilder.h
+15-884 files

LLVM/project 167761dllvm/lib/Transforms/Utils LowerVectorIntrinsics.cpp, llvm/utils profcheck-xfail.txt

[CodeGen][ProfCheck] Mark scalable intrinsic expansion loop with unknown weights (#225050)
DeltaFile
+0-4llvm/utils/profcheck-xfail.txt
+3-1llvm/lib/Transforms/Utils/LowerVectorIntrinsics.cpp
+3-52 files

FreeBSD/src 9b4b68esbin/ipfw ipfw2.c

ipfw: fix gcc warning

We use first loop only for possible needed realloc, so it is not
required to restrict end condition.

Also check realloc() return value before accessing.

This is direct commit to stable/14.

Reported by:    dim
Differential Revision:  https://reviews.freebsd.org/D56616
DeltaFile
+2-2sbin/ipfw/ipfw2.c
+2-21 files

LLVM/project 7bc7f2bllvm/include/llvm/ABI TargetInfo.h, llvm/lib/ABI DefaultTargetInfo.cpp TargetInfo.cpp

[llvm][ABI] Make the _BitInt register threshold target-driven
DeltaFile
+121-4llvm/unittests/ABI/TargetInfoTest.cpp
+4-39llvm/lib/ABI/TargetInfo.cpp
+9-8llvm/include/llvm/ABI/TargetInfo.h
+6-4llvm/lib/ABI/DefaultTargetInfo.cpp
+140-554 files

LLVM/project e8c46bbllvm/lib/Target/PISA PISAPostLegalizerCombiner.cpp PISACombine.td

Replace /// with //
DeltaFile
+11-11llvm/lib/Target/PISA/PISAPreLegalizerCombiner.cpp
+1-1llvm/lib/Target/PISA/PISAPostLegalizerCombiner.cpp
+1-1llvm/lib/Target/PISA/PISACombine.td
+13-133 files

LLVM/project e10ed7bflang/lib/Semantics resolve-names.cpp, flang/test/Semantics/CUDA cuda-pinned-implicit-modfile.cuf

[flang][cuda] Record implicit pinned attribution in module files

Under -gpu=mem:pinned an unattributed ALLOCATABLE is attributed as pinned by
the compiler, the same way -gpu=mem:managed attributes one as managed, but
only the latter recorded that it had done so. The module file therefore spelled
an implicitly applied PINNED the same as one the user wrote, and a reader
treated it as a user requirement: adding -gpu=mem:pinned to a module's build
rejected its OpenACC-only consumers over an attribute the user never wrote.

Record the attribution for pinned as well, so it is written as
PINNED(IMPLICIT) and consumers can tell the two apart.
DeltaFile
+42-0flang/test/Semantics/CUDA/cuda-pinned-implicit-modfile.cuf
+3-1flang/lib/Semantics/resolve-names.cpp
+45-12 files

LLVM/project 2dacc78flang/docs ModFiles.md, flang/include/flang/Support Fortran-features.h

[flang][cuda] Restrict the MANAGED(IMPLICIT) spelling to module files
DeltaFile
+22-1flang/docs/ModFiles.md
+14-0flang/test/Semantics/CUDA/cuda-managed-implicit-modfile.cuf
+4-3flang/include/flang/Support/Fortran-features.h
+3-2flang/lib/Parser/Fortran-parsers.cpp
+4-0flang/lib/Semantics/mod-file.cpp
+3-0flang/lib/Support/Fortran-features.cpp
+50-66 files

LLVM/project 6c50c03flang/include/flang/Parser parse-tree.h, flang/lib/Parser unparse.cpp Fortran-parsers.cpp

[flang][cuda] Record implicit managed attribution in module files

An attribute the compiler applied under -gpu=mem:managed is written into the
module file the same way a user-written one is, so a reader cannot tell them
apart. It then treats the attribute as a user requirement: allocating such a
component in a DEVICE object is rejected, and the memory space the user did
ask for on the object no longer wins.

Spell the distinction in the module file as MANAGED(IMPLICIT), modelled on
INTENT(IN): CUDA-data-attr gains an optional parenthesized qualifier, carried
by a new CUDADataAttrSpec parse-tree node in AttrSpec and ComponentAttrSpec.
ATTRIBUTES(...) keeps the bare attribute, so the qualifier cannot be written
there.

The attribute itself is still written out, so a component keeps the same
memory space no matter which options a consumer is compiled with.

Also stop an implicitly applied attribute from making a module a definer of
CUDA symbols. Without this, adding -gpu=mem:managed to a module's build
rejects its OpenACC-only consumers over an attribute the user never wrote.
DeltaFile
+76-0flang/test/Semantics/CUDA/cuda-managed-implicit-modfile.cuf
+29-9flang/lib/Semantics/resolve-names.cpp
+19-3flang/lib/Semantics/mod-file.cpp
+13-2flang/include/flang/Parser/parse-tree.h
+10-2flang/lib/Parser/Fortran-parsers.cpp
+6-0flang/lib/Parser/unparse.cpp
+153-162 files not shown
+159-188 files

NetBSD/pkgsrc dmJelWDdoc TODO CHANGES-2026

   Updated mail/exim[-html]
VersionDeltaFile
1.6183+3-1doc/CHANGES-2026
1.27948+1-2doc/TODO
+4-32 files

NetBSD/pkgsrc gpCOGazmail/exim Makefile distinfo, mail/exim-html Makefile PLIST

   exim exim-html: updated to 4.100.1

   4.100.1

   The Exim maintainers are releasing a security fix for four security issues.

   GCVE-25-2026-09-50-1
   GCVE-25-2026-09-51-1
   GCVE-25-2026-09-55-1
   GCVE-25-2026-09-56-1
VersionDeltaFile
1.99+4-4mail/exim/distinfo
1.49+4-4mail/exim-html/distinfo
1.32+5-1mail/exim-html/PLIST
1.224+2-3mail/exim/Makefile
1.57+2-2mail/exim-html/Makefile
+17-145 files

LLVM/project 9f58887llvm/lib/Target/PISA PISALegalizerInfo.cpp

Replace llvm_unreachable with reportFatalUsageError
DeltaFile
+2-1llvm/lib/Target/PISA/PISALegalizerInfo.cpp
+2-11 files

LLVM/project bb5dcd5llvm/include/llvm/ABI DefaultTargetInfo.h, llvm/lib/ABI CMakeLists.txt DefaultTargetInfo.cpp

Create DefaultTargetInfo class
DeltaFile
+60-0llvm/lib/ABI/DefaultTargetInfo.cpp
+38-0llvm/include/llvm/ABI/DefaultTargetInfo.h
+10-12llvm/unittests/ABI/TargetInfoTest.cpp
+1-0llvm/lib/ABI/CMakeLists.txt
+109-124 files

LLVM/project 9517d71llvm/lib/Transforms/Vectorize LoopVectorize.cpp, llvm/test/Transforms/LoopVectorize/AArch64 sve-low-trip-count-ic-3.ll low-trip-count-body-size-limit.ll

[LoopVectorize] Improve Vectorization of Low Trip Count Loops (#195823)

Currently, Small Loops with Trip Counts less than 16, and in situations
where the Trip Count (TC) is less than the Tail Folding Threshold are
harder to vectorize, its only possible where no epilogue will be
emitted. However, for loops with large bodies and small trip counts this
can be counterproductive to performance, often failing to vectorize
entirely. This is more prevalent with targets where
`getMinTripCountTailFoldingThreshold()` returns a value greater than 0.

To address this, the Small Loops where the TC == VF + 1 can now
vectorize, leading to a vectorized iteration (or loop if interleaving is
required) and a single scalar iteration. Later passes can then remove
the loop's entirely.

Testing an with OpenSource Fortran HPC Benchmark which includes multiple
loops with small trip counts, but large loop bodies, has shown
significant improvement to runtime after these changes.

Assisted-by: Claude Sonnet 4.6/Codex
DeltaFile
+562-30llvm/test/Transforms/LoopVectorize/AArch64/sve-low-trip-count.ll
+125-0llvm/test/Transforms/LoopVectorize/AArch64/low-trip-count-body-size-limit.ll
+123-0llvm/test/Transforms/LoopVectorize/RISCV/low-trip-count-body-size-limit.ll
+111-0llvm/test/Transforms/LoopVectorize/RISCV/small-trip-count-vf-plus-one.ll
+47-0llvm/test/Transforms/LoopVectorize/AArch64/sve-low-trip-count-ic-3.ll
+46-0llvm/lib/Transforms/Vectorize/LoopVectorize.cpp
+1,014-306 files

LLVM/project 24088afllvm/lib/ABI TargetInfo.cpp, llvm/unittests/ABI TargetInfoTest.cpp

update
DeltaFile
+0-105llvm/unittests/ABI/TargetInfoTest.cpp
+3-3llvm/lib/ABI/TargetInfo.cpp
+3-1082 files

OPNSense/core d6d1db8src/etc/inc filter.lib.inc system.inc, src/etc/inc/plugins.inc.d pf.inc captiveportal.inc

Review: Use config_read_array() in legacy code instead of the model
DeltaFile
+4-4src/etc/inc/plugins.inc.d/captiveportal.inc
+4-4src/etc/inc/filter.inc
+3-3src/etc/inc/system.inc
+2-2src/www/guiconfig.inc
+2-2src/etc/inc/plugins.inc.d/pf.inc
+2-2src/etc/inc/filter.lib.inc
+17-176 files