FreeBSD/src 7fc2c9fsys/dev/acpica apeivar.h

apei: Fix i386 build over bus read, write function

bus_{read,write}_8 are macro wrappers around the corresponding bus_space
functions in sys/bus.h, so implementing bus_{read,write}_8 won't work.
Implement the underlying bus_space function instead.

Reviewed by:    jrtc27, rlibby
Fixes:          9313f6b01485
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D58301
DeltaFile
+7-6sys/dev/acpica/apeivar.h
+7-61 files

LLVM/project 99789calibcxx/docs/Status Cxx23Issues.csv, libcxx/test/std/ranges/range.adaptors/range.adjacent.transform helpers.h

[libc++] Add tests for LWG3798 and mark it as Complete (#210640)
DeltaFile
+5-0libcxx/test/std/ranges/range.adaptors/range.adjacent.transform/helpers.h
+4-0libcxx/test/std/ranges/range.adaptors/range.adjacent.transform/iterator/member_types.compile.pass.cpp
+1-1libcxx/docs/Status/Cxx23Issues.csv
+10-13 files

LLVM/project 21d537ellvm/test/Transforms/LoopVectorize iv_outside_user.ll

[LV][Test] Rename conflicting IR values to avoid FileCheck conflicts. nfc (#210293)
DeltaFile
+50-50llvm/test/Transforms/LoopVectorize/iv_outside_user.ll
+50-501 files

OPNSense/tools 8fa50b8build vm.sh

build/vm: add noatime to UFS root disk (#516)

This "noatime" tweak, reduced the OPNsense constant
50kb - 80kb disk writes that wear down the SSD / NVME.

Signed-off-by: Unicorn9x
DeltaFile
+1-1build/vm.sh
+1-11 files

OPNSense/plugins a10707esysutils/cpu-microcode Makefile, sysutils/cpu-microcode/src/etc/rc.loader.d 40-cpu-microcode.in

sysutils/cpu-microcode: sync with master
DeltaFile
+8-2sysutils/cpu-microcode/src/etc/rc.loader.d/40-cpu-microcode.in
+5-0sysutils/cpu-microcode/src/etc/rc.syshook.d/early/40-cpu-microcode
+2-1sysutils/cpu-microcode/Makefile
+15-33 files

LLVM/project e2572b8lld/ELF/Arch RISCV.cpp, lld/test/ELF riscv-feature-zicfilp-unlabeled.s

[LLD][RISCV][Zicfilp] Generate unlabeled landing pad-style PLT (#145461)

To support dynamic linking when Zicfilp is enabled, lpad insns are
inserted into PLTs. This patch generates the unlabeled landing pad-style
PLT, in which all the lpads have label `0`, when ZICFILP-unlabeled is
enabled:

--- PLT Header:

```
1:  auipc  t3, %pcrel_hi(.got.plt)
    sub    t1, t1, t2
    l[w|d] t2, %pcrel_lo(1b)(t3)
    addi   t1, t1, -(hdr size + 16)
    addi   t0, t3, %pcrel_lo(1b)
    srli   t1, t1, log2(16/PTRSIZE)
    l[w|d] t0, PTRSIZE(t0)
    jr     t2
```

    [16 lines not shown]
DeltaFile
+59-23lld/ELF/Arch/RISCV.cpp
+32-0lld/test/ELF/riscv-feature-zicfilp-unlabeled.s
+91-232 files

OPNSense/plugins 0d9ba96security/etpro-telemetry Makefile, security/etpro-telemetry/src/opnsense/scripts/etpro_telemetry send_telemetry.py

security/etpro-telemetry: sync with master
DeltaFile
+2-1security/etpro-telemetry/src/opnsense/scripts/etpro_telemetry/send_telemetry.py
+1-1security/etpro-telemetry/Makefile
+3-22 files

OPNSense/plugins aea7820misc/theme-rebellion Makefile, misc/theme-rebellion/src/opnsense/www/themes/rebellion/assets/stylesheets tokenize2.scss

misc/theme-rebellion: sync with master
DeltaFile
+1-1misc/theme-rebellion/Makefile
+1-1misc/theme-rebellion/src/opnsense/www/themes/rebellion/assets/stylesheets/tokenize2.scss
+1-1misc/theme-rebellion/src/opnsense/www/themes/rebellion/build/css/tokenize2.css
+3-33 files

OPNSense/plugins 95e2ac4misc/theme-rebellion Makefile

misc/theme-rebellion: bump version to ship change
DeltaFile
+1-1misc/theme-rebellion/Makefile
+1-11 files

OPNSense/plugins e7f9d52dns/bind pkg-descr Makefile, dns/bind/src/opnsense/mvc/app/models/OPNsense/Bind Record.xml

dns/bind: sync with master
DeltaFile
+1-2dns/bind/pkg-descr
+1-1dns/bind/Makefile
+1-0dns/bind/src/opnsense/mvc/app/models/OPNsense/Bind/Record.xml
+3-33 files

OPNSense/plugins b9dc705dns/bind pkg-descr Makefile

dns/bind: wrap up new version
DeltaFile
+1-2dns/bind/pkg-descr
+1-1dns/bind/Makefile
+2-32 files

OPNSense/plugins b01667d. README.md, security/intrusion-detection-content-at-antiphishing pkg-descr Makefile

security/intrusion-detection-content-at-antiphishing: sync with master
DeltaFile
+11-0security/intrusion-detection-content-at-antiphishing/pkg-descr
+7-0security/intrusion-detection-content-at-antiphishing/Makefile
+7-0security/intrusion-detection-content-at-antiphishing/src/opnsense/scripts/suricata/metadata/rules/julioliraup-antiphing.xml
+1-0README.md
+26-04 files

OPNSense/plugins a3fce27security/q-feeds-connector pkg-descr Makefile, security/q-feeds-connector/src/opnsense/scripts/qfeeds/lib log.py

security/q-feeds-connector: sync with master
DeltaFile
+1-1security/q-feeds-connector/src/opnsense/scripts/qfeeds/lib/log.py
+1-0security/q-feeds-connector/pkg-descr
+1-0security/q-feeds-connector/Makefile
+3-13 files

OPNSense/plugins 10d7a40security/q-feeds-connector Makefile pkg-descr

security/q-feeds-connector: wrap up new version
DeltaFile
+1-0security/q-feeds-connector/Makefile
+1-0security/q-feeds-connector/pkg-descr
+2-02 files

OPNSense/core ffaf0casrc/etc/inc/plugins.inc.d captiveportal.inc

firewall: captive portal block rule should be evaluated after the anti-lockout rule

(cherry picked from commit 6b5a3a28f40af72a914a3277264ceded6879e7c7)
DeltaFile
+1-1src/etc/inc/plugins.inc.d/captiveportal.inc
+1-11 files

OPNSense/core 7b6b636src/opnsense/mvc/app/controllers/OPNsense/Base ControllerBase.php

MVC:ui - form labels could be empty, make sure to add them to avoid warnings in forms.

spotted at Services: Unbound DNS: Query Forwarding

(cherry picked from commit 06936c6af5bfcd8e1248e478dd496b9988156f2e)
DeltaFile
+2-0src/opnsense/mvc/app/controllers/OPNsense/Base/ControllerBase.php
+2-01 files

OPNSense/core c2f19f0src/etc/inc filter.inc

firewall: fix PHP warning when scrub yields no interfaces

While here decrease indent and safe config iteration and simplify.

(cherry picked from commit 206a646a9a32c2b68e1964de8c1ec9102810c30d)
DeltaFile
+69-67src/etc/inc/filter.inc
+69-671 files

OPNSense/core 7f02dadsrc/opnsense/mvc/app/controllers/OPNsense/Trust/Api CrlController.php

trust: use serialNumberHex for CRL so high-bit serials aren't dropped (#10559)

CrlController::setAction() built the CRL from
openssl_x509_parse()['serialNumber'], a signed decimal that is unreliable
for serials with the high bit set (first byte >= 0x80). Those serials were
passed to phpseclib as an invalid/zero value and collapsed into a single
"Serial Number: 00" entry, so the affected certificates were effectively
not revoked (e.g. OpenVPN clients could still connect). With random 128-bit
serials this silently affects roughly half of all revocations.

Use the canonical unsigned serialNumberHex via a phpseclib BigInteger,
matching the index.txt export already present in the same controller.

(cherry picked from commit 6223abb249661b22b05087481205a164e666e4e1)
DeltaFile
+5-2src/opnsense/mvc/app/controllers/OPNsense/Trust/Api/CrlController.php
+5-21 files

OPNSense/core eaa6ccbsrc/etc rc.newwanip, src/etc/inc interfaces.inc

php8.5 - fix some warnings:

[16-Jul-2026 11:51:52 Europe/Amsterdam] PHP Warning:  Undefined array key "dhcphostname" in /usr/local/etc/inc/interfaces.inc on line 3330
[16-Jul-2026 11:51:52 Europe/Amsterdam] PHP Warning:  Undefined array key "dhcphostname" in /usr/local/etc/inc/interfaces.inc on line 3331
[16-Jul-2026 11:51:48 Europe/Amsterdam] PHP Deprecated:  Using null as an array offset is deprecated, use an empty string instead in /usr/local/opnsense/mvc/app/library/OPNsense/Firewall/ForwardRule.php on line 168
[16-Jul-2026 11:52:05 Europe/Amsterdam] PHP Deprecated:  Using null as an array offset is deprecated, use an empty string instead in /usr/local/etc/rc.newwanip on line 57
[16-Jul-2026 11:51:49 Europe/Amsterdam] PHP Deprecated:  Using null as an array offset is deprecated, use an empty string instead in /usr/local/etc/inc/interfaces.inc on line 2292

(cherry picked from commit 3dc1759c8fc06edf68700b23bf543c21c59d1e3d)
DeltaFile
+4-3src/etc/inc/interfaces.inc
+1-1src/etc/rc.newwanip
+1-0src/opnsense/mvc/app/library/OPNsense/Firewall/ForwardRule.php
+6-43 files

OPNSense/core 536dafbsrc/opnsense/mvc/app/views/OPNsense/Firewall filter_rule.volt

firewall: skip message banner if searchPhrase set

(cherry picked from commit 3a1912eafebb3756163f6fa1bdae272d187a3d94)
DeltaFile
+5-1src/opnsense/mvc/app/views/OPNsense/Firewall/filter_rule.volt
+5-11 files

OPNSense/core 91a727asrc/opnsense/mvc/app/views/layout_partials form_input_tr.volt

mvc: fix default labels in selectpickers

PR: https://github.com/opnsense/core/issues/10533
PR: https://github.com/opnsense/core/issues/10555

(cherry picked from commit 2b0575c57d66c2181e80c0edc6ade83e8f3edd9c)
(cherry picked from commit f1cbec3670c7df7232036c23c128712f8c707f19)
DeltaFile
+3-3src/opnsense/mvc/app/views/layout_partials/form_input_tr.volt
+3-31 files

OPNSense/core a9f2ba3src/opnsense/scripts/firmware connection.sh

firmware: split ping into min and max size ones for #10540

(cherry picked from commit 78a6f9db3f5a9c5343a18cbe0aa480a44c9e90ea)
(cherry picked from commit 35a3d79b8e879affe44530af5fb66ad2f369a5b9)
DeltaFile
+12-3src/opnsense/scripts/firmware/connection.sh
+12-31 files

OPNSense/core 35a3d79src/opnsense/scripts/firmware connection.sh

firmware: logic twist
DeltaFile
+2-2src/opnsense/scripts/firmware/connection.sh
+2-21 files

FreeBSD/ports 8a2d477security/vuxml/vuln 2026.xml

security/vuxml: Document new mailpit vulnerability
DeltaFile
+33-0security/vuxml/vuln/2026.xml
+33-01 files

OPNSense/core 3ef4389src/opnsense/www/js/widgets Services.js

system: use btn styles in services widget #10553

This damps the colors a bit and auto-decides on the
text color to use.  Hover will still use the previous
color.  People will not like this either, but this is
entirely in the scope of the theme to make it look
nice.

(cherry picked from commit ace8f12f51e35e9bdb60b7039381dfd4158aaf73)
DeltaFile
+3-4src/opnsense/www/js/widgets/Services.js
+3-41 files

LLVM/project c34d2c3mlir/lib/Dialect/LLVMIR/IR LLVMMemorySlot.cpp, mlir/test/Dialect/LLVMIR mem2reg.mlir

[mlir] Fix mem2reg crash on scalable vector store/load with matching type (#209426)

Fixes #209065

`createInsertAndCast/createExtractAndCast` in `LLVMMemorySlot.cpp`
queried the bit size of the source/target types before checking whether
they were already identical. For scalable vector types (e.g.
`vector<[4]xi1>`), this size query implicitly converts a scalable
TypeSize to a scalar, which aborts. `mem2reg` hits this path for any
store or load whose value type exactly matches the slot's element type,
since `getStored/removeBlockingUses` run even when no cast is needed.

This fix adds an early return when the types are already equal, skipping
the size query, consistent with the existing short-circuit in
`areConversionCompatible/castSameSizedTypes`.
DeltaFile
+14-0mlir/test/Dialect/LLVMIR/mem2reg.mlir
+11-0mlir/lib/Dialect/LLVMIR/IR/LLVMMemorySlot.cpp
+25-02 files

OPNSense/core 5003057. plist, src/opnsense/mvc/app/models/OPNsense/Trust General.xml Ca.xml

system: DTLSv1.1 is rejected by OpenSSL 3.5, migrate to DTLSv1.2

Which appears to break HTTPS too since the SSL context is not created at all.

PR: https://forum.opnsense.org/index.php?topic=52445.0

(cherry picked from commit 0b7d29bad4213a718f511ad8dcc3bad7c9f82085)
(cherry picked from commit ce022dd1e239db0a118fc83b0766c6b610377f4b)
(cherry picked from commit e7292dc24add8a4f5952b9683c598e9d1d77f121)
DeltaFile
+50-0src/opnsense/mvc/app/models/OPNsense/Trust/Migrations/M1_0_2.php
+2-2src/opnsense/mvc/app/models/OPNsense/Trust/General.xml
+1-1src/opnsense/mvc/app/models/OPNsense/Trust/Ca.xml
+1-1src/opnsense/mvc/app/models/OPNsense/Trust/Cert.xml
+1-0plist
+55-45 files

OPNSense/core e7292dc. plist, src/opnsense/mvc/app/models/OPNsense/Trust Ca.xml Cert.xml

system: migrate faulty DTLSv1.1 to DTLSv1.2

While here fix format of validation message in Ca/Cert.
DeltaFile
+50-0src/opnsense/mvc/app/models/OPNsense/Trust/Migrations/M1_0_2.php
+1-1src/opnsense/mvc/app/models/OPNsense/Trust/Ca.xml
+1-1src/opnsense/mvc/app/models/OPNsense/Trust/Cert.xml
+1-1src/opnsense/mvc/app/models/OPNsense/Trust/General.xml
+1-0plist
+54-35 files

LLVM/project 9ddbe1cllvm/lib/Transforms/Coroutines MaterializationUtils.cpp

remove redundant predicate check
DeltaFile
+3-4llvm/lib/Transforms/Coroutines/MaterializationUtils.cpp
+3-41 files

OPNSense/plugins 62cb1adsecurity/q-feeds-connector/src/opnsense/scripts/qfeeds/lib log.py

security/q-feeds-connector - skip mangled log lines
DeltaFile
+1-1security/q-feeds-connector/src/opnsense/scripts/qfeeds/lib/log.py
+1-11 files