LLVM/project 1990184 — llvm/include/llvm/Transforms/IPO Attributor.h, llvm/lib/Target/AMDGPU AMDGPUAttributor.cpp

Attributor: Fix build with older GCC after AAKindSet (#240975)

Older GCC versions cannot compare the addresses of distinct static
members in constant expressions, so computing the AAKindSet bits
failed. Compare the IDs as template arguments instead, and construct
the sets with AAKindSet::get from the IDs as template arguments.

Fixes cbc7d9da9b06.

Co-authored-by: Claude Opus 5.5 <noreply at anthropic.com>
DeltaFile
+55-60llvm/include/llvm/Transforms/IPO/Attributor.h
+8-20llvm/lib/Transforms/IPO/Attributor.cpp
+8-20llvm/lib/Target/AMDGPU/AMDGPUAttributor.cpp
+71-1003 files

LLVM/project 6acd266 — llvm/lib/Frontend/OpenMP OMPIRBuilder.cpp, mlir/test/Target/LLVMIR openmp-todo.mlir

[OpenMP][OMPIRBuilder] Propagate custom mapper errors from createTarget

When a custom mapper callback failed while emitting the kernel launch of a
target region, emitTargetCall wrapped the error in cantFail and crashed,
although createTarget already reports errors to its caller. MLIR
translation hits this when an omp.target uses a declare mapper that it
cannot translate yet, such as one with iterator map entries, while
omp.target_data reports the same mapper as not yet implemented.

Return the error from emitTargetCall and pass it on from createTarget, so
callers report it instead of crashing. When emitIfClause stops on such an
error, it now inserts the blocks it has not emitted yet into the function,
so they are not leaked.

Assisted with Claude Opus 5.5.
DeltaFile
+52-0mlir/test/Target/LLVMIR/openmp-todo.mlir
+23-18llvm/lib/Frontend/OpenMP/OMPIRBuilder.cpp
+75-182 files

DragonFlyBSD/src 69974cb — sys/kern kern_fork.c, sys/sys proc.h

kernel - New LWPs shouldn't inherit pending signals

* The creation of a new LWP thread should not inherit any signals
  pending on the current thread.

* Fix by adjusting the copy set, moving lwp_cpumask and lwp_siglist
  out of the set.  Fixup lwp_cpumask, and allow lwp_siglist to be
  left empty.

* This should fix rare races with certain thread-heavy applications.

Reported-by: tuxillo
PR: 3468
DeltaFile
+6-4sys/kern/kern_fork.c
+1-1sys/sys/proc.h
+7-52 files

LLVM/project 6296216 — lldb/test/API/macosx/posix_spawn TestLaunchProcessPosixSpawn.py

[lldb] Skip debugserver launch tests with a system debugserver (#240978)

TestDebugserverLaunchArch, added in 3e7841ef1d6f, exercises the
debugserver built from this tree. An out-of-tree debugserver that
predates that change launches the arm64e slice for arm64, so test_arm64
fails on bots using the system debugserver.
DeltaFile
+2-0lldb/test/API/macosx/posix_spawn/TestLaunchProcessPosixSpawn.py
+2-01 files

LLVM/project 1e6edf7 — llvm/lib/CodeGen SafeStack.cpp TargetLoweringBase.cpp, llvm/test/Transforms/SafeStack/ARM existing-libcall-decls.ll

SafeStack: Take libcall declarations from RuntimeLibcallsInfo (#240445)

Stop declaring __stack_chk_fail and __safestack_pointer_address
manually and construct them with the correct type automatically.

A function with the variable's name is now reported as not being a
global variable, rather than a renamed copy of the variable being
inserted. -safestack-use-pointer-address now requires
__safestack_pointer_address to be available for the target, instead of
unconditionally emitting a call to it. The tests using it on
non-Android triples move to Android.

Co-authored-by: Claude Opus 5.5 <noreply at anthropic.com>
DeltaFile
+93-0llvm/test/Transforms/SafeStack/ARM/existing-libcall-decls.ll
+36-36llvm/lib/CodeGen/TargetLoweringBase.cpp
+12-21llvm/lib/CodeGen/SafeStack.cpp
+19-0llvm/test/Transforms/SafeStack/X86/unsafe-stack-ptr-not-thread-local-error.ll
+19-0llvm/test/Transforms/SafeStack/X86/unsafe-stack-ptr-function-error.ll
+13-0llvm/test/Transforms/SafeStack/X86/pointer-address-unavailable-error.ll
+192-578 files not shown
+221-7414 files

FreeBSD/ports 6e4a386 — security/vuxml/vuln 2026.xml

security/vuxml: Document chromium security fixes

Obtained from:  https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_018223192.html
Sponsored by:   Netzkommune GmbH
DeltaFile
+53-0security/vuxml/vuln/2026.xml
+53-01 files

FreeBSD/ports c82f313 — mail/thunderbird-esr Makefile distinfo

mail/thunderbird-esr: update to 153.7.0 (ga)

Release Notes:
  https://www.thunderbird.net/en-US/thunderbird/153.7.0esr/releasenotes/

(cherry picked from commit 865bf8edf7b3db657c2d2da7acf3a688e458dc7e)
DeltaFile
+3-3mail/thunderbird-esr/distinfo
+2-2mail/thunderbird-esr/Makefile
+5-52 files

LLVM/project 7aaed07 — llvm/lib/Target/AMDGPU SIInstrInfo.cpp, llvm/test/CodeGen/AMDGPU waterfall-call-inreg-agpr.mir

[AMDGPU] Ignore debug instructions when lowering a VGPR copy into a physical SGPR (#239751)

`SIInstrInfo::handleCopyToPhysHelper` scans the rest of the block for
the readers of a VGPR copied
into a physical SGPR: a call that takes the SGPR as an argument is
waterfalled, and any other reader
keeps the copy. A `DBG_VALUE` of the SGPR counted as such a reader, so
with debug info the illegal
VGPR-to-SGPR copy stayed in the loop. The scan now skips debug
instructions, and stops where the
register is clobbered, by a regmask as well as a def.
DeltaFile
+30-0llvm/test/CodeGen/AMDGPU/waterfall-call-inreg-agpr.mir
+10-10llvm/lib/Target/AMDGPU/SIInstrInfo.cpp
+40-102 files

FreeBSD/ports 865bf8e — mail/thunderbird-esr Makefile distinfo

mail/thunderbird-esr: update to 153.7.0 (ga)

Release Notes:
  https://www.thunderbird.net/en-US/thunderbird/153.7.0esr/releasenotes/
DeltaFile
+3-3mail/thunderbird-esr/distinfo
+2-2mail/thunderbird-esr/Makefile
+5-52 files

FreeBSD/src 7e4c0a3 — crypto/krb5 README, crypto/krb5/src/lib/kadm5 kadm_rpc_xdr.c

krb5: Import MIT 1.22.3

Major changes in 1.22.3 (2026-11-09)
====================================

This is a bug fix release, with a focus on security issues discovered
with the aid of large language models.  See
https://web.mit.edu/kerberos/advisories/MITKRB5-SA-2026-001.txt for
information on the risks of continuing to use unpatched releases.

* Fix a logic error when checking PAC server checksums
   [CVE-2026-111423].

* Check for unkeyed checksums when validating CAMMAC verifiers
   [CVE-2026-71199].

* Fix a loophole in the KDC's client authdata filtering which could
   allow clients to include fake PAC and CAMMAC authdata values when
   requesting service tickets.  These fake values would be rejected by

    [49 lines not shown]
DeltaFile
+215-215crypto/krb5/src/po/mit-krb5.pot
+182-0crypto/krb5/README
+77-32crypto/krb5/src/plugins/preauth/pkinit/pkinit_crypto_openssl.c
+69-29crypto/krb5/src/lib/rpc/svc_auth_gss.c
+97-0crypto/krb5/src/lib/krb5/krb/t_init_creds_step.c
+59-34crypto/krb5/src/lib/kadm5/kadm_rpc_xdr.c
+699-310133 files not shown
+1,800-901139 files

LLVM/project 4556f47 — llvm/lib/TableGen TGLexer.cpp TGParser.h

[TableGen] Get depfile dependencies from SrcMgr instead of TGLexer. NFCI. (#240925)

TGLexer recorded the path of every included file in a set that was only
used by TableGenMain to write the -d dependency file. SrcMgr already has
this information: every buffer after the main file was added by an
include directive, and its identifier is the resolved path. Build the
dependency list from SrcMgr instead, and remove the set and its
accessors from TGLexer and TGParser.

The depfile contents are unchanged. This removes the last use of the
parser after parsing has finished.

Co-Authored-By: Claude Opus 5.5 <noreply at anthropic.com>
DeltaFile
+11-6llvm/lib/TableGen/Main.cpp
+0-10llvm/lib/TableGen/TGLexer.h
+0-3llvm/lib/TableGen/TGParser.h
+0-1llvm/lib/TableGen/TGLexer.cpp
+11-204 files

LLVM/project bd9e8a2 — flang/lib/Lower OpenACC.cpp, flang/test/Lower/OpenACC acc-loop-real-bounds.f90 acc-loop-integer-kind.f90

[flang][OpenACC] Convert DO loop controls to the induction variable kind (#240591)

F2023 11.1.7.4.1 requires the initial, terminal, and incrementation
parameters of a DO loop to have the same kind as the do-variable. Flang
lowered an implicit or explicit acc.loop with the controls in their
source kinds, so an i32 induction variable could get an i64 upper bound
or step.

Lowering now converts each control to the induction variable's type, and
an omitted step is the constant 1 of that type. Controls already of that
type are unchanged, so existing loops without a kind mismatch lower the
same as before.

Add acc-loop-integer-kind.f90 to check the converted controls for tile,
omitted step, integer(8) bounds and step, DO CONCURRENT, and the
matching i64 case that should not gain converts. Update the comment in
acc-loop-real-bounds.f90 to match.
DeltaFile
+90-0flang/test/Lower/OpenACC/acc-loop-integer-kind.f90
+16-15flang/lib/Lower/OpenACC.cpp
+3-2flang/test/Lower/OpenACC/acc-loop-real-bounds.f90
+109-173 files

LLVM/project 96e9c10 — llvm/lib/Target/Hexagon HLXExpandPseudos.cpp HexagonISelDAGToDAG.cpp, llvm/test/CodeGen/Hexagon hlx-isel-v1024i16.ll

[Hexagon] Add instruction-selection support for HLX (#240950)

Add instruction-selection and lowering support for the Hexagon HLX
(eLementwise eXtension) instructions, building on the HLX MC and
intrinsics support.

This adds:
- the HLX type-legalization helpers on HexagonSubtarget
(getHLXVectorLength, getHLXElementTypes, isHLXElementType,
isHLXVectorType, isTypeForHLX), so that HLX vector types are kept out of
the HVX legalization path;
- HexagonISelLoweringHLX.cpp, which registers the HLX vector types, sets
the legal operations for them, and lowers masked load/store and vector
select;
- the DetectUseSxth/DetectUseZxth complex-pattern matchers used to fold
i16 sign/zero extensions into the HLX widening operations;
- HexagonPatternsHLX.td, the HLX instruction-selection patterns for
arithmetic, multiply, shift, compare, min/max, absolute difference,
average, load/store, splat, select, and extend/truncate.

    [8 lines not shown]
DeltaFile
+452-0llvm/lib/Target/Hexagon/HexagonISelLoweringHLX.cpp
+320-0llvm/lib/Target/Hexagon/HexagonDepMapAsm2Intrin.td
+291-0llvm/lib/Target/Hexagon/HexagonPatternsHLX.td
+224-0llvm/lib/Target/Hexagon/HexagonISelDAGToDAG.cpp
+167-0llvm/lib/Target/Hexagon/HLXExpandPseudos.cpp
+89-0llvm/test/CodeGen/Hexagon/hlx-isel-v1024i16.ll
+1,543-014 files not shown
+1,822-120 files

FreeBSD/src eae7276 — sbin/nvmecontrol format.c

nvmecontrol: Mask the fields in the Format NVM command

The format command composed cdw10 by hand without masking any of
the fields and with no support for the LBAFU field.  Since commit
2c41f7d8a034 the LBA format index defaulted from FLBAS can exceed
15 on an NVMe 2.0 namespace using FIDXU, and such an index would
bleed into the MSET and PI fields.  An out of range index supplied
with -f for a whole-controller format was not caught either.

Build the command with nvme_admin_format_cmd(), which masks all of
the fields and encodes LBA format indexes above 15 in LBAFU, and
reject LBA format indexes greater than 63 for whole-controller
formats.  Per-namespace formats already validate the index against
NLBAF.

This is the same problem that llm-postcr reported in camcontrol's
copy of this code, fixed in 3892a6453fc6; the unmasked composition
originated here (635c517ae9ca).


    [7 lines not shown]
DeltaFile
+7-8sbin/nvmecontrol/format.c
+7-81 files

LLVM/project f7e7b37 — flang/lib/Lower/OpenMP Utils.cpp ClauseProcessor.cpp, flang/test/Lower/OpenMP iterator-ranges.f90 motion-iterator.f90

[flang][OpenMP] Lower iterator modifiers in map and motion clauses

An iterator modifier on a MAP, TO, or FROM clause expands each list item into
one locator per iterator value, so a single clause can map or update
scattered elements such as `a(idx(i))` without listing them or transferring
the whole array. The OpenMP dialect represents these entries since #197047;
this patch lowers them from Flang for TARGET DATA, TARGET ENTER/EXIT DATA,
and TARGET UPDATE.

For example, `!$omp target update to(iterator(i=1:n): a(i), b)` becomes:

  entries = omp.iterator(i = 1 to n) {
    yield map_info(base = a, bounds = element i)
  }
  target_update(iterated_maps = entries, ordinary_maps = [b])

Each locator is expanded only over the iterators it references, and locators
without one are mapped as before. Keeping the array base and selecting
elements or sections through map bounds handles explicit-shape and

    [12 lines not shown]
DeltaFile
+947-0flang/test/Lower/OpenMP/motion-iterator.f90
+230-0flang/test/Lower/OpenMP/Todo/map-motion-iterator-unsupported-locators.f90
+211-0flang/test/Lower/OpenMP/iterator-ranges.f90
+182-11flang/lib/Lower/OpenMP/ClauseProcessor.cpp
+166-0flang/lib/Lower/OpenMP/Utils.cpp
+81-0flang/test/Lower/OpenMP/Todo/map-iterator-ref-attach.f90
+1,817-1114 files not shown
+2,099-6320 files

LLVM/project 4e3ab84 — compiler-rt/lib/sanitizer_common CMakeLists.txt

ReportReceiver excluded on libc-free builds (fixes Linux?)
DeltaFile
+1-1compiler-rt/lib/sanitizer_common/CMakeLists.txt
+1-11 files

LLVM/project 9fc85b1 — flang/test/Transforms/DoConcurrent local_init_reduce_device.f90 shared_local_init_device.f90

[flang][OpenMP][NFC] - Add combinatorial device tests for locality specifiers (#238979)

Add end-to-end device tests for locality specifier combinations:
- local_init_reduce_device.f90: LOCAL_INIT + REDUCE on device
- shared_local_init_device.f90: SHARED + LOCAL_INIT on device

These complement the existing host-only combinatorial tests and verify
the full target teams distribute parallel do structure is generated
correctly with mixed locality specifiers.

Co-authored-by: Claude Opus 4 (1M context) <noreply at anthropic.com>
DeltaFile
+39-0flang/test/Transforms/DoConcurrent/shared_local_init_device.f90
+37-0flang/test/Transforms/DoConcurrent/local_init_reduce_device.f90
+76-02 files

LLVM/project c62b993 — compiler-rt/lib/asan asan_descriptions.cpp asan_errors.h, compiler-rt/lib/sanitizer_common sanitizer_symbolizer_report.cpp sanitizer_report_receiver.h

clang-format
DeltaFile
+46-46compiler-rt/lib/asan/asan_errors.cpp
+27-27compiler-rt/lib/asan/asan_errors.h
+17-20compiler-rt/lib/tsan/rtl/tsan_report.cpp
+15-16compiler-rt/lib/sanitizer_common/sanitizer_report_receiver.h
+14-14compiler-rt/lib/sanitizer_common/sanitizer_symbolizer_report.cpp
+14-14compiler-rt/lib/asan/asan_descriptions.cpp
+133-1376 files not shown
+179-18612 files

LLVM/project 85c4dd3 — llvm/include/llvm/CodeGen MachineDominators.h, llvm/include/llvm/Passes MachinePassRegistry.def

[CodeGen] Add verify<machine-dom-tree> (#240960)

Similar to the middle-end equivalent. Makes it easier to write tests
around analysis invalidation/correct preservation.

Assisted-By: LLM
DeltaFile
+11-0llvm/lib/CodeGen/MachineDominators.cpp
+8-0llvm/include/llvm/CodeGen/MachineDominators.h
+1-1llvm/test/CodeGen/AMDGPU/si-lower-control-flow-preserve-dom-tree.mir
+2-0llvm/include/llvm/Passes/MachinePassRegistry.def
+22-14 files

FreeBSD/ports 7d40a65 — devel/git Makefile pkg-plist

devel/git: Update to 2.56.1

This is a set of coordinated security fix releases addressing
CVE-2026-111760, CVE-2026-113408, CVE-2026-114466, CVE-2026-114467,
CVE-2026-114469 and CVE-2026-105437.

Security:       24e1443d-dd3b-11f1-b094-bc2411e144f8
Sponsored by:   Rubicon Communications, LLC ("Netgate")
DeltaFile
+7-7devel/git/distinfo
+6-0devel/git/pkg-plist
+1-1devel/git/Makefile
+14-83 files

FreeBSD/ports a509449 — security/vuxml/vuln 2026.xml

security/vuxml: Document git vulnerabilities

* CVE-2026-111760
* CVE-2026-113408
* CVE-2026-114466
* CVE-2026-114467
* CVE-2026-114469
* CVE-2026-105437

Sponsored by:   Rubicon Communications, LLC ("Netgate")
DeltaFile
+87-0security/vuxml/vuln/2026.xml
+87-01 files

FreeBSD/src 5feb271 — sys/kern vfs_lookup.c

namei(9): fix two ni_startdir leaks

namei() leaks the caller's ni_startdir reference on the empty-path
ENOENT return and on namei_getpath() failure.

On ZFS with the default zfs_xattr_compat=1, an empty user-namespace
extattr name on a file that has an xattr directory leaks one reference
on that directory per call.

Reported by:    llm-postcr
Reviewed by:    markj
Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Differential revision:  https://reviews.freebsd.org/D61366
DeltaFile
+6-1sys/kern/vfs_lookup.c
+6-11 files

FreeBSD/src 7ac5569 — sys/kern vfs_vnops.c

vn_open_cred(9): fix ni_startdir leak

vn_open_cred() returns EINVAL before calling namei() for
O_CREAT|O_EXCL|O_DIRECTORY and for O_CREAT|O_EMPTY_PATH.
That leaks an NDINIT_ATVP() start directory.

Reviewed by:    markj
Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Differential revision:  https://reviews.freebsd.org/D61366
DeltaFile
+4-2sys/kern/vfs_vnops.c
+4-21 files

FreeBSD/src 1b4779e — lib/libthr/thread thr_mutex.c

libthr mutex_self_lock(): handle signals and clock steps

Relocking an owned NORMAL mutex with an absolute timeout has two issues:
- nanosleep(2) is never restarted, so any caught signal causes
  an early ETIMEDOUT.
- If CLOCK_REALTIME or CLOCK_TAI are stepped backward during the sleep,
  the call also returns ETIMEDOUT before the clock reaches the deadline.

The kernel already polls CPU-time clocks and handles realtime steps.
Use _thr_umtx_timedwait_uint() in a loop to handle both issues.

Reviewed by:    markj
Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Differential revision:  https://reviews.freebsd.org/D61381
DeltaFile
+7-3lib/libthr/thread/thr_mutex.c
+7-31 files

FreeNAS/freenas f6a19c9 — src/middlewared/middlewared/api/v25_10_1 system_product.py, src/middlewared/middlewared/api/v25_10_2 system_product.py

Make license multiline
DeltaFile
+4-2src/middlewared/middlewared/plugins/truenas/license.py
+2-2src/middlewared/middlewared/api/v28_0_0/system_product.py
+2-2src/middlewared/middlewared/api/v27_0_0/system_product.py
+2-2src/middlewared/middlewared/api/v25_10_5/system_product.py
+2-2src/middlewared/middlewared/api/v25_10_2/system_product.py
+2-2src/middlewared/middlewared/api/v25_10_1/system_product.py
+14-123 files not shown
+18-169 files

FreeBSD/ports 5e508d7 — misc/py-pyqir distinfo Makefile

misc/py-pyqir: update 0.12.6 → 0.12.8
DeltaFile
+3-3misc/py-pyqir/distinfo
+3-3misc/py-pyqir/Makefile
+6-62 files

FreeBSD/ports a986317 — sysutils/mise Makefile distinfo

sysutils/mise: update 2026.10.23 → 2026.11.6

ChangeLog: https://github.com/jdx/mise/releases/tag/v2026.11.6
DeltaFile
+281-267sysutils/mise/distinfo
+140-133sysutils/mise/Makefile
+421-4002 files

FreeBSD/ports 3427509 — www/authelia Makefile distinfo, www/authelia/files authelia.in simplified-authelia.yml

www/authelia: update 4.39.20 → 4.39.28; add service pid file; update default service config

Service config was outdated. The new one now successfully starts the
service.

PR:             300045
Submitted by:   paul.le.gauret at gmail.com (port update)
DeltaFile
+19-161www/authelia/files/simplified-authelia.yml
+7-7www/authelia/distinfo
+9-5www/authelia/files/authelia.in
+8-5www/authelia/Makefile
+43-1784 files

FreeBSD/ports 562374c — shells/nu_plugin_gstat distinfo, shells/nu_plugin_polars Makefile.crates distinfo

shells/nushell: update 0.116.1 → 0.117.0

ChangeLog: https://www.nushell.sh/blog/2026-11-09-nushell_v0_117_0.html

Plugins (shells/nu_plugin_*) are also updated as usual.
DeltaFile
+183-179shells/nushell/distinfo
+175-169shells/nu_plugin_polars/distinfo
+91-90shells/nushell/Makefile
+86-83shells/nu_plugin_polars/Makefile.crates
+79-89shells/nu_plugin_query/distinfo
+81-47shells/nu_plugin_gstat/distinfo
+695-65712 files not shown
+920-88118 files

FreeBSD/ports 6d2c20f — databases/weaviate Makefile distinfo

databases/weaviate: update 1.40.4 → 1.40.5
DeltaFile
+5-5databases/weaviate/distinfo
+1-1databases/weaviate/Makefile
+6-62 files