FreeBSD/src 1108018 — sys/net pfvar.h, sys/netpfil/pf pf.c

pf: Clear only the part of the packet descriptor that is read first

pf_init_pdesc() cleared the whole structure, 336 bytes on amd64, for
every packet and twice for a forwarded one.  kif, m, pf_mtag, act and
the SCTP job list are set before they are read, so move them to the end
and clear only the 240 bytes before them.  On amd64 that also stays
below the 256 bytes from which memset() switches to rep stosb.

Reviewed by:            kp
Sponsored by:           Rubicon Communications, LLC ("Netgate")
Differential Revision:  https://reviews.freebsd.org/D60948
DeltaFile
+9-5sys/net/pfvar.h
+3-1sys/netpfil/pf/pf.c
+12-62 files

FreeBSD/src 5f02b2b — . zic.8 theory.html

Import tzcode 2026f
DeltaFile
+94-19NEWS
+11-59zic.c
+48-20localtime.c
+25-39tz-link.html
+18-20theory.html
+7-25zic.8
+203-1829 files not shown
+250-22315 files

FreeBSD/src afeb885 — sys/compat/linux linux_socket.c

linux: Preserve partial results from recvmmsg()

linux_recvmmsg_common() currently returns the error from the next
recvmsg() attempt even when one or more datagrams have already been
received and copied to userspace.

This is especially visible with non-blocking UDP sockets.  After
receiving the first datagram, the next iteration commonly returns
EAGAIN.  The syscall then reports EAGAIN instead of the number of
messages already stored in the mmsghdr array, causing applications to
discard successfully received packets.

This differs from Linux recvmmsg() semantics, where an error encountered
after receiving at least one message is deferred and the number of
received messages is returned.

Return the accumulated datagram count and clear the error whenever at
least one message was received.  Preserve the original error when no
messages were received.

    [10 lines not shown]
DeltaFile
+3-1sys/compat/linux/linux_socket.c
+3-11 files

FreeBSD/ports 209a3bd — ports-mgmt/pkg-devel pkg-plist Makefile, ports-mgmt/pkg-devel/files patch-libpkg_Makefile.in

ports-mgmt/pkg-devel: install missed include (+)

/usr/local/include/pkg.h:50:10: fatal error: 'pkg/sb.h' file not found
   50 | #include <pkg/sb.h>
      |          ^~~~~~~~~~

Reported by:    bulk -t
Approved by:    portmgr blanket
DeltaFile
+10-0ports-mgmt/pkg-devel/files/patch-libpkg_Makefile.in
+1-0ports-mgmt/pkg-devel/pkg-plist
+1-0ports-mgmt/pkg-devel/Makefile
+12-03 files

FreeBSD/src f6a8f38 — sys/x86/cpufreq est.c

est: prevent divide-by-zero in est_msr_info

When hw.est.msr_info=1 is set, est_msr_info() extracts the bus clock
from MSR_PERF_STATUS upper bits. On secondary CPUs, the MSR may
contain zero in the frequency ratio field, causing a
divide-by-zero panic.

Observed in pre Skylake Intel cpu.

Reviewed by:    adrian
Differential Revision:  https://reviews.freebsd.org/D57614

(cherry picked from commit 021a190c88fc41f981a79fe6822bdafbcda14e99)
DeltaFile
+4-0sys/x86/cpufreq/est.c
+4-01 files

FreeBSD/src 1704808 — sys/kern kern_event.c

kqueue: do not buffer the whole knote report when sizing it

kern_proc_kqueues_out() reported into an intermediate sbuf and copied the
result into the caller's.

A process that had leaked 468k kqueue descriptors wired 757 MB of M_SBUF
while dumping core, over roughly 9M reallocations, then copied the whole
thing again.

Reviewed by:    adrian, markj
Differential Revision:  https://reviews.freebsd.org/D58536
PR: 296835
MFC after: 1 week

(cherry picked from commit ff97443beef614a12652cb96ccebe95e9046e82a)
DeltaFile
+7-7sys/kern/kern_event.c
+7-71 files

FreeBSD/src fa68eef — sys/net if_fwsubr.c

if_fwsubr: remove ARP target hardware address trimming

Per RFC 2734 section 5, the 1394 ARP packet is a fixed 32-octet structure
with no target hardware address field.

Reviewed by:    adrian
Differential Revision:  https://reviews.freebsd.org/D57617

(cherry picked from commit 3ffd2baa268d298201d54c733dc0e635cc1dca9f)
DeltaFile
+0-7sys/net/if_fwsubr.c
+0-71 files

FreeBSD/src ad9ab26 — share/man/man4 smb.4, sys/dev/ichsmb ichsmb.c

smb(4): Add SMB Block Process Call command

Add support for the SMBus Block Process Call (bpcall) command. This
command writes a block of data to a slave device and reads a block of
data back in a single transaction, as defined in the SMBus 2.0
specification.

Add the SMB_BPCALL ioctl to the smb(4) character device to allow
userspace to issue Block Process Call transactions.

Implement ichsmb_bpcall() for the ICH SMBus controller using the
32-byte block buffer mode.  Older ICH variants (ICH, ICH0, ICH2, ICH3)
that lack the block buffer feature will return SMB_ENOTSUPP.

The PIIX4 compatible hardware (intpm) does not support Block Process
Call at all and returns SMB_ENOTSUPP unconditionally.

This has been tested on several Beckhoff Industrial PCs using real
SMBus hardware. It has been tested on Tigerlake, Elkhart and

    [5 lines not shown]
DeltaFile
+63-1sys/dev/ichsmb/ichsmb.c
+23-0sys/dev/smbus/smb.c
+16-0share/man/man4/smb.4
+13-0sys/dev/smbus/smbus_if.m
+9-0sys/dev/intpm/intpm.c
+2-0sys/dev/smbus/smbconf.h
+126-14 files not shown
+130-110 files

FreeBSD/doc f4842f3 — documentation/content/en/articles/committers-guide _index.adoc, documentation/content/en/articles/fonts _index.adoc

Change more links from http to https (those that exist)

No other content changes.

Event: Oslo Hackathon 2026
DeltaFile
+3-3documentation/content/en/articles/hubs/_index.adoc
+3-3documentation/content/en/articles/fonts/_index.adoc
+1-1documentation/content/en/articles/committers-guide/_index.adoc
+7-73 files

FreeBSD/src 5a2e900 — contrib/tzdata southamerica theory.html

contrib/tzdata: import tzdata 2026f

Changes: https://github.com/eggert/tz/blob/2026f/NEWS

MFC after:      3 days
DeltaFile
+94-19contrib/tzdata/NEWS
+50-23contrib/tzdata/northamerica
+0-40contrib/tzdata/backzone
+13-26contrib/tzdata/leapseconds.awk
+18-20contrib/tzdata/theory.html
+25-10contrib/tzdata/southamerica
+200-1383 files not shown
+226-1589 files

FreeBSD/ports 050f1bf — devel/git-graph Makefile distinfo

devel/git-graph: update 0.8.0 -> 0.8.2

Changelog: https://github.com/git-bahn/git-graph/releases/tag/v0.8.2
DeltaFile
+3-3devel/git-graph/distinfo
+1-1devel/git-graph/Makefile
+4-42 files

FreeBSD/src 9f3ba8a — . southamerica theory.html

Import tzdata 2026f
DeltaFile
+94-19NEWS
+50-23northamerica
+0-40backzone
+13-26leapseconds.awk
+18-20theory.html
+25-10southamerica
+200-1383 files not shown
+226-1589 files

FreeBSD/ports c4dcbf4 — devel/glab pkg-plist Makefile

devel/glab: update to 1.125.0

Changes:        https://gitlab.com/gitlab-org/cli/-/releases
DeltaFile
+5-5devel/glab/distinfo
+2-2devel/glab/Makefile
+2-0devel/glab/pkg-plist
+9-73 files

FreeBSD/ports d2b4e38 — devel/llvm19 Makefile, devel/llvm19/files patch-flang_runtime_io-api-minimal.cpp libc++21-flang_runtime_io-api-minimal.cpp

devel/llvm19: fix build on 15.1, 14.4

This patch only works on systems with the libc++ from LLVM 21 so bound
its application appropriatly.

PR:             299993, 296203
Fixes:          6a0f728d9cd8 ("devel/llvm19: fix build with flang and libc++ 21")
DeltaFile
+0-24devel/llvm19/files/patch-flang_runtime_io-api-minimal.cpp
+24-0devel/llvm19/files/libc++21-flang_runtime_io-api-minimal.cpp
+5-0devel/llvm19/Makefile
+29-243 files

FreeBSD/ports fa646dc — security/vuxml/vuln 2026.xml

security/vuxml: Document p5-Starman multiple vulnerabilities
DeltaFile
+50-0security/vuxml/vuln/2026.xml
+50-01 files

FreeBSD/ports 4ebfa74 — www/p5-Starman Makefile distinfo

www/p5-Starman: update 0.4018 -> 0.4019

Changelog: https://metacpan.org/dist/Starman/changes

Security:       CVE-2026-115824
Security:       CVE-2026-115822
Security:       CVE-2026-115823
Security:       CVE-2026-115817
Security:       CVE-2026-40560
DeltaFile
+3-3www/p5-Starman/distinfo
+1-1www/p5-Starman/Makefile
+4-42 files

FreeBSD/ports 5fedc98 — security/vuxml/vuln 2026.xml

security/vuxml: Document p5-Plack memory allocation vulnerability
DeltaFile
+27-0security/vuxml/vuln/2026.xml
+27-01 files

FreeBSD/ports 000a835 — www/p5-Plack Makefile distinfo

www/p5-Plack: update 1.0055 -> 1.0057

Changelog: https://metacpan.org/dist/Plack/changes

Security:       CVE-2026-115825
DeltaFile
+3-3www/p5-Plack/distinfo
+1-1www/p5-Plack/Makefile
+4-42 files

FreeBSD/ports 12a9b03 — security/vuxml/vuln 2026.xml

security/vuxml: Document p5-HTTP-Body multiple vulnerabilities
DeltaFile
+64-0security/vuxml/vuln/2026.xml
+64-01 files

FreeBSD/ports 89a2556 — www/p5-Mojo-DOM58 Makefile distinfo

www/p5-Mojo-DOM58: update 3.002 -> 3.003

Changelog: https://metacpan.org/dist/Mojo-DOM58/changes
DeltaFile
+3-3www/p5-Mojo-DOM58/distinfo
+1-1www/p5-Mojo-DOM58/Makefile
+4-42 files

FreeBSD/ports 56d4fe2 — www/p5-Dancer2 Makefile distinfo

www/p5-Dancer2: update 2.2.2 -> 2.3.0

Changelog: https://metacpan.org/dist/Dancer2/changes

Major changes:
    - PR #1866: JSON serializer should not leak file/line detail
    - GH #1794: Add support for HTTP QUERY method.
    - GH #1863: Fix the JSON serializer modifying the data it is given.

Security:       PR #1866: JSON serializer should not leak file/line detail
DeltaFile
+3-3www/p5-Dancer2/distinfo
+1-1www/p5-Dancer2/Makefile
+4-42 files

FreeBSD/ports c8f0e19 — www/p5-HTTP-Body Makefile distinfo

www/p5-HTTP-Body: update 1.23 -> 1.24

Changelog: https://metacpan.org/dist/HTTP-Body/changes

Security:       CVE-2026-116131
Security:       CVE-2026-116132
Security:       CVE-2026-116133
Security:       CVE-2026-116134
Security:       CVE-2026-116135
Security:       CVE-2026-116285
Security:       CVE-2026-116531
DeltaFile
+3-3www/p5-HTTP-Body/distinfo
+1-1www/p5-HTTP-Body/Makefile
+4-42 files

FreeBSD/ports 3b50830 — security/vuxml/vuln 2026.xml

security/vuxml: Document p5-MIME-Tools multiple vulnerabilities
DeltaFile
+58-0security/vuxml/vuln/2026.xml
+58-01 files

FreeBSD/ports 1a4ce17 — mail/p5-MIME-Tools distinfo Makefile

mail/p5-MIME-Tools: update 5.519 -> 5.522

Changelog: https://metacpan.org/dist/MIME-tools/changes

Security:       CVE-2026-116264
Security:       CVE-2026-116265
Security:       CVE-2026-116266
Security:       CVE-2026-116267
Security:       CVE-2026-116268
Security:       CVE-2026-116269
Security:       CVE-2026-116270
Security:       CVE-2026-116271
Security:       CVE-2026-116272
Security:       CVE-2026-116273
DeltaFile
+3-3mail/p5-MIME-Tools/distinfo
+4-2mail/p5-MIME-Tools/Makefile
+7-52 files

FreeBSD/ports 650eca6 — converters/p5-Sereal Makefile distinfo

converters/p5-Sereal: update 5.010 -> 5.011

Changelog: https://metacpan.org/dist/Sereal/changes
DeltaFile
+3-3converters/p5-Sereal/distinfo
+1-1converters/p5-Sereal/Makefile
+4-42 files

FreeBSD/ports 88d540e — converters/p5-Sereal-Decoder Makefile distinfo

converters/p5-Sereal-Decoder: update 5.010 -> 5.011

Changelog: https://metacpan.org/dist/Sereal-Decoder/changes
DeltaFile
+3-3converters/p5-Sereal-Decoder/distinfo
+1-1converters/p5-Sereal-Decoder/Makefile
+4-42 files

FreeBSD/ports a230f02 — converters/p5-Sereal-Encoder Makefile distinfo

converters/p5-Sereal-Encoder: update 5.010 -> 5.011

Changelog: https://metacpan.org/dist/Sereal-Encoder/changes
DeltaFile
+3-3converters/p5-Sereal-Encoder/distinfo
+1-1converters/p5-Sereal-Encoder/Makefile
+4-42 files

FreeBSD/ports f5bd9f0 — security/vuxml/vuln 2026.xml

security/vuxml: Document p5-GD security issues
DeltaFile
+27-0security/vuxml/vuln/2026.xml
+27-01 files

FreeBSD/ports 0b000c2 — graphics/p5-GD Makefile distinfo, graphics/p5-GD/files patch-Makefile.PL

graphics/p5-GD: update 2.83 -> 2.91

Changelog: https://metacpan.org/dist/GD/changes

Port changes:
    - Use CPAN:RURBAN macro, latest releasees are not available in the by-module path
    - Remove patch which looks useless

Security:       CVE-2026-11526
DeltaFile
+0-69graphics/p5-GD/files/patch-Makefile.PL
+3-3graphics/p5-GD/distinfo
+2-1graphics/p5-GD/Makefile
+5-733 files

FreeBSD/ports 2d81992 — devel/vc-intrinsics Makefile

devel/vc-intrinsics: drop support for LLVM 12 13 14

These versions are ancient so drop support for them.

This currently leaves LLVM 15 support.  It appears this port could be
updated to support more recent versions if anyone needs it.
DeltaFile
+1-1devel/vc-intrinsics/Makefile
+1-11 files