CVSROOT: /cvs Module name: www Changes by: bcook@cvs.openbsd.org 2026/04/18 19:43:10 Modified files: libressl : index.html releases.html Log message: LibreSSL 4.3.1 CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2026/04/19 03:36:56 Modified files: sys/dev/ic : com.c Log message: Get rid of the COM_CONSOLE ifdef maze. This was introduced for sparc which is no longer with us. ok jsg@ CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2026/04/19 03:59:22 Modified files: sys/arch/amd64/amd64: autoconf.c bus_dma.c sys/arch/amd64/include: bus.h Log message: Extend the SEV bounce buffer implementation to make it usable for bouncing memory that isn't DMA reachable. ok deraadt@ CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2026/04/19 13:29:53 Modified files: sys/arch/arm64/stand/efiboot: efiboot.c Log message: Terminate SMBIOS vendor/product matching at first match. ok jsg@, tobhe@, deraadt@ CVSROOT: /cvs Module name: ports Changes by: matthieu@cvs.openbsd.org 2026/04/19 13:38:52 Modified files: graphics/png : Makefile distinfo Log message: Update to png 1.6.58. ok deraadt@, naddy@. Fixes a regression introduced in 1.6.56 xenocara will be updated after unlock as it's not affected. CVSROOT: /cvs Module name: ports Changes by: matthieu@cvs.openbsd.org 2026/04/19 13:43:31 Modified files: graphics/png : Tag: OPENBSD_7_8 Makefile distinfo Log message: Update to png 1.6.58. ok deraadt@, naddy@. Fixes a regression introduced in 1.6.56 CVSROOT: /cvs Module name: src Changes by: millert@cvs.openbsd.org 2026/04/19 13:54:02 Modified files: libexec/login_chpass: Makefile Log message: login_chpass: No longer need to install this setuid root When the YP code was removed login_chpass became wrapper that just execs login_lchpass. OK deraadt@ CVSROOT: /cvs Module name: ports Changes by: volker@cvs.openbsd.org 2026/04/19 14:18:57 Modified files: shells/elvish : Makefile distinfo modules.inc shells/elvish/pkg: PLIST Log message: shells/elvish: Update to 0.21.0 The current version in ports is broken/non-functional. approved by naddy@ CVSROOT: /cvs Module name: ports Changes by: bcook@cvs.openbsd.org 2026/04/19 14:37:52 Modified files: sysutils/btop : Makefile Added files: sysutils/btop/patches: patch-src_openbsd_btop_collect.cpp Log message: Patch btop to report active CPU usage correctly from upstream https://github.com/aristocratos/btop/pull/1587 This also allows building on spark64 with gcc 15. CVSROOT: /cvs Module name: src Changes by: djm@cvs.openbsd.org 2026/04/19 17:37:22 Modified files: usr.bin/ssh : clientloop.c Log message: correctly set extended type for client-side channels. Fixes interactive vs bulk IPQoS for client->server traffic. ok job@ CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2026/04/19 18:18:21 Modified files: sys/conf : newvers.sh Log message: 7.9-current ok deraadt@ CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2026/04/19 19:25:12 Modified files: sys/dev/pci/drm/i915/gt: intel_engine_heartbeat.c Log message: drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat From Sebastian Brzezinka 2af8b200cae3fdd0e917ecc2753b28bb40c876c1 in linux-6.18.y/6.18.23 4c71fd099513bfa8acab529b626e1f0097b76061 in mainline linux CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2026/04/19 19:27:42 Modified files: sys/dev/pci/drm/i915/display: intel_psr.c Log message: drm/i915/psr: Do not use pipe_src as borders for SU area From Jouni Hogander de9aa7e89b98157d2650f25691e40711b8404151 in linux-6.18.y/6.18.23 75519f5df2a9b23f7bf305e12dc9a6e3e65c24b7 in mainline linux CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/04/19 22:26:12 Modified files: lib/libcrypto/ec: ec_pmeth.c Log message: ec_pmeth: fix 20yo comment: *outlen -> *keylen CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/04/19 22:35:00 Modified files: lib/libtls : tls_keypair.c Log message: tls_keypair: add missing from bcook kenjiro CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/04/20 00:34:11 Modified files: x11/gtk+4 : Makefile distinfo Log message: Update to gtk+4-4.22.3. ok naddy@ CVSROOT: /cvs Module name: src Changes by: job@cvs.openbsd.org 2026/04/20 01:43:52 Modified files: usr.bin/ssh : channels.c Log message: Clarify comment on what setting extended types for channels does OK djm@ CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/04/20 02:14:29 Modified files: lib/libcrypto/mlkem: mlkem_internal.h Log message: mlkem: use instead of "mlkem.h" patch from portable CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/04/20 02:44:48 Modified files: usr.bin/vi/cl : cl_funcs.c usr.bin/vi/common: recover.c usr.bin/vi/ex : ex_append.c ex_bang.c ex_global.c usr.bin/vi/vi : vs_split.c Log message: vi: avoid set but not used warnings From Walter Alejandro Iglesias ok claudio CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/04/20 04:30:02 Modified files: usr.bin/vi/cl : cl_funcs.c cl_read.c cl_screen.c usr.bin/vi/common: cut.c delete.c exf.c gs.h key.c line.c main.c mark.c mem.h msg.c options.c seq.c usr.bin/vi/ex : ex.h ex_argv.c ex_cmd.c ex_filter.c ex_global.c ex_init.c ex_join.c ex_read.c ex_script.c ex_subst.c ex_tag.c ex_txt.c ex_util.c usr.bin/vi/vi : v_cmd.c v_delete.c v_ex.c v_screen.c v_search.c v_txt.c v_yank.c vi.c vs_msg.c vs_smap.c vs_split.c Log message: vi: whitespace fixes Zap trailing whitespace, remove spaces before tabs, and expand 8 spaces to tabs. Prompted by a diff by Walter Alejandro Iglesias CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/04/20 05:37:18 Modified files: usr.bin/vi/common: screen.c Log message: vi: fix indent by trailing extra space from Walter Alejandro Iglesias CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/04/20 10:46:15 Modified files: geo/mapserver : Makefile distinfo Log message: geo/mapserver: security update to 8.6.2. see https://mapserver.org/development/changelog/changelog-8-6.html#changelog-8-6 fixes https://github.com/MapServer/MapServer/security/advisories/GHSA-4g9f-ph64-hg2x ok naddy@ CVSROOT: /cvs Module name: ports Changes by: kn@cvs.openbsd.org 2026/04/20 12:16:56 Modified files: net/gelatod : Makefile distinfo Log message: update to gelatod-1.7; same fix as 029_v6daemons; OK naddy CVSROOT: /cvs Module name: ports Changes by: volker@cvs.openbsd.org 2026/04/20 13:07:42 Modified files: graphics/lcms2 : Makefile distinfo Log message: graphics/lcms2: Update to 2.19rc2 Fixes several issues, for reference see https://marc.info/?l=oss-security&m=177646929211758&w=2 pointed out by and ok tb@, ok naddy@ CVSROOT: /cvs Module name: src Changes by: kirill@cvs.openbsd.org 2026/04/20 15:18:37 Modified files: sys/arch/octeon/dev: octeon_intr.c Log message: sys/octeon: accept linux,phandle for IRQs SRX300 firmware DT describes the CIU root and several CIB interrupt controllers with linux,phandle, but omits phandle. octeon_intr_register() consumed only the latter; the controllers therefore never entered the interrupt controller registry, and every later interrupt-parent lookup for CIB, AHCI, and xHCI failed. Thus, dev/ofw/fdt lookup code already treats phandle and linux,phandle as equivalent; so the Octeon interrupt layer should do the same when registering interrupt controllers. OK: kettenis@, visa@ CVSROOT: /cvs Module name: src Changes by: kirill@cvs.openbsd.org 2026/04/20 15:20:38 Modified files: sys/arch/octeon/dev: cn30xxuart.c Log message: sys/octeon: preserve bootloader console baud The SRX300 console runs at 9600 baud under U-Boot; OpenBSD forced 115200 during console handoff, which garbled output immediately after early memory setup and made a live kernel look dead. Here, I read the programmed UART divisor instead and derive comconsrate from it, so the kernel preserves the bootloader console configuration. OK: visa@ CVSROOT: /cvs Module name: src Changes by: jca@cvs.openbsd.org 2026/04/20 15:35:08 Modified files: distrib/notes/riscv64: prep Log message: Move hw-specific parts at the end of this file CVSROOT: /cvs Module name: src Changes by: jca@cvs.openbsd.org 2026/04/20 15:38:55 Modified files: distrib/notes/riscv64: prep Log message: Document specifics for spacemit K1-based boards Orange Pi RV2, BananaPi F3, and Milk-V Jupiter Requested by deraadt CVSROOT: /cvs Module name: src Changes by: jca@cvs.openbsd.org 2026/04/20 15:43:39 Modified files: distrib/notes/riscv64: prep Log message: Add post-install hints for boards without distro_bootcmd (like BPi F3/Jupiter) The default bootcmd is useless on these boards, so suggest some simple default boot command. CVSROOT: /cvs Module name: src Changes by: jca@cvs.openbsd.org 2026/04/20 15:47:00 Modified files: distrib/notes/riscv64: hardware Log message: Mention some Spacemit K1 boards that kettenis added support for BananaPi F3, Orange Pi RV2, and Milk-V Jupiter CVSROOT: /cvs Module name: src Changes by: jca@cvs.openbsd.org 2026/04/20 15:51:22 Modified files: distrib/notes/riscv64: prep Log message: Better wording and typo fix for the Spacemit K1 boards CVSROOT: /cvs Module name: src Changes by: jca@cvs.openbsd.org 2026/04/20 16:20:07 Modified files: distrib/notes/riscv64: prep Log message: Remove the bootcmd hint for now On this jupiter box, U-Boot's bootcmd can't be interrupted on the serial console by pressing any key, Ctrl+C or ESC, even though the official docs say it should be possible by pressing any key. sigh CVSROOT: /cvs Module name: ports Changes by: bket@cvs.openbsd.org 2026/04/20 21:20:14 Modified files: sysutils/rclone: Makefile distinfo Log message: Update to rclone-1.73.5 CVE-2026-41176 rc: add AuthRequired to options/set to prevent auth bypass rc: snapshot NoAuth at startup to prevent runtime auth bypass CVE-2026-41179 operations: add AuthRequired to operations/fsinfo to prevent backend creation Changelog: https://rclone.org/changelog/#v1-73-5-2026-04-19 OK sthen@ CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/04/20 23:18:35 Modified files: regress/lib/libcrypto/pkcs7: pkcs7test.c Log message: pkcs7test: factor main into a helper so we can add some unit tests easily CVSROOT: /cvs Module name: src Changes by: sashan@cvs.openbsd.org 2026/04/21 00:38:28 Modified files: sys/net : pf_if.c Log message: PFI_FLAG_SKIP may be lost when interface disappears and then reappears if 'set skip on ...' in pf.conf(5) refers to interface (or interface group) which is yet to be created in system, then all is good. However if the interface (or interface group) exists in system at the time when pf.conf(5) is being loaded to pf(4) the effect of skip flag might get lost. The scenario for tap0 interface goes as follows: tap0 (and tap interface) exist in system and is known to pf(4), meaning 'pfctl -sI' reports tap0 and tap. pf.conf with 'set skip on tap' is loaded. The pf(4) sets the flag on `kif` instance without obtaining a reference to keep it in table until skip flag (PFI_FLAG_SKIP) is reset. tap0 interface is removed from system (ifconfig tap0 destroy), the tap0 is removed from system and also corresponding kif instance is removed from pf(4). kif is forgotten together with flag settings. If tap0 happens to be the last tap interface, then tap interface group (including its kif) is also removed from system (and pf(4)). Now tap0 is going to be re-created by running 'ifconfig tap0 up'. The corresponding kif instances (kif instance for tap0 interface and tap interface group) are inserted to interface table in pf(4) with default interface flags, loosing 'set skip on tap...' setting found in pf.conf. To workaround this one has to reload pf.conf so interface flags are set again. The issue has been noticed and kindly reported by Atanas Vladimirov OK bluhm@ CVSROOT: /cvs Module name: src Changes by: renaud@cvs.openbsd.org 2026/04/21 01:42:38 Modified files: libexec/tradcpp: macro.c Log message: expand_domacro() handled a defined() with the wrong argument count via an error path that doesn't drain es->args OK jsg CVSROOT: /cvs Module name: src Changes by: mglocker@cvs.openbsd.org 2026/04/21 02:56:22 Modified files: sys/dev/ic : qwz.c Log message: Enable nwid scanning by doing two things: 1. Disable the 802.11d scanning command for now, since it causes a firmware error for which we currently have no solution. This isn't a critical feature, and we can progress without it until we find a solution. 2. Send the HTT software ring setup messages for the receive rings, otherwise the firmware never initializes its RXDMA pipeline, and delivers no frames to the host. For that we did port over the ath12k_dp_rxdma_ring_sel_config_wcn7850() and ath12k_dp_rx_htt_setup() functions from the linux driver. Tested and ok kettenis@, kirill@ CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/04/21 05:31:15 Modified files: devel/opendht : Makefile Log message: avoid picking up doxygen during build, to avoid build failure with dpb junking requested by naddy CVSROOT: /cvs Module name: src Changes by: henning@cvs.openbsd.org 2026/04/21 06:35:45 Modified files: usr.sbin/ntpd : ntp_dns.c Log message: we use clock_gettime() here and thus shall explicitely include time.h from bcook's portable repo, ok bcook CVSROOT: /cvs Module name: xenocara Changes by: matthieu@cvs.openbsd.org 2026/04/21 07:19:01 Modified files: lib/libXpm/src : data.c parse.c Log message: Fix Out-of-bounds read. CVE-2026-4367 CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/04/21 07:22:18 Modified files: www/mozilla-firefox: Makefile distinfo www/mozilla-firefox/patches: patch-widget_NativeKeyToDOMCodeName_inc www/firefox-i18n: Makefile.inc distinfo Log message: www/mozilla-firefox: update to 150.0. see https://www.firefox.com/en-US/firefox/150.0/releasenotes/ fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-30/ - disable PGO again, fixes wasm crashes seen with element-web (cf #2030583) - will need to move to llvm 21 or patch llvm 19 to reenable PGO - add workaround to avoid fetching some pip wheels during configure (#2026497), another workaround would be to move to ./mach configure ? ok naddy@ CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/04/21 07:24:36 Modified files: www/firefox-esr: Makefile distinfo www/firefox-esr-i18n: Makefile.inc distinfo Log message: www/firefox-esr: update to 140.10.0. see https://www.firefox.com/en-US/firefox/140.10.0/releasenotes/ fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-32/ ok naddy@ CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/04/21 07:25:31 Modified files: www/firefox-esr: Tag: OPENBSD_7_8 Makefile distinfo Log message: www/firefox-esr: MFC update to 140.10.0. see https://www.firefox.com/en-US/firefox/140.10.0/releasenotes/ fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-32/ CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/04/21 07:26:10 Modified files: www/mozilla-firefox: Tag: OPENBSD_7_8 Makefile distinfo www/mozilla-firefox/patches: Tag: OPENBSD_7_8 patch-security_manager_ssl_nsNSSCallbacks_cpp patch-security_nss_lib_nss_nss_h Log message: www/mozilla-firefox: MFC update to 150.0. see https://www.firefox.com/en-US/firefox/150.0/releasenotes/ fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-30/ CVSROOT: /cvs Module name: xenocara Changes by: bluhm@cvs.openbsd.org 2026/04/21 08:06:16 Modified files: lib/libXpm/src : Tag: OPENBSD_7_8 data.c parse.c Log message: Fix Out-of-bounds read. CVE-2026-4367 from matthieu@ this is errata/7.8/032_libxpm.patch.sig CVSROOT: /cvs Module name: xenocara Changes by: bluhm@cvs.openbsd.org 2026/04/21 08:07:07 Modified files: lib/libXpm/src : Tag: OPENBSD_7_7 data.c parse.c Log message: Fix Out-of-bounds read. CVE-2026-4367 from matthieu@ this is errata/7.7/038_libxpm.patch.sig CVSROOT: /cvs Module name: src Changes by: henning@cvs.openbsd.org 2026/04/21 08:20:00 Modified files: usr.sbin/ntpd : control.c Log message: in control_check(), rename struct sockaddr_un sun to sa - for consistency with control_init() just underneath, and because "sun" causes problems for portable on solaris pretty much from bcook's portable repo, but another name, ok bcook CVSROOT: /cvs Module name: www Changes by: bluhm@cvs.openbsd.org 2026/04/21 08:29:25 Modified files: . : errata77.html errata78.html Log message: Release libxpm and slaacd errata. CVSROOT: /cvs Module name: src Changes by: henning@cvs.openbsd.org 2026/04/21 08:31:03 Modified files: usr.sbin/ntpd : ntp.c Log message: newer gcc thinks it's smart (do they call it AI yet?) and points out peercount may be used unitialized. of course it is utterly wrong. move peercount = 0 initialization 2 lines up to shut gcc up pointed out by bcook, dicussed with, gcc-checked by and ok bcook claudio CVSROOT: /cvs Module name: src Changes by: henning@cvs.openbsd.org 2026/04/21 08:36:00 Modified files: usr.sbin/ntpd : ntpd.c Log message: newer gcc is so smart to point out that settime_deadline may be used uninitialized. of course it is wrong. sprinkle a "= 0" to shut it up. pointed out by bcook, discussed with, gcc confronted by and ok claudio bcook CVSROOT: /cvs Module name: xenocara Changes by: matthieu@cvs.openbsd.org 2026/04/21 08:42:57 Modified files: lib/libpng : .gitignore ANNOUNCE CHANGES CMakeLists.txt README configure configure.ac libpng-manual.txt libpng.3 libpngpf.3 png.5 png.c png.h pngconf.h pngrtran.c pngtest.c lib/libpng/contrib/libtests: pnggetset.c lib/libpng/scripts: libpng-config-head.in libpng.pc.in pnglibconf.h.prebuilt Log message: update to libpng 1.6.58. ok deraadt@ CVSROOT: /cvs Module name: src Changes by: millert@cvs.openbsd.org 2026/04/21 08:44:29 Modified files: libexec/spamd : spamd.c Log message: Fix handing of multi-line blacklist error strings in spamd.conf When appending the blacklist error string, spamd splits the message on a newline and continues the message on a new line. There was a bug where the current pointer was incremented too far, which resulted in the message being truncated at the newline instead of continued. For very long blacklist messages (around 8K) in spamd.conf, this could result in heap corruption. However, this is very unlikely in practice. OK jsg@ Reported by and fix from Dhiraj Mishra CVSROOT: /cvs Module name: xenocara Changes by: matthieu@cvs.openbsd.org 2026/04/21 09:03:11 Modified files: . : MODULES 3RDPARTY Log message: update CVSROOT: /cvs Module name: src Changes by: miod@cvs.openbsd.org 2026/04/21 10:23:21 Modified files: distrib/sets/lists/comp: md.loongson Log message: sync CVSROOT: /cvs Module name: src Changes by: kn@cvs.openbsd.org 2026/04/21 11:24:40 Modified files: usr.sbin/rad : frontend.c Log message: Fix PREF64 option corruption if DNSSL is also set On octeon (but not amd64) setting both a NAT64 prefix and a search domain causes the former ICMPv6 option to be corrupted due to how it is added last in the Router Advertisement packet, following too much zero padding. Bytes after the DNSSL option are zeroed up the next 8-byte boundary to align options inside the packet. Instead of checking alignment of the pointer address somewhere inside the packet buffer that lives on the stack, which is thus architecture specific, use their offset, i.e. see how many bytes were already written, in order to zero-fill what is left between last search domain and next 8-byte boundary. This makes RAs byte-identical between octeon and amd64 and prevents rad(8) from sending the kind of invalid packets that clients like slaacd(8) and gelatod(8) (from ports) need 029_v6daemons for. OK florian CVSROOT: /cvs Module name: src Changes by: deraadt@cvs.openbsd.org 2026/04/21 12:18:11 Modified files: sys/sys : systm.h sys/kern : subr_xxx.c Log message: the enosys() stub has not been used for decades ok jsg jca CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/04/21 12:36:13 Modified files: sys/netinet : tcp_input.c Log message: A packet with a FIN flag needs to act as a barrier in tcp_flush_queue. Once a FIN packet is received all following data should simply be discarded. tcp_input handels this FIN but for that tcp_reass() needs to properly return TH_FIN when a FIN is processed in tcp_flush_queue. This reassembly was not quite correct. Unexpected data directly following the FIN packet was also reassembled and the FIN was actually lost. The failure to return TH_FIN caused the regression in the previous fix. tcp_input() passes some FIN packets through reassembly even though they are in sequence and the queue is empty. tcp_flush_queue() needs to treat packets with TH_FIN set as a barrier and stop reassembly after processing this last packet. This ensures that tcp_reass() returns TH_FIN to tcp_input which then changes the state of the session. It also ensures that only data up to the FIN packet are passed to userland. Reported by Xint Code OK sashan@ CVSROOT: /cvs Module name: src Changes by: kirill@cvs.openbsd.org 2026/04/21 13:43:47 Modified files: sys/arch/octeon/dev: octpcie.c Log message: sys/octeon: fix PCIe config tag layout Octeon PCIe config-space MMIO uses a 12-bit register field; function, device, and bus begin at bits 12, 15, and 20. octpcie_make_tag() and octpcie_decompose_tag() used the conventional PCI tag layout instead, so config accesses to non-zero device or function numbers used the wrong MMIO offset. On SRX300 this breaks enumeration of the second Broadcom switch function at 0:0:1, which reads back garbage until the tag layout is corrected. OK: kettenis@, visa@ CVSROOT: /cvs Module name: src Changes by: jca@cvs.openbsd.org 2026/04/21 13:58:21 Modified files: share/man/man4 : gpio.4 Log message: Mention sfgpio(4) and smtgpio(4) CVSROOT: /cvs Module name: src Changes by: jca@cvs.openbsd.org 2026/04/21 13:58:49 Modified files: share/man/man4 : iic.4 Log message: Mention smtiic(4) CVSROOT: /cvs Module name: src Changes by: jca@cvs.openbsd.org 2026/04/21 14:00:55 Modified files: share/man/man4 : openprom.4 Log message: Mention powerpc64 and riscv64 support CVSROOT: /cvs Module name: www Changes by: tb@cvs.openbsd.org 2026/04/21 14:16:15 Modified files: . : 79.html Log message: Add libressl 4.3.0 changelog (portable changes to be added later) CVSROOT: /cvs Module name: ports Changes by: rapha@cvs.openbsd.org 2026/04/21 14:18:54 Modified files: audio/csound : Makefile Log message: disable pipewire ok naddy@ CVSROOT: /cvs Module name: src Changes by: kirill@cvs.openbsd.org 2026/04/21 14:20:09 Modified files: sys/arch/octeon/dev: if_cnmac.c Log message: sys/cnmac: support SoftLRO This work based on previous work of Janne Johansson OK: visa@ CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/04/21 14:55:21 Modified files: regress/lib/libcrypto/wycheproof: wycheproof.go Log message: wycheproof: skip BLS test vectors to prepare for update CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/04/21 15:23:28 Modified files: net/librenms : Makefile distinfo net/librenms/pkg: PLIST-doc PLIST-main Log message: update to librenms-26.4.0, ok naddy includes fix for cross-site scripting in alert template list, and adds missing escaping for a few cli commands etc https://github.com/librenms/librenms/releases/tag/26.4.0 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/04/21 15:25:44 Modified files: net/librenms : Tag: OPENBSD_7_8 Makefile distinfo net/librenms/patches: Tag: OPENBSD_7_8 patch-LibreNMS___init___py patch-app_ConfigRepository_php patch-resources_definitions_config_definitions_json Added files: net/librenms/pkg: Tag: OPENBSD_7_8 DESCR-doc DESCR-main PLIST-doc PLIST-main README-main Removed files: net/librenms/pkg: Tag: OPENBSD_7_8 DESCR PLIST README Log message: MFC update to librenms-26.4.0 CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2026/04/21 19:43:48 Modified files: sys/nfs : nfs_var.h nfs_vnops.c Log message: change nfs_ioctl() from a macro with enoioctl() to a proper function this was the only use of enoioctl() ok claudio@ CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2026/04/21 19:51:37 Modified files: sys/sys : systm.h sys/kern : subr_xxx.c Log message: remove unused enoioctl() ok claudio@ CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/04/21 23:39:56 Modified files: mail/mozilla-thunderbird: Makefile distinfo mail/thunderbird-i18n: Makefile.inc distinfo Log message: mail/mozilla-thunderbird: update to 140.10.0. see https://www.thunderbird.net/en-US/thunderbird/140.10.0esr/releasenotes/ fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-34/ ok naddy@ CVSROOT: /cvs Module name: ports Changes by: robert@cvs.openbsd.org 2026/04/22 00:12:24 Modified files: devel/llvm/22/patches: patch-lld_ELF_LinkerScript_cpp devel/llvm/20 : Makefile devel/llvm/20/patches: patch-lld_ELF_LinkerScript_cpp devel/llvm/21 : Makefile devel/llvm/21/patches: patch-lld_ELF_LinkerScript_cpp Log message: fix section merging for .srodata and .openbsd.randomdata there was a bad merge of changes and a comma was lost and with that section merging for .srodata and .openbsd.randomdata ok naddy@, sthen@ CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2026/04/22 00:57:08 Modified files: usr.bin/tmux : tty-features.c tty-keys.c Log message: Add a default set of features for WezTerm. CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2026/04/22 00:58:59 Modified files: usr.bin/tmux : tmux.1 Log message: Remove no longer accurate statement from tmux.1, reported by dkuettel at gmail dot com. CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2026/04/22 01:03:06 Modified files: usr.bin/tmux : window-copy.c Log message: Do not leak hyperlinks in copy mode, from Barrett Ruth in GitHub issue 5020. CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2026/04/22 01:05:03 Modified files: usr.bin/tmux : format.c Log message: Add a fairly low time limit to format evaluation to stop absurdly nested formats from making tmux appear to hang. CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2026/04/22 01:05:59 Modified files: usr.bin/tmux : window-clock.c Log message: Make clock visible on terminals without colours, from Manuel Einfalt in GitHub issue 5001. CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2026/04/22 01:10:16 Modified files: usr.bin/tmux : cmd-new-session.c cmd-rename-session.c format.c input.c names.c screen.c session.c spawn.c tmux.c tmux.h window.c Log message: Sanitize pane titles and window and session names more consistently and strictly, prevents C0 characters and other nonvisible characters causing problems. Reported (with a different fix) by Chris Monardo in GitHub issue 4999. CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2026/04/22 01:13:26 Modified files: usr.bin/tmux : key-bindings.c options-table.c Log message: Add a couple of controls (kill, zoom) to default pane-status-format. Will be more to come with floating panes. From Dane Jensen in GitHub issue 4981. CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2026/04/22 01:15:34 Modified files: usr.bin/tmux : status.c Log message: Translate keypad keys to text in prompt input. From Barrett Ruth in GitHub issue 4996. CVSROOT: /cvs Module name: src Changes by: renaud@cvs.openbsd.org 2026/04/22 01:15:43 Modified files: usr.bin/vi/ex : ex.c Log message: Fix underflows in ex(1) and vi(1) +cmd parser OK millert@ CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2026/04/22 01:25:17 Modified files: usr.bin/tmux : server-client.c tmux.1 tmux.h tty-features.c tty-term.c tty.c Log message: Add feature for progress bar and pass to outside terminal, GitHu issue 4972 from Eric Dorland. CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/04/22 02:32:31 Modified files: mail/mozilla-thunderbird: Tag: OPENBSD_7_8 Makefile distinfo Log message: mail/mozilla-thunderbird: MFC update to 140.10.0 see https://www.thunderbird.net/en-US/thunderbird/140.10.0esr/releasenotes/ fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-34/ CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/04/22 04:02:34 Modified files: share/man/man9 : tsleep.9 Log message: tsleep.9: add const volatile qualifiers for ident This matches the changes with kern_synch.c r1.90 (2009). ok claudio jca CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/04/22 04:04:41 Modified files: share/man/man9 : tsleep.9 Log message: tsleep.9: replace two instances of -- with em dashes per mandoc -Tlint makes sense to jca CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/04/22 06:28:08 Modified files: sys/scsi : scsi_base.c Log message: Use &nowake as ident in tsleep_nsec call instead of using a stack variable for the same goal. Using &nowake is becomes clear that there is no wakeup call for this sleep. noticed by robert@ with llvm22 OK jca@ krw@ CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/04/22 07:51:46 Modified files: usr.sbin/bgpd : bgpd.conf.5 Log message: Add missing It in '.It Ic min-version Ar number' CVSROOT: /cvs Module name: src Changes by: henning@cvs.openbsd.org 2026/04/22 07:54:50 Modified files: usr.sbin/ntpd : ntpd.c Log message: in show_peer_msg, grow the buffer to hold the sprintf'd stratum by 1 byte. the previous buffer was large enough since startum is clamped to 0..15, however, it is a bit much to ask for analyzers - including those in compilers - to detect that, an extra byte on the stack costs us effectively nothing, and it feels a bit more robust. triggered by bcook's portable diffs, ok claudio CVSROOT: /cvs Module name: src Changes by: henning@cvs.openbsd.org 2026/04/22 07:57:58 Modified files: usr.sbin/ntpd : util.c Log message: grow the buffer to hold the sprintf'd rtable id by 8 bytes so it can hold the full range an int can express. the previous buffer was large enough since the rtable id is clamped to 0.. RT_TABLEID_MAX which is 255, however, it is a bit much to ask for analyzers - including those in compilers - to detect that, 8 extra bytes on the stack cost us effectively nothing, and it feels a bit more robust. triggered by bcook's portable diffs, ok claudio CVSROOT: /cvs Module name: ports Changes by: caspar@cvs.openbsd.org 2026/04/22 09:14:43 Modified files: meta/tor-browser: Makefile www/tor-browser: Makefile.inc www/tor-browser/browser: Makefile distinfo Log message: Tor Browser: update to 15.0.10 OK naddy@ CVSROOT: /cvs Module name: ports Changes by: caspar@cvs.openbsd.org 2026/04/22 09:15:02 Modified files: meta/tor-browser: Tag: OPENBSD_7_8 Makefile www/tor-browser: Tag: OPENBSD_7_8 Makefile.inc www/tor-browser/browser: Tag: OPENBSD_7_8 Makefile distinfo Log message: Tor Browser: update to 15.0.10 CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/04/22 09:17:43 Modified files: sys/net : route.c Log message: Use M_RTABLE and not M_TEMP for MPLS data attached to rt_llinfo. OK phessler@ CVSROOT: /cvs Module name: src Changes by: renaud@cvs.openbsd.org 2026/04/22 09:54:08 Modified files: usr.bin/vi/vi : vs_split.c Log message: vs_split() uses sp's visual map without checking it exists. OK millert CVSROOT: /cvs Module name: src Changes by: millert@cvs.openbsd.org 2026/04/22 10:01:08 Modified files: usr.bin/vi/ex : ex_global.c Log message: When updating the ranges after an insertion or deletion, the range should be up to and including the current line number. This behavior is consistent with historic vi as well as modern vim. Reported by Tim Case, fix from Walter Alejandro Iglesias CVSROOT: /cvs Module name: www Changes by: tj@cvs.openbsd.org 2026/04/22 10:55:44 Modified files: openssh : history.html Log message: fix typos that have been on this page for 26 years CVSROOT: /cvs Module name: src Changes by: kirill@cvs.openbsd.org 2026/04/22 13:11:04 Modified files: sys/arch/octeon/dev: cn30xxgmx.c cn30xxgmxvar.h if_cnmac.c Log message: sys/cnmac: support CN71xx 1000BASE-X ports Some CN71xx boards describe active GMX ports only in the PIP device tree, and mark the CPU facing link as cavium,sgmii-mac-1000x-mode with cavium,disable-autonegotiation, but without a PHY handle. OpenBSD otherwise trusts GMX0_INF_MODE for port discovery and insists on a PHY attach in cn30xxgmx_attach(), so such ports never reach cnmac with a usable media setup. Enumerate CN71xx SGMII ports from pip/interface@N when that description is present, carry the 1000x and disable-autonegotiation flags into the per port state, and let cnmac seed fixed 1000baseT full duplex media for that case. Ports that still use a normal SGMII PHY path continue to go through cn30xxsmi_get_phy() and mii_attach() unchanged. Tested on two CN71xx Octeon systems: Juniper SRX300, which uses 1000BASE-X DT ports, and Ubiquiti EdgeRouter 4, which does not. OK: visa@ CVSROOT: /cvs Module name: src Changes by: dlg@cvs.openbsd.org 2026/04/22 15:58:53 Modified files: usr.bin/netstat: mbuf.c sys/kern : uipc_mbuf.c Log message: increase the 9k mbuf clusters to 9k + 128 bytes pools try to amortise the cost of items against the underlying kernel memory allocator by rounding the "page" size up to fit at least 8 items, and then rounding that up to the next power of 2. the 9k clusters are 9 * 1024 bytes, which is 72k after being multiplied by 8, which becomes 128k cos it's the next power of 2. if you divide 128k by 9k, you get 14 and some change. there's enough change that we can raise the cluster size by 128 bytes without affecting the page size or the number of items on the page. ie, it's still going to use 128k "pages" and fit 14 clusters. i can take advantage of this in some drivers for stupid hardware, so given the above it seems like a plan without any drawbacks apart from the pool name getting a bit bigger. ok claudio@ CVSROOT: /cvs Module name: src Changes by: dlg@cvs.openbsd.org 2026/04/22 16:09:18 Modified files: sys/dev/pci : if_ix.c Log message: fix rss hashing on big endian archs i noticed that packets seem to be hashed differently by the network stack and this hardware on sparc64. mucking around with how we handle the endianness of the rss key programmed via registers makes it consistent on both big and little archs. tested by me on sparc64 and arm64 ok claudio@ CVSROOT: /cvs Module name: ports Changes by: jca@cvs.openbsd.org 2026/04/22 16:10:17 Modified files: net/openvpn : Tag: OPENBSD_7_8 Makefile distinfo net/openvpn/patches: Tag: OPENBSD_7_8 patch-configure Log message: SECURITY update to openvpn-2.6.20 fix race condition in TLS handshake that could lead to leaking of packet data from a previous handshake under specific circumstances (CVE-2026-40215) fix server ASSERT() on receiving a suitably malformed packet with a valid tls-crypt-v2 key (CVE-2026-35058) Other changes: https://github.com/OpenVPN/openvpn/blob/v2.6.20/Changes.rst CVSROOT: /cvs Module name: src Changes by: dlg@cvs.openbsd.org 2026/04/22 16:12:49 Modified files: sys/dev/pci : if_ix.c Log message: fix tx dma segment size i thought it was weird that an MI driver like ix(4) is using an MD number like PAGE_SIZE for the maximum segment size in its tx dma maps. the manual says tx segments can be 16k (and goes into a 16bit field), so let's try using the documented value here. the rx descs also use 16 * 1024 as a magic number here, so it's in keeping with other code in the same driver. tested by me on arm64 and sparc64 (which has 8k pages) tested by and ok jan@ CVSROOT: /cvs Module name: src Changes by: sashan@cvs.openbsd.org 2026/04/22 17:06:01 Modified files: sys/net : if_pfsync.c Log message: pf_purge_states() may trip assert(st->timeout == PFTM_UNLINKED) in pf_free_state(). Once member ->timeout in pf_state structure reaches PFTM_UNLINKED value, then the ->timeout member must not not be updated. This diff reminds pfsync(4) to follow PFTM_UNLINKED rule too. The pfsync(4) currently may accidentally update ->timeout member while state is being purged, causing pf_purge_states() to trip the assert. Issue was kindly reported by Stuart Henderson. OK @bluhm CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2026/04/22 19:08:46 Modified files: sys/dev/pci/drm/amd/amdgpu: amdgpu_vm.c Log message: drm/amdgpu: Handle GPU page faults correctly on non-4K page systems From Donet Tom 6a9f2683c66dc54d3598589684c0b3c5cb2862ad in linux-6.18.y/6.18.24 4e9597f22a3cb8600c72fc266eaac57981d834c8 in mainline linux CVSROOT: /cvs Module name: src Changes by: millert@cvs.openbsd.org 2026/04/22 19:08:47 Modified files: lib/libc/time : difftime.c Log message: Fix difftime() result when it is passed a negative value We need to cast the result of bitwise AND to time_t before the cast to double in the HI and LO macros. Otherwise, we get a very large positive floating point value instead of a negative value. Reported by Xuntao Chi CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2026/04/22 19:10:33 Modified files: sys/dev/pci/drm/amd/amdkfd: kfd_queue.c Log message: drm/amdkfd: Fix queue preemption/eviction failures by aligning control stack size to GPU page size From Donet Tom 647fb0dc3818733024fc96c1df1ec3af806b0256 in linux-6.18.y/6.18.24 78746a474e92fc7aaed12219bec7c78ae1bd6156 in mainline linux CVSROOT: /cvs Module name: src Changes by: dlg@cvs.openbsd.org 2026/04/22 19:15:07 Modified files: sys/ddb : db_input.c Log message: make ctrl-w remove trailing space from words too this makes it more consistent with what i experience with ctrl-w in the shell. ok deraadt@ claudio@ CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2026/04/22 19:16:32 Modified files: sys/dev/pci/drm/i915: i915_gem.c Log message: x86: rename and clean up __copy_from_user_inatomic_nocache() From Linus Torvalds 03fd014cd9f3a3d173740ab9c5cbede82fd6322c in linux-6.18.y/6.18.24 5de7bcaadf160c1716b20a263cf8f5b06f658959 in mainline linux CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2026/04/22 19:16:55 Modified files: sys/dev/pci/drm/include/linux: uaccess.h Log message: rename __copy_from_user_inatomic_nocache() to copy_from_user_inatomic_nontemporal() to follow changes in linux 6.18.24 CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2026/04/22 19:28:03 Modified files: sys/net : art.h art.c Log message: remove unused art_walk() ok dlg@ CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2026/04/22 19:33:01 Modified files: sys/net : pf_ioctl.c Log message: remove unused pf_statelim_clr() ok dlg@ CVSROOT: /cvs Module name: ports Changes by: phessler@cvs.openbsd.org 2026/04/23 01:51:18 Modified files: cad/openscad : Makefile Log message: add missing build dep. it wouldn't build without the build dep being available, so no need for a REVISION bump. noticed by myself and naddy on arm64 and amd64 bulk package builds. OK sthen@ CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2026/04/23 05:29:23 Modified files: usr.bin/tmux : screen-redraw.c Log message: Redraw correctly when a popup is present above pane borders, GitHub issue 4997 from Manuel Einfalt. CVSROOT: /cvs Module name: ports Changes by: jca@cvs.openbsd.org 2026/04/23 05:46:03 Added files: devel/orc/patches: patch-orc_riscv_orcriscvtarget_c Log message: Fix orc riscv64-specific code paths orc previously failed to build because of inconsistent #ifdefs that exposed Linux-only calls. While here hook up call to (__builtin)__clear_cache and correct default assumptions (the 'V' extension can't be assumed, on any OS). Prompted by a report from matthieu@, maintainer timeout, ok sthen@ CVSROOT: /cvs Module name: ports Changes by: robert@cvs.openbsd.org 2026/04/23 06:00:58 Modified files: devel/clang-tools-extra: Makefile devel/py-llvmlite: Makefile lang/zig : Makefile www/chromium : Makefile www/iridium : Makefile www/ungoogled-chromium: Makefile Log message: bump REVISION after the fixes in the llvm ports ok sthen@ CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2026/04/23 06:36:15 Modified files: usr.bin/tmux : file.c server-client.c tmux.h Log message: Kill client rather than fatalx on bad file handling messages, reported by Tim Zheng. CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/04/23 06:57:47 Modified files: regress/usr.bin/ssh/unittests: Makefile.inc Log message: Drop -Winline from CDIAGFLAGS it breaks on sparc64 On sparc64 ssh/unittests/kex fails to build with: usr.bin/ssh/libcrux_mlkem768_sha3.h:8196: warning: inlining failed in call to 'libcrux_ml_kem_polynomial_ZERO_89_ea': --param max-inline-insns-single limit reached OK djm@ (long time ago) reminded by tb@ CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/04/23 08:15:53 Modified files: usr.sbin/rpki-client: parser.c Log message: Move repo_tree_free() up to where the other repo functions live. OK tb@ CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2026/04/23 13:51:37 Modified files: sys/arch/riscv64/dev: simplebus.c sys/arch/riscv64/include: bus.h sys/arch/riscv64/riscv64: autoconf.c bus_dma.c Log message: Implement bounce buffers for riscv64. ok jca@ CVSROOT: /cvs Module name: ports Changes by: kmos@cvs.openbsd.org 2026/04/23 14:00:09 Modified files: audio/ncmpc : Makefile Log message: span.h is provided by GCC 15. Drop BROKEN-sparc64 ok naddy CVSROOT: /cvs Module name: ports Changes by: kmos@cvs.openbsd.org 2026/04/23 14:00:49 Modified files: math/libqalculate: Makefile Log message: Now that ports-gcc is gcc 15, this is no longer BROKEN on sparc64 Remove BROKEN-sparc64 ok naddy CVSROOT: /cvs Module name: ports Changes by: kirill@cvs.openbsd.org 2026/04/23 15:11:39 Modified files: net/ejabberd : Makefile Log message: net/ejabberd: prevent linking agains wayland/libei instead erlang's libei.a CVSROOT: /cvs Module name: ports Changes by: naddy@cvs.openbsd.org 2026/04/23 15:44:49 Modified files: lang/gawk : Makefile Log message: lang/gawk: do not pick up gettext-tools in configure configure picks up xgettext and it is then used during the build, but to no effect. Reported by jca@ CVSROOT: /cvs Module name: www Changes by: tj@cvs.openbsd.org 2026/04/23 17:21:41 Modified files: build/mirrors : openbgpd-ftp.html.head libressl : mail.html openbgpd : ftp.html openiked : manual.html openntpd : features.html opensmtpd : report.html Log message: fix broken/outdated links CVSROOT: /cvs Module name: www Changes by: tj@cvs.openbsd.org 2026/04/23 17:22:40 Modified files: libressl : papers.html openbgpd : users.html openntpd/txt : release-6.1p1.txt release-6.8p1.txt opensmtpd : list.html opensmtpd/announces: libasr-1.0.0.txt libasr-1.0.1.txt libasr-1.0.2.txt Log message: fix some typos CVSROOT: /cvs Module name: ports Changes by: matthieu@cvs.openbsd.org 2026/04/23 23:59:22 Modified files: sysutils/ttyplot: Makefile sysutils/ttyplot/patches: patch-ttyplot_c Log message: Fix ttypplot by moving pledge() call after open(/dev/tty). Add 'use pledge()' marker to Makefile while there. ok tb@, fcambus@, naddy@ CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2026/04/24 04:08:52 Modified files: usr.bin/tmux : window.c Log message: No need to stravis the window name twice. CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2026/04/24 07:25:44 Modified files: sys/net : pipex_local.h trunklacp.c Log message: use __kprintf__ not __printf__ for format attributes avoids format warnings with clang 21 and later ok robert@ CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/04/24 09:10:20 Modified files: lib/libcrypto/pkcs7: pk7_doit.c Log message: Simplify PKCS7_get_issuer_and_serial() The i variable is unused. Likewise for the first assignment to ri. Instead of an incomplete check that idx is in range, which still results in a NULL deref if idx < 0, check if ri is not NULL before accessing, as sk_value() checks the index correctly. ok jsing kenjiro CVSROOT: /cvs Module name: ports Changes by: jca@cvs.openbsd.org 2026/04/24 10:01:38 Modified files: net/openvpn : Makefile distinfo Log message: SECURITY update to openvpn-2.7.2 fix race condition in TLS handshake that could lead to leaking of packet data from a previous handshake under specific circumstances (CVE-2026-40215) fix server ASSERT() on receiving a suitably malformed packet with a valid tls-crypt-v2 key (CVE-2026-35058) Other changes: https://github.com/OpenVPN/openvpn/blob/v2.7.2/Changes.rst ok naddy@ CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/04/24 11:31:12 Modified files: security/nss : Makefile distinfo Log message: security/nss: bugfix update to 3.123.1 fixes #2033783: invalid DTLS CertificateVerify signature breaks Firefox WebRTC to pion and webrtc-rs servers see https://hg-edge.mozilla.org/projects/nss/raw-file/tip/doc/rst/releases/nss_3_123_1.rst ok naddy@ CVSROOT: /cvs Module name: ports Changes by: phessler@cvs.openbsd.org 2026/04/24 11:42:24 Modified files: graphics/ImageMagick: Makefile Log message: remove BROKEN marker to try building on arm(v7). the platform has changed a lot since 2019 OK sthen@ naddy@ CVSROOT: /cvs Module name: www Changes by: kmos@cvs.openbsd.org 2026/04/24 16:33:40 Modified files: . : plus.html Log message: Added changes for November and December 2025 Done with pamela@ CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2026/04/24 23:47:03 Modified files: lib/libcrypto/sha: sha256.c Log message: Add FIPS 180-4 references for SHA-256 constants. CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/04/25 04:30:11 Modified files: lib/libcrypto/pkcs7: pk7_doit.c Log message: pkcs7: Simplify PKCS7_type_is_other() Remove unnecessary isOther and nid variables and use direct returns. The function should probably be removed... ok jsing kenjiro CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/04/25 04:48:59 Modified files: lib/libcrypto/pkcs7: pk7_doit.c Log message: pkcs7: avoid assignment to i in PKCS7_dataInit() We can switch over the return value of OBJ_obj2nid() rather than using i for an indirection. ok jsing kenjiro CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/04/25 04:50:50 Modified files: lib/libcrypto/pkcs7: pk7_doit.c Log message: pkcs7: don't use i and j for NIDs in PKCS7_dataDecode() There's no need to assign to i before the switch and j is a terrible name for a NID. Inline the latter and switch directly over the return value of OBJ_obj2nid(). ok jsing kenjiro CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/04/25 04:53:13 Modified files: lib/libcrypto/pkcs7: pk7_doit.c Log message: pkcs7: don't use i, j for NIDs in PKCS7_dataFinal() Use nid for NIDs and use i only for for loops. ok jsing kenjiro CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/04/25 04:54:30 Modified files: lib/libcrypto/pkcs7: pk7_doit.c Log message: pkcs7: drop silly use of i in PKCS7_dataVerify() ok jsing kenjiro CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2026/04/25 05:41:41 Modified files: sys/dev/fdt : dwpcie.c Log message: If the PCIe link is down, provide access to config space for bus 0, but return 0xffffffff (and ignore writes) for other busses. This gets rid of the "can't initialize hardware" messages that confuse some users and better matches what happens on other platforms with PCIe when a slot is empty. ok jca@ CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/04/25 06:14:38 Modified files: sys/arch/sparc64/sparc64: trap.c Log message: Do not clear the dirty upper and lower bits when enabling the FPU in fprs When handling a FPU disabled trap and the FPU context is still pointing to curproc then all that needs to be done is enable the FPU but on sparc64 this needs to be done in two places. In pstate and %fprs. Writing FPRS_FEF into %fprs clears the DU and DL bits which marks the FPU state as clean (but it may not be). If the proc only reads the FPU state and later a lazy FPU switch is forced the FPU context is not correctly saved. Instead read %fprs and or FPRS_FEF into it, keeping the DU and DL bits intact. See also rev 1.68 for why %fprs needs to be fumbled with. This fixes various issues seen during ports bulk builds. Like perl tripping over "use 5.12.0;" with a -NaN is not a version error, various awk issues and even cmake failures via 'std::bad_array_new_length'. OK kettenis@ CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2026/04/25 08:36:12 Modified files: regress/lib/libssl/dtls: Makefile Added files: regress/lib/libssl/dtls: dtls_wire_test.c Log message: Add DTLS wire tests. Add tests that ensure the wire bytes for DTLS are what we expect for both CCS and fragmented handshake messages. CVSROOT: /cvs Module name: src Changes by: millert@cvs.openbsd.org 2026/04/25 11:47:46 Modified files: usr.bin/vi/common: delete.c Log message: Fix a misapplied patch in rev 1.12, the goto belongs outside the len check. CVSROOT: /cvs Module name: src Changes by: millert@cvs.openbsd.org 2026/04/25 11:51:11 Modified files: usr.bin/vi/vi : v_sentence.c Log message: Prevent '(' from moving the cursor forward. Fixes an issue where '(' moved forward the start of the next (not previous) sentence when used within whitespace at the start if a line. From Debian bug 193498 (Tommy Pettersson) via nvi2. CVSROOT: /cvs Module name: src Changes by: millert@cvs.openbsd.org 2026/04/25 11:58:56 Modified files: usr.bin/vi/vi : v_sentence.c Log message: Fix special case of ')' when the cursor is on white-space. The forward sentence code has a special case to support moving to the start of the next sentence when it is in the middle of a empty line or whitespace between sentences. However, the logic was incorrect and applied when the curson was on _any_ white-space. This change adds logic to look back and detect whether the cursor is actually in between two sentences. Based on a diff from Walter Alejandro. CVSROOT: /cvs Module name: src Changes by: millert@cvs.openbsd.org 2026/04/25 13:30:59 Modified files: usr.bin/vi/vi : v_paragraph.c v_sentence.c Log message: Allow '!}' and '!)' at EOF, even though there is no forward movement. The updated behavior differs from traditional vi but matches vim. It is already possible to run bang commands at EOF in conjunction with some other forward movement commands such as 'l' and 'w'. From Walter Alejandro Iglesias CVSROOT: /cvs Module name: www Changes by: naddy@cvs.openbsd.org 2026/04/25 14:07:56 Modified files: . : 79.html Log message: 13044 amd64 packages CVSROOT: /cvs Module name: www Changes by: tj@cvs.openbsd.org 2026/04/25 15:04:11 Modified files: faq : upgrade78.html Log message: zap invalid

tag CVSROOT: /cvs Module name: www Changes by: tj@cvs.openbsd.org 2026/04/25 15:05:16 Modified files: faq/ports : differences.html specialtopics.html Log message: fix some typos CVSROOT: /cvs Module name: www Changes by: tj@cvs.openbsd.org 2026/04/25 15:21:15 Modified files: faq : faq17.html Log message: android's vpn client supports ikev2 now, so remove some outdated info. discussed with landry CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/04/25 22:19:11 Modified files: lib/libcrypto/pkcs7: pk7_doit.c Log message: Fix PKCS7_set_{un,}signed_attributes() In both these functions, if the X509_ATTRIBUTE_dup() fails, the remainder of the sk stack is shared with p7si->{un,}auth_attr and the caller will likely end up freeing it twice. Fix this by writing another sk_deep_copy() patterned after the existing ones in x509_lu.c and x509_vpm.c. PKCS7_set_{un,}signed_attributes() become trivial wrappers of that. ok jsing kenjiro CVSROOT: /cvs Module name: www Changes by: matthieu@cvs.openbsd.org 2026/04/26 00:22:19 Modified files: . : 79.html Log message: Update versions of base+xenocara CVSROOT: /cvs Module name: www Changes by: matthieu@cvs.openbsd.org 2026/04/26 00:24:32 Modified files: . : 79.html Log message: 7.7 -> 7.8 where needed. CVSROOT: /cvs Module name: www Changes by: matthieu@cvs.openbsd.org 2026/04/26 01:00:54 Modified files: . : 79.html Log message: ports versions CVSROOT: /cvs Module name: www Changes by: tb@cvs.openbsd.org 2026/04/26 01:07:31 Modified files: . : 79.html Log message: zlib 1.3.2 CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2026/04/26 03:27:15 Modified files: sys/dev/ic : com.c Log message: Attempt to drain the transmit FIFO before resetting or disabling it such that output that is currently in the FIFO makes it out. We already do this when attaching as a console by using a fixed delay, but not in compwroff() which runs when userland closes the associated tty. Instead of using a fixed delay, look at the LSR_TSRE bit which should get set if the FIFO (or the itransmit shift register if the FIFO is disabled) is empty. Use a fixed timeout such that on hardware with a non-functional LSR_TSRE bit the loops still terminate. This should fix issues where we lose serial output when userland closes a tty or when com(4) attaches to the port that is used as the console. ok deraadt@ CVSROOT: /cvs Module name: www Changes by: tb@cvs.openbsd.org 2026/04/26 03:42:46 Modified files: . : 79.html Log message: go 1.26.2 CVSROOT: /cvs Module name: www Changes by: sthen@cvs.openbsd.org 2026/04/26 07:09:56 Modified files: . : 79.html Log message: 10631 i386 packages CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/04/26 11:58:58 Modified files: lib/libcrypto/x509: x509_addr.c Log message: make_addressRange: unused bits in max must be zero X509v3_addr_add_range() requires that min and max of an address range have network encoding. In the RFC 3779 encoding of an actual address range (as opposed to a prefix) as a SEQUENCE OF two ASN.1 BIT STRINGs, the trailing one bits of the maximum become unused bits and therefore must be DER encoded as zeroes. The DER encoder will clear them via i2d but these trailing ones are annoying. Make a copy in which the unused bits are cleared. ok kenjiro CVSROOT: /cvs Module name: www Changes by: kirill@cvs.openbsd.org 2026/04/26 12:27:12 Modified files: . : 79.html Log message: 79.html: jdk8 was removed CVSROOT: /cvs Module name: src Changes by: mglocker@cvs.openbsd.org 2026/04/26 13:25:08 Modified files: sys/dev/pci : if_qwz_pci.c sys/dev/ic : qwz.c qwzreg.h qwzvar.h Log message: Bring the qwz driver up to WPA2 association on the Qualcomm WCN7850 chip. Major changes: 1. Fix the RX path. 2. Fix the TX path. 3. Fix MSI interrupt routing. 4. Make the WPA2 4-way handshake complete. 5. Add bus_dmamap_sync() barriers on RX and TX. 6. Update register/descriptor defines from ath11k to ath12k WiFi7. Known limitations: - DHCP does not yet complete on most setups: TX of DISCOVER works (the DHCP server sees it), but the OFFER does not reach the host. Likely an RX-path or post-handshake GTK state issue. Reported by kettenis@ with an athn(4) AP on a Vivobook. - Some hardware (e.g. Honor laptop) hits a firmware page fault during association. RDDM dump shows a fault in dlpager_main.c inside the firmware; likely a memory addressing issue specific to that silicon stepping or IOMMU configuration. Reported by kirill@. - On APs with PMF (Protected Management Frames) enabled, the association flaps continuously; on APs without PMF (Apple hotspot, athn(4)) the connection reaches a stable "active" state and survives subsequent firmware crashes via the recovery path. - Firmware occasionally crashes after sustained traffic on some APs (FritzBox in particular can drive the device into an unrecoverable "tx credits timeout" state); the driver normally recovers via the existing RDDM path in if_qwz_pci.c without a system reboot. - One PN-replay loop in qwz_dp_peer_rx_pn_replay_config doesn't iterate the non-QoS TID slot. Cosmetic for normal use; will land as a separate small commit. This is a foundation commit: enough to associate and exchange some frames, but not yet a usable network connection. Further work is required. OK kettenis@, kirill@ CVSROOT: /cvs Module name: src Changes by: dtucker@cvs.openbsd.org 2026/04/26 23:49:41 Modified files: regress/usr.bin/ssh: keyscan.sh Log message: Use supported hostkeyalgorithms specifically in sshd_config instead of supported key types, which is almost but not completely correct. CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2026/04/27 06:31:11 Modified files: usr.bin/tmux : cmd-parse.y Log message: Add a limit on maximum length of environment variable assignment in configuration files. CVSROOT: /cvs Module name: src Changes by: hshoexer@cvs.openbsd.org 2026/04/27 07:06:14 Modified files: usr.sbin/vmd : config.c Log message: vmd(8): Avoid reuse of dead filedescriptor When the vmd process sends a kernfd to the vmm process, that descriptor will be closed in msgbuf_write() after a successful sendmsg(). However, that descriptor number is still stored in vm->vm_kernel. When termination of one VM is interleaved with lauch of another VM, that number might be reassigned to a _new_ kernfd of the launching VM. Now we have a race: - the vmd process queues an imsg with that descriptor in config_setvm() (for the launching VM) - the vmd process calls in vm_stop() close() on that descriptor (for the terminating VM) - when the vmd process calls proc_dispatch() imsgbuf_send() for imsg queued in config_setvm(), sendmsg() will return EBADF (the descriptor in the control message is invalid) By dupping kernfd we can avoid this race. ok dv@ CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/04/27 09:06:01 Modified files: usr.sbin/bgpd : bgpd.h rde.c rde.h rde_filter.c session.c session.h Log message: Change to enum filter_action and enum direction since the plural form does not work well with these enums. OK denis@ tb@ CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/04/27 09:24:43 Modified files: usr.sbin/bgpd : rde.c Log message: Shuffle the softreconfig functions into an order that makes more sense. OK tb@ CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/04/27 09:52:20 Modified files: usr.sbin/bgpd : rde.c Log message: Rename out_rules to simply rules. In the near future this list will be used for both 'from' and 'to' filter rules. OK tb@ CVSROOT: /cvs Module name: src Changes by: kirill@cvs.openbsd.org 2026/04/27 10:39:50 Modified files: sys/arch/octeon/dev: cn30xxgmx.c cn30xxgmxvar.h if_cnmac.c iobusvar.h octeon_iobus.c octpip.c Log message: sys/cnmac: read MAC address from device tree Read local-mac-address from the matching ethernet port node in device tree; fall back to the old board address allocation when it is absent. As suggested by visa@, this changes HW address assignment on the EdgeRouter Pro, and probably on the ER-8, by swapping ports as follows: cnmac0 <-> cnmac4 cnmac1 <-> cnmac5 cnmac2 <-> cnmac6 cnmac3 <-> cnmac7 Affected devices uses the same MAC addresses as the original firmware. OK: visa@ CVSROOT: /cvs Module name: src Changes by: kirill@cvs.openbsd.org 2026/04/27 10:54:49 Modified files: sys/arch/octeon/dev: cn30xxpip.c cn30xxpipvar.h if_cnmac.c if_cnmacvar.h Log message: sys/cnmac: add RX queues Add RX queues to cnmac, backed by shared POW groups. Use PIP tags for RX group selection and pass the tag up as M_FLOWID. OK: visa@ CVSROOT: /cvs Module name: www Changes by: thfr@cvs.openbsd.org 2026/04/27 14:18:03 Modified files: . : 79.html Log message: mention Vulkan 1.4.341.0 CVSROOT: /cvs Module name: src Changes by: job@cvs.openbsd.org 2026/04/27 16:23:27 Modified files: usr.sbin/rpki-client: parser.c Log message: adjust style OK tb@ CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2026/04/27 19:14:07 Modified files: sys/dev/pci/drm: drm_linux.c Log message: Make xarray cyclic start looking for a free id at the position specified by the next argument and stop after wrapping back to that position. Previously looking for a free id started at the beginning of the allocation range and stopped at the end, ignoring the next argument. Currently xarray cyclic id allocations are only used by the GuC code in inteldrm. In 6.18.25 drm, the amdgpu PASID allocation changes from using cyclic idr to cyclic xarray. CVSROOT: /cvs Module name: www Changes by: jsg@cvs.openbsd.org 2026/04/27 21:02:50 Modified files: . : 79.html Log message: suporting -> supporting CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2026/04/27 21:25:46 Modified files: sys/dev/pci/drm/include/linux: xarray.h Log message: add DEFINE_XARRAY_FLAGS() for 6.18.25 drm CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2026/04/27 21:33:56 Modified files: sys/dev/pci/drm/include/linux: xarray.h Log message: use DEFINE_XARRAY_FLAGS() for DEFINE_XARRAY_ALLOC() CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2026/04/27 21:44:14 Modified files: sys/dev/pci/drm: drm_linux.c Log message: Change xarray pool from IPL_NONE to IPL_TTY as amdgpu will soon use it from interrupt context. Matches the IPL of the IDR pool. CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2026/04/28 02:32:44 Modified files: usr.bin/tmux : cmd-join-pane.c Log message: Fix -p for for join-pane, from Dane Jensen. CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2026/04/28 02:34:15 Modified files: usr.bin/tmux : cmd-run-shell.c Log message: Do not hang run-shell when job_run fails, from Barrett Ruth in GitHub issue 5037. CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2026/04/28 02:35:21 Modified files: usr.bin/tmux : window-copy.c Log message: Do not deref NULL job in window_copy_pipe_run when job_run fails. From Barrett Ruth in GitHub issue 5036. CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2026/04/28 02:47:55 Modified files: usr.bin/tmux : cmd-pipe-pane.c Log message: Do not leak socketpair fds in pipe-pane when fork fails. From Barrett Ruth. CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2026/04/28 02:52:37 Modified files: usr.bin/tmux : paste.c Log message: Sanitize paste buffer names in paste_set and paste_rename, GitHub issue 5032 from Barrett Ruth. CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2026/04/28 03:23:22 Modified files: sys/dev/pci/drm/amd/amdgpu: amdgpu_ids.c Log message: drm/amdgpu: replace PASID IDR with XArray From Mikhail Gavrilov b7cddf6c017510cd0c79980ea551e7bcdf0edc7e in linux-6.18.y/6.18.25 3c863ff920b45fa7a9b7d4cb932f466488a87a58 in mainline linux CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2026/04/28 04:01:07 Modified files: usr.bin/tmux : key-bindings.c menu.c mode-tree.c status.c Log message: Make C-[ have the same bindings as Escape for terminals with extended keys where they are different, GitHub issue 5035 from Eric NICOLAS. CVSROOT: /cvs Module name: src Changes by: millert@cvs.openbsd.org 2026/04/28 07:25:04 Modified files: usr.sbin/rdate : Makefile ntp.c rdate.8 rdate.c Removed files: usr.sbin/rdate : ntpleaps.c ntpleaps.h Log message: rdate: remove -c option, we don't install the "right" zone files This option was non-functional since OpenBSD does not ship with the /usr/share/zoneinfo/right time zone files, which include leap seconds. OK dgl@ CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/04/28 08:06:44 Modified files: usr.sbin/bgpd : rde.c Log message: Fix possible reload bug that leave old filters on a peer. In rde_reload_done() the code handling the peer->reconf_rib case has a continue which skips the code path that actually reapplies the outbound filters. The result is that such a peer keeps on running with the old filters -- a subsequent reload will then fix this. Removing the continue changes the way peer->reconf_rib and peer->reconf_out interact. Now reconf_rib needs to be checked before reconf_out since it is possible for both to be set. Adjust the code in rde_softreconfig_in_done() accordingly. OK tb@ CVSROOT: /cvs Module name: src Changes by: millert@cvs.openbsd.org 2026/04/28 09:36:52 Modified files: lib/libc/gen : cgetent.3 Log message: Escape is octal 33, not 27 (which is escape in decimal) From Eric Mulholland CVSROOT: /cvs Module name: www Changes by: sthen@cvs.openbsd.org 2026/04/28 10:23:08 Modified files: . : 79.html Log message: 12883 aarch64 packages CVSROOT: /cvs Module name: src Changes by: millert@cvs.openbsd.org 2026/04/28 15:31:48 Modified files: share/zoneinfo/datfiles: northamerica southamerica zone.tab zone1970.tab zonenow.tab Log message: Update to 2026bgtz from https://github.com/JodaOrg/global-tz CVSROOT: /cvs Module name: src Changes by: djm@cvs.openbsd.org 2026/04/28 15:32:05 Modified files: usr.bin/ssh : ssh-agent.c Log message: unveil the actual listening socket path and its directory so it can be cleaned up at exit. Reported by / tested by David Krause, ok markus@ CVSROOT: /cvs Module name: www Changes by: kmos@cvs.openbsd.org 2026/04/29 00:49:05 Modified files: . : plus.html Log message: Changes for January 2026 Done with pamela@ CVSROOT: /cvs Module name: src Changes by: renaud@cvs.openbsd.org 2026/04/29 02:18:55 Modified files: sbin/pfctl : parse.y Log message: The dual-pool form of the af-to action, af-to af FROM redirpool pool_opts TO redirpool pool_opts was writing the TO side options in the FROM side. OK sashan@ CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/04/29 05:14:11 Modified files: usr.sbin/rpki-client: parser.c Log message: rpki-client: properly ignore missing unsupported files in -n mode RFC 9286 section 6.5 mandates that we fetch all the files in a manifest fileList and validate their hashes. By design, RRDP will ship all the available files whereas in rsync we decided to fetch only the files of types we explicitly support. While we check the hashes of unsupported files, they won't be copied into the cache of validated files. Since unsupported files are not in the validated cache and may or may not be present in the temporary directory of fetched objects, there is logic that ensures that the hashes of all available files are correct and attempts to avoid an error for files absent from both directories. Whether all the above decisions in both, standards and our code, are fully sound is not entirely clear. Be that as it may, Job observed that this logic was incorrect in noop mode where no temporary directory is available. This resulted in rejecting the one manifest that still lists a Ghostbuster's record (RFC 6493) and as a consequence marking the corresponding CA incorrectly non-functional. This is a clear bug and this is fixed in this commit by adding a special case for noop mode. Further refinements may follow. ok claudio job CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2026/04/29 08:55:21 Modified files: lib/libssl : d1_both.c Log message: Convert DTLS code to ssl_msg_callback(). ok kenjiro@ tb@ CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2026/04/29 08:57:29 Modified files: lib/libssl : d1_both.c Log message: Inline dtls1_fix_message_header(). This is only used in one place and it makes no sense to have it as a separate function. Furthermore, pull up an assertion so that we check before assigning frag_len. ok kenjiro@ tb@ CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2026/04/29 08:59:26 Modified files: lib/libssl : d1_both.c dtls_local.h Log message: Make dtls1_retransmit_message() static. This function is only called from dtls1_retransmit_buffered_messages(). Make it static and move it above the caller. ok kenjiro@ tb@ CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2026/04/29 09:00:53 Modified files: lib/libssl : d1_both.c Log message: Remove unused frag_off argument from dtls1_retransmit_message(). ok kenjiro@ tb@ CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2026/04/29 09:04:15 Modified files: lib/libssl : d1_both.c Log message: Avoid unnecessary lookups in dtls1_retransmit_message(). dtls1_retransmit_buffered_messages() is iterating over the sent_messages pqueue, only to pass dtls1_retransmit_message() a sequence number that it turns back into a priority, to then do a lookup on the sent_messages pqueue. This is pointless given that we already have the message that we need to retransmit - just pass that to dtls1_retransmit_message() directly. ok kenjiro@ tb@ CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2026/04/29 09:13:27 Modified files: lib/libssl : d1_both.c Log message: Split dtls1_do_write() into handshake message and CCS handling. dtls1_do_write() is currently a single function that handles both handshake messages and CCS. This is a strange mix that only serves to complicate the code - handshake messages have their own headers and may need to be fragmented, while CCS must be sent verbatim (and only contain a single byte). Pull the CCS part out into a separate function, simplifying the code. By definition, when sending a CCS message the MTU will already be set appropriately. ok kenjiro@ tb@ CVSROOT: /cvs Module name: src Changes by: bluhm@cvs.openbsd.org 2026/04/29 12:07:41 Modified files: lib/libexpat : Changes lib/libexpat/lib: internal.h xmlparse.c Log message: Backport fixes from libexpat version 2.8.0. Relevant for OpenBSD are security fixes #47 #1183. Library bump is not necessary. CVE-2026-41080 OK tb@ CVSROOT: /cvs Module name: src Changes by: djm@cvs.openbsd.org 2026/04/29 16:22:10 Modified files: usr.bin/ssh : scp.c Log message: fiddle with mask after umask call and not before; avoids fortify warnings on android. bz3954 CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2026/04/29 22:33:06 Modified files: sys/dev/pci/drm/i915: i915_driver.c Log message: disable GuC submission for Raptor Lake-S volker@ reports it fails to init on a desktop machine with a i9-14900K CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/04/30 05:06:29 Modified files: usr.sbin/bgpctl: Makefile Added files: usr.sbin/bgpctl: log.c Log message: bgpctl: add log.c for bgpctl This provides log_{warn{,x},info,debug}() and fatal{,x}() implementations that wrap the err.h API. They are API compatile with bgpd's log.h and will help undo some contortions where we had to put log calls into weird spots because of code sharing between bgpd and bgpctl. ok claudio CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/04/30 07:52:59 Modified files: usr.sbin/bgpd : log.c log.h Log message: Unexport vlog() from log.c nothing uses it outside of log.c. OK henning@ CVSROOT: /cvs Module name: www Changes by: naddy@cvs.openbsd.org 2026/04/30 08:12:02 Modified files: . : 79.html Log message: 10079 sparc64 packages 9507 powerpc64 packages CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/04/30 08:44:10 Modified files: mail/exim : Tag: OPENBSD_7_8 Makefile distinfo mail/exim/patches: Tag: OPENBSD_7_8 patch-Local_Makefile mail/exim/pkg : Tag: OPENBSD_7_8 MESSAGE-main Added files: mail/exim/patches: Tag: OPENBSD_7_8 patch-src_tlscert-openssl_c Log message: update to exim-4.99.2 in 7.8-stable (at this point in the release cycle -stable ports updates are mostly not possible as they'll interfere with updates to 7.9, however this has been removed in -current so that doesn't apply here). this brings recent cve fixes, plus other older ones from 4.99.1 that didn't get into -stable yet. also update MESSAGE to warn about removal in 7.9. ok phessler renaud CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/04/30 09:20:15 Modified files: usr.sbin/bgpd : rde_filter.c Log message: In rde_filter_free() release the referenc to the rde_filterset by calling rde_filterset_unref() for every rule. OK tb@ CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2026/04/30 09:38:52 Modified files: lib/libssl : d1_both.c Log message: Refactor dtls1_do_write_handshake_message(). If the call to dtls1_write_bytes() fails, handle the potential MTU update and return/continue, which allows for the remainder to be moved out of an else statement. ok kenjiro@ tb@ CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/04/30 09:48:13 Modified files: usr.sbin/bgpd : logmsg.c Log message: Convert logit() to either log_warnx() or log_info() depending on the log level. OK sthen@ tb@ CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/04/30 09:51:07 Modified files: usr.sbin/bgpd : rde.h rde_attr.c Log message: Add a bit of const to attr_writebuf(), aspath_get() and aspath_deflate(). OK tb@ CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/04/30 12:22:59 Modified files: usr.sbin/bgpd : rtr_proto.c Log message: In the rtr_reader_callback() make sure that the PDU length is not only smaller than RTR_MAX_PDU_SIZE but also larger than sizeof(struct rtr_header). Passing a too small value will trigger a fatal error later on which is not great. Also switch the type of len to size_t, there is no need for a signed value here. OK tb@ CVSROOT: /cvs Module name: src Changes by: anton@cvs.openbsd.org 2026/04/30 22:54:56 Modified files: regress/usr.sbin/bgpd/unittests: rde_community_test.c Log message: Cope with recent const corrections. CVSROOT: /cvs Module name: www Changes by: kmos@cvs.openbsd.org 2026/05/01 00:05:47 Modified files: . : plus.html Log message: Changes for February 2026 Done with pamela@ CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/01 01:53:05 Removed files: mail/exim/patches: Tag: OPENBSD_7_8 patch-src_dane-openssl_c patch-src_lookups_spf_c patch-src_osfunctions_h patch-src_spf_h patch-src_tls-openssl_c Log message: missed cvs rm CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2026/05/01 03:34:05 Modified files: usr.bin/tmux : format.c Log message: Check time inside repeat (R:) loop as well. CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2026/05/01 03:44:42 Modified files: usr.bin/tmux : cmd-copy-mode.c options-table.c screen.c tmux.1 tmux.h window-copy.c Log message: Add support for line numbers in copy mode. A new copy-mode-line-numbers option has the following modes: off, default (tmux's normal line numbering where 0 is the top visible line), absolute (first line in history is 1), relative (relative to the cursor) and hybrid (current line is absolute, others relative). Also adds copy-mode-line-number-style and copy-mode-current-line-number-style to set the style of the line numbers. When copy mode is entered with the mouse, line numbers stay off. From Leo Henon in GitHub issue 5025. CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2026/05/01 03:59:42 Modified files: usr.bin/tmux : control.c Log message: Do not leak cached last result from control subs, from Aaron Campbell in GitHub issue 5047. CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/05/01 05:22:24 Modified files: usr.sbin/rpki-client: Makefile extern.h Added files: usr.sbin/rpki-client: asn1_bit_string.c Log message: rpki-client: add compat for BIT STRING accessors ASN.1 bit strings are DER encoded by zero-padding the bit string at the end to a length divisible by eight. The number of padding bits ("unused bits"), a number between 0 and 7, is stored in the first value octet, the remainder of the value octets are formed by the zero-padded bit string. Since asn1_string_st is opaque in OpenSSL 4, there need to be accessors for length and unused bits, which is what is added here. The getter assumes the ASN1_STRING_FLAG_BITS_LEFT flag is set on a bit string, which is always the case for deserialized bit strings. I prefer not to elaborate on the madness hiding here at this point in time... LibreSSL will likely add these accessors to libcrypto in the ongoing cycle, but we will need this compat code for OpenSSL and older LibreSSL anyway. The code is not yet used in rpki-client. The conversions will be committed soon. ok claudio job CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/05/01 05:23:57 Modified files: regress/usr.sbin/rpki-client: Makefile.inc regress/usr.sbin/rpki-client/openssl: Makefile regress/usr.sbin/rpki-client/openssl/build: Makefile Log message: rpki-client: add asn1_bit_string.c to TEST_COMMON. Prepare its use. CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2026/05/01 05:25:21 Modified files: lib/libc/gen : opendir.3 Log message: correct history, dirfd() did not appear until tahoe CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2026/05/01 05:56:41 Modified files: usr.bin/tmux : mode-tree.c Log message: Add some checks on line size to avoid underflow, from san65384 at gmail dot com in GitHub issue 4955. CVSROOT: /cvs Module name: src Changes by: miod@cvs.openbsd.org 2026/05/01 14:03:58 Modified files: sys/arch/hppa/dev: sti_sgc.c sys/dev/ic : sti.c stireg.h stivar.h sys/dev/pci : sti_pci.c Log message: More work to handle devices which don't have a copy of the STI ROM available through one of the regular BARs, and have a shared decoder for BAR and ROM. Such devices can't have their BAR accessed when the ROM is mapped. In this case, we make a memory copy of the ROM contents and point the STI routines to it, without leaving the ROM mapped. This ought to be able to make the FireGL-UX work, but unfortunately it still hangs the PCI bus when accessing the frame buffer memory at low addresses. A good side effect of these changes, though, is that we no longer keep a bus_space mapping on the PCI ROM after initial ROM grovelling. On systems where the PDC firmware maps all PCI ROM at the same address (since only one may be active at any time), this lets multiple STI PCI devices attach and operate correctly, rather than only one attaching and the others complaining being unable to map the ROM, with errno being EAGAIN. CVSROOT: /cvs Module name: www Changes by: benno@cvs.openbsd.org 2026/05/01 16:58:08 Modified files: . : 79.html Log message: add changes CVSROOT: /cvs Module name: www Changes by: benno@cvs.openbsd.org 2026/05/01 17:41:00 Modified files: . : 79.html Log message: more updates CVSROOT: /cvs Module name: www Changes by: jsg@cvs.openbsd.org 2026/05/01 19:00:40 Modified files: . : 79.html Log message: spelling CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2026/05/01 21:05:31 Modified files: lib/libc/gen : getdiskbyname.3 Log message: correct history, getdiskbyname() appeared in 4.2BSD CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2026/05/01 21:20:45 Modified files: lib/libc/gen : getfsent.3 Log message: correct history; endfsent(), getfsfile(), getfsspec(), and setfsent() appeared in 4BSD CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/05/02 03:25:48 Modified files: usr.sbin/rpki-client: cert.c Log message: rpki-client: rename INR extension handlers These are the only two extension handlers having an sbgp_ prefix. Rename them to cert_ipaddrblocks() and cert_asids() for consistency. ok job (part of a larger diff) CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/05/02 04:28:20 Modified files: usr.sbin/rpki-client: cert.c Log message: rpki-client: remove variable indentation in sbgp_* functions requested by job CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/05/02 04:35:18 Modified files: usr.sbin/rpki-client: cert.c ip.c Log message: rpki-client: move RFC 3779 IP address parsing from cert.c to ip.c ok job CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/05/02 04:36:21 Modified files: usr.sbin/rpki-client: as.c cert.c Log message: rpki-client: move RFC 3779 AS number parsing from cert.c to as.c ok job CVSROOT: /cvs Module name: src Changes by: florian@cvs.openbsd.org 2026/05/02 07:08:36 Modified files: usr.sbin/acme-client: json.c netproc.c Log message: Prevent memory leaks from json_getstr. json_getstr returns the result of strdup (or NULL) to the caller so the caller has to free the memory. While here, setting order->finalize to NULL once is enough. From Jan Schreiber (jes AT posteo.de), with input from tb. OK tb (some time ago) CVSROOT: /cvs Module name: www Changes by: visa@cvs.openbsd.org 2026/05/02 07:52:27 Modified files: . : 79.html Log message: 9309 mips64 packages CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2026/05/02 08:09:17 Modified files: sys/arch/riscv64/include: cpu.h elf.h sys/arch/riscv64/riscv64: autoconf.c cpu.c Log message: Improve CPU identification and hwcap for riscv64. On riscv64 we currently only expose a fixed hwcap value (G + C) and do not actually report any of what the CPUs provide via extensions. This means that userland cannot detect and make use of additional instructions that exist. Rework cpu_identify() so that we build hwcap/hwcap2, then use this to select the correct functions/support to use if we're on the primary CPU (rather than doing this for every CPU). Check that the secondary CPUs have the same features as the primary CPU (although this is coming from the DTB and not the actual hardware). Finally report available extensions via hwcap/hwcap2 so that we can make use of these instructions in userland. ok kettenis@ jca@ CVSROOT: /cvs Module name: ports Changes by: phessler@cvs.openbsd.org 2026/05/02 08:24:16 Modified files: lang/gcc/15/patches: patch-libgcc_config_arm_unwind-arm_h Log message: gcc-15 failed to build on arm(v7) because it didn't know what a bool was in an MD specific file. Add the header, so gcc-15 builds again. Does not affect any other architecture. OK pascal@ OK for -release naddy@ sthen@ CVSROOT: /cvs Module name: www Changes by: benno@cvs.openbsd.org 2026/05/02 12:19:54 Modified files: . : 79.html Log message: more changes CVSROOT: /cvs Module name: www Changes by: benno@cvs.openbsd.org 2026/05/02 13:52:02 Modified files: . : 79.html Log message: up to March CVSROOT: /cvs Module name: www Changes by: benno@cvs.openbsd.org 2026/05/02 14:00:22 Modified files: . : 79.html Log message: add signify keys for this release CVSROOT: /cvs Module name: www Changes by: benno@cvs.openbsd.org 2026/05/02 14:41:22 Modified files: . : 79.html Log message: up to March 4th CVSROOT: /cvs Module name: www Changes by: benno@cvs.openbsd.org 2026/05/02 15:00:10 Modified files: . : 79.html Log message: some cleanup CVSROOT: /cvs Module name: www Changes by: jsg@cvs.openbsd.org 2026/05/02 17:07:41 Modified files: . : 79.html Log message: spelling CVSROOT: /cvs Module name: www Changes by: dtucker@cvs.openbsd.org 2026/05/02 17:28:02 Modified files: . : 79.html Log message: Initial pass at OpenSSH 10.3 changes. Could still use a bit of polish. CVSROOT: /cvs Module name: www Changes by: jsg@cvs.openbsd.org 2026/05/02 17:34:49 Modified files: . : 79.html Log message: correct man links CVSROOT: /cvs Module name: www Changes by: jsg@cvs.openbsd.org 2026/05/02 17:50:55 Modified files: . : 79.html Log message: correct html comment declarations CVSROOT: /cvs Module name: www Changes by: jsg@cvs.openbsd.org 2026/05/02 18:20:39 Modified files: . : 79.html Log message: mention drm version CVSROOT: /cvs Module name: www Changes by: benno@cvs.openbsd.org 2026/05/03 03:50:36 Modified files: . : 79.html Log message: a few more pieces CVSROOT: /cvs Module name: www Changes by: stsp@cvs.openbsd.org 2026/05/03 04:12:53 Modified files: . : 79.html Log message: tweak wireless sections; ok benno@ CVSROOT: /cvs Module name: www Changes by: jsg@cvs.openbsd.org 2026/05/03 05:28:04 Modified files: . : 79.html Log message: prioritze -> prioritize CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/03 06:48:57 Modified files: www/mozilla-firefox: Tag: OPENBSD_7_8 Makefile Added files: www/mozilla-firefox/patches: Tag: OPENBSD_7_8 patch-third_party_rust_neqo-crypto__cargo-checksum_json patch-third_party_rust_neqo-crypto_min_version_txt Log message: www/mozilla-firefox: unbreak runtime by adding forgotten patches bourasz at proton noticed that at runtime neqo-crypto complained about the nss version - i forgot to cvs add the patches reverting the runtime requirement, but in my testing everything was fine with the version we had in 7.8. note: since 150.0p0 in 7.8-stable will be ahead of 150.0 that'll ship with 7.9-release, after updating to 7.9 if the 7.8 binaries dont work, one might need to reinstall firefox via pkg_add -r firefox. or wait for 7.9-stable packages to ship 150.0.1 or 150.0.2... sorry, shit happens when i get to juggle with too many chainsaws. CVSROOT: /cvs Module name: src Changes by: stsp@cvs.openbsd.org 2026/05/03 07:10:46 Modified files: sys/arch/amd64/stand/boot: conf.c sys/arch/amd64/stand/efiboot: conf.c diskprobe.c sys/arch/amd64/stand/libsa: diskprobe.c sys/arch/i386/stand/boot: conf.c sys/arch/i386/stand/libsa: diskprobe.c Log message: Avoid setting boothowto flags based on information read through a NULL pointer + an offset into the diskinfo structure. Fixes boot from RAID 1C softraid volumes where the kernel could be tricked into believing it is booting to unhibernate the machine, skipping devices such as network interfaces, which would then be missing in the running system once booted. Debugged together with jtt@ when several of our gothub.org servers lost their network interfaces after reinstallation with RAID 1C. ok kettenis@ CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2026/05/03 08:55:43 Modified files: usr.bin/tmux : format.c Log message: Free working stuff when R formats fail. CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2026/05/03 08:57:09 Modified files: usr.bin/tmux : window.c Log message: Do not check for NULL after dereferencing, from alexarama at yahoo dot com in GitHub issue 5051. CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2026/05/03 09:01:21 Modified files: usr.bin/tmux : control.c Log message: Fix control client hang on exit after toggling no-output, GitHub issue 5049 from Aaron Campbell. CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2026/05/03 09:02:48 Modified files: usr.bin/tmux : options-table.c tmux.1 window-tree.c Log message: Allow the indicator in tree mode to be customized by two new options: tree-mode-preview-format and tree-mode-preview-style. CVSROOT: /cvs Module name: src Changes by: florian@cvs.openbsd.org 2026/05/03 09:49:09 Modified files: sbin/dhcp6leased: engine.c Log message: Prevent unsigned underflow leading to a crash. An IA_PD option contains one or more nested dhcp options. We first need to make sure that the length field of the option header does not point outside of the encapsulating option, which we did. When we then parse the nested options we need to make sure that nested option header length field is large enough for the nested option, not that the encapsulating option length is large enough for the encapsulated option. Otherwise opt_hdr.len - 2 can underflow, which strvisx(3) interprets as a size_t, i.e. a very large number, leading to a crash once we hit a guard. Underflow pointed out by an AI tool (sorry, don't know which one) in a somewhat convoluted way. It also provided an reproducer for the issue which was more helpful. AI reports triaged by millert. While here fix the same bug in the DHO_IA_PREFIX case and prevent a memory leak. OK tb CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/05/03 12:06:15 Modified files: regress/lib/libcrypto/certs: README Log message: cert regress: update README for tests 14a and 14b. CVSROOT: /cvs Module name: www Changes by: benno@cvs.openbsd.org 2026/05/03 13:24:34 Modified files: . : 79.html Log message: more changes from MArch CVSROOT: /cvs Module name: www Changes by: matthieu@cvs.openbsd.org 2026/05/03 13:29:18 Modified files: . : 79.html Log message: Mention XDG_RUNTIME_DIR addition. CVSROOT: /cvs Module name: www Changes by: krw@cvs.openbsd.org 2026/05/03 14:46:42 Modified files: . : 79.html Log message: Emphasize 7.9 is preparing for, not implementing, support of up to 52 partitions. CVSROOT: /cvs Module name: www Changes by: benno@cvs.openbsd.org 2026/05/03 16:23:01 Modified files: . : 79.html Log message: some more entries CVSROOT: /cvs Module name: src Changes by: daniel@cvs.openbsd.org 2026/05/03 17:06:15 Modified files: usr.bin/awk : awk.1 Log message: awk(1): the flush function was added to POSIX.1-2024 Remove this function from the list of POSIX extensions. ok millert@ CVSROOT: /cvs Module name: www Changes by: jsg@cvs.openbsd.org 2026/05/03 17:42:44 Modified files: . : 79.html Log message: Inreased -> Increased CVSROOT: /cvs Module name: www Changes by: dtucker@cvs.openbsd.org 2026/05/03 22:47:11 Modified files: openssh : specs.html Log message: Add draft-josefsson-sshsig-format to supported specs; ok djm@ CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2026/05/04 01:33:22 Modified files: sys/dev/fdt : rkpmic.c Log message: The RK806 can be connected over I2C as well. ok dlg@, patrick@ CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2026/05/04 01:35:53 Modified files: sys/dev/fdt : rkcomphy.c Log message: Add RK3576 support. ok jmatthew@, dlg@ CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2026/05/04 02:00:27 Modified files: sys/dev/fdt : rkclock.c rkclock_clocks.h Log message: Add support for OTP related and temparature sensor related clocks and resets for the RK3576. ok patrick@, dlg@ CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2026/05/04 02:02:05 Modified files: sys/dev/fdt : files.fdt Added files: sys/dev/fdt : rkotp.c Log message: Add rkotp(4), a driver for reading the OTP fuses on Rockchip SoCs. ok patrick@, dlg@ CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2026/05/04 02:02:42 Modified files: sys/arch/arm64/conf: GENERIC Log message: Enable rkotp(4). CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2026/05/04 02:04:21 Modified files: sys/dev/fdt : rktemp.c Log message: Add RK3576 support. ok patrick@, dlg@ CVSROOT: /cvs Module name: src Changes by: dtucker@cvs.openbsd.org 2026/05/04 04:57:24 Modified files: regress/usr.bin/ssh: kbdint.sh Log message: Fix skip message. CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2026/05/04 06:52:57 Modified files: sys/dev/fdt : rkvop.c Log message: Also support DRM_FORMAT_XRGB8888; this gets rid of some warnings. ok jsg@ CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/05/04 07:49:07 Modified files: regress/lib/libcrypto/x509: callback.c verify.c Log message: verify regress: allow setting verify depth and callback This is pretty ugly and probably the the vct should be handed down to the verify_cert*() functions, but this works and doesn't make these tests any uglier than they already are. The callback regress was modified with a least effort approach. CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/05/04 07:52:39 Modified files: regress/lib/libcrypto/x509: callback.c verify.c Log message: libcrypto: extend verify and callback regress Add three more test variants for scenario 2a: 1) verify that a chain of length 3 validates with depth 2. 2) verify that a chain of length 3 fails to validate with depth 1. 3) verify that a chain of length 3 validates with depth 1 if we allow the callback to override the depth. Variant 3) fails in -current and reproduces a scenario reported by kirill. Also add two test variants for the scenarios in 14: 4): run the chain of length 32 with a yolo callback returning 1 5): run the chain of length 33 with a yolo callback returning 1 Test 5) fails because we currently bail out at the wrong depth. The verify callback should allow overriding the failure and will then hit the bounds check added in x509_verify.c r1.74 to avoid an overwrite. Reuse the existing test cases 2a and 14a/14b for this and add an optional vct->desc that uniquely identifies the test case. incorporates various feedback from jsing CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/05/04 07:55:20 Modified files: lib/libcrypto/x509: x509_verify.c Log message: verifier: re-enable the callback override for depth kirill reported that his nginx reverse proxy setup stopped working with x509_verify.c r1.74 and r1.75. It turns out that nginx relies on a verify callback that always returns 1. In revision 1.74 we removed the possibility of the verify_cb() to override X509_V_ERR_CERT_CHAIN_TOO_LONG, which is what breaks the config in kirill's setup since it used to use the nginx default of setting the depth to 1. Re-enable this to make the new scenario "2a with depth 1 and depth callback" pass. As shown by the other new test scenario "14b with yolo calback" with a "just say yes" cb, the guard added in r1.74 still prevents the overwrite. This makes kirill's reproducer work as verified by kirill and myself. It was also tested by kirill in the real life setup. discussed with beck ok jsing kenjiro CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/05/04 08:00:34 Modified files: regress/lib/libcrypto/certs: README Log message: certs/README: fix previous: 14b should fail to verify CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2026/05/04 10:08:57 Modified files: sys/dev/pci/drm: drm_bridge.c sys/dev/pci/drm/include/drm: drm_bridge.h Log message: Unstub select_bus_fmt_recursive(). This fixes output on the HDMI port on my firefly-rk3399. ok jsg@ CVSROOT: /cvs Module name: www Changes by: volker@cvs.openbsd.org 2026/05/04 11:03:57 Modified files: . : 79.html Log message: Mention Wayland 1.24.0 and compositors CVSROOT: /cvs Module name: src Changes by: millert@cvs.openbsd.org 2026/05/04 11:05:59 Modified files: sys/nfs : nfs_serv.c Log message: Add checks for invalid dir count and max size for readdir/readdirplus. A zero count or max size value is now rejected early instead of relying on VOP_GETATTR to return an error. Also verify that the max size after rounding up to a multiple of DIRBLKSIZ is positive. A negative value would turn into a large allocation, causing the malloc() to fail. From an LLM bug report. With help from miod@ and kirill@. CVSROOT: /cvs Module name: src Changes by: job@cvs.openbsd.org 2026/05/04 11:34:57 Modified files: usr.sbin/rpki-client: print.c Log message: When printing a CCR's ManifestState, sort the entries by AKI Sorting this particular listing by AKI (instead of by hash of the Manifest object) makes diffs between CCRs much more readable. With & OK tb@ CVSROOT: /cvs Module name: src Changes by: job@cvs.openbsd.org 2026/05/04 11:39:35 Modified files: usr.sbin/rpki-client: ccr.c Log message: Explicitly check mostRecentUpdate on otherwise empty ManifestState OK tb@ CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/05/04 13:11:01 Modified files: regress/lib/libcrypto/wycheproof: wycheproof.go Log message: wycheproof: go fmt CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/05/04 13:15:45 Modified files: regress/lib/libcrypto/wycheproof: wycheproof.go Log message: wycheproof.go: simplfiy for loop CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2026/05/04 13:44:29 Modified files: share/man/man4 : Makefile Added files: share/man/man4 : rkotp.4 Log message: rkotp(4) CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2026/05/04 14:18:42 Modified files: sys/arch/arm64/arm64: locore.S Log message: When running in VHE host mode, HCR_EL2.TGE must be set, as otherwise a bunch of problems occur: - EL0 is guest EL0, not host, and the kernel will catch fire on the first ERET to EL0 - EL1 TLB invalidations target the guest, and not the host Make sure that HCR_EL2.TGE is set, instead of relying on firmware to have set it (when booting with UEFI, only the first CPU is correctly configured). From Marc Zyngier CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2026/05/04 14:21:02 Modified files: sys/arch/arm64/arm64: locore.S Log message: Handle HCR_EL2.E2H RES1 behaviour An implementation is allowed to make HCR_EL2.E2H RES1, which means that the CPU behaves as if this bit was 1, even if it reads as 0 or can be written with 0. While the architecture advertises this via ID_AA64MMFR4_EL1.E2H0, hypervisors cannot always expose this to a guest if the hardware doesn't implemtn FEAT_FGT. Instead, detect the effects of HCR_EL2.E2H being RES1 by checking for the aliasing property between accessors targetting the same register (FAR_ELx in this case). This gives a reliable litmus test for CPUs that are stuck in VHE mode. From Marc Zyngier CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2026/05/04 14:43:42 Modified files: sys/arch/arm64/dev: agtimer.c sys/arch/arm64/include: armreg.h Log message: Pick the correct interrupt for the virtual timer if we're running in EL2. Based on a diff from Marc Zyngier. ok jsg@ CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/05/04 14:44:36 Modified files: lib/libcrypto/mlkem: mlkem_internal.c Log message: mlkem: also zero the failure_key from logan https://github.com/libressl/openbsd/pull/154 CVSROOT: /cvs Module name: src Changes by: kenjiro@cvs.openbsd.org 2026/05/04 21:32:46 Modified files: usr.bin/openssl: speed.c Log message: openssl: centralize speed benchmark timer handling The speed benchmark currently arms alarm() from print_message() and pkey_print_message(), making the output helpers also control benchmark lifetime. This hidden coupling makes the code harder to maintain and led to missing alarm cleanup on Windows, as reported in #1245. Move alarm setup and run-state initialization into speed-specific timer helpers so benchmark timing is controlled explicitly at the start and stop points. ok tb joshua CVSROOT: /cvs Module name: src Changes by: djm@cvs.openbsd.org 2026/05/04 23:34:27 Modified files: usr.bin/ssh : channels.h Log message: classify dynamic-tcpip channels as bulk, not interactive; bz3958, ok markus@ CVSROOT: /cvs Module name: src Changes by: djm@cvs.openbsd.org 2026/05/05 00:21:14 Modified files: usr.bin/ssh : channels.h Log message: unbreak; spotted by Darren's test army CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/05/05 02:26:50 Modified files: usr.sbin/bgpd : rde_rib.c Log message: Re-evaluate prefixes if just PREFIX_FLAG_FILTERED changed With the introduction of 'rde rib Loc-RIB include filtered' it is possible that prefixes change from filtered to unfiltered state during a filter reload. In that case prefix_update() takes a shortcut path since no other attributes change and that path is missing a call to prefix_evaluate(). Add the missing prefix_evaluate() call in this codepath so that prefixes are correctly redistributed in that case. OK tb@ CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/05/05 02:37:45 Modified files: usr.sbin/bgpd : rde_attr.c Log message: Prevent overflow of the uint8_t length value in attr_optadd. bin_of_attrs() jumps from 240 to 256 elements but the length of the others attributes array is limited to a uint8_t type and overflows. Switch type of the local length value to int and make sure that the maximum length of UCHAR_MAX is not exceeded. OK tb@ CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/05/05 03:12:04 Modified files: usr.sbin/bgpd : util.c bgpd.h Log message: Limit all from of ASPATH attributes to 750 elements Having super long ASPATH attributes can lead to various issues including attribute length overflows. Especially the transformation of 2-byte ASPATH attributes to 4-byte ones can trigger overflows. Because of this limit the number and therefor the maximum size of an ASPATH. Our default config has a limit of 100 elements on paths. That limit is already much larger then what is seen in the DFZ (max ~20). The limit of 750 is again much larger and is really just a safeguard. OK tb@ CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/05/05 03:12:41 Modified files: usr.sbin/bgpd : version.h Log message: Bump version to 9.2 CVSROOT: /cvs Module name: src Changes by: deraadt@cvs.openbsd.org 2026/05/05 03:23:06 Modified files: sbin/iked : ikev2.c Log message: check address size; from markus via millert CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/05/05 03:29:16 Modified files: usr.sbin/rpki-client: ccr.c Log message: rpki-client: convert ccr.c to ASN1_BIT_STRING_set1() This becomes slightly simpler and more correct with this change. In particular, this now makes sure that the unused bits are set to 0 as required by the DER. ok claudio job CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/05/05 03:33:15 Modified files: usr.sbin/rpki-client: ip.c mft.c Log message: rpki-client: convert ip.c and mft.c to ASN1_BIT_STRING_get_length() This isn't the greatest of APIs, but we're going to be stuck with it since better APIs depend on libcrypto not doing the implicit truncation nonsense, which only OpenSSL 4 and BoringSSL dropped by now. Some of the error checks become now unreachable. This will be cleaned up another time. ok claudio job CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2026/05/05 04:23:06 Modified files: sys/dev/pci/drm/include/linux: xarray.h Log message: add parentheses around use of a macro argument CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2026/05/05 04:23:27 Modified files: sys/dev/fdt : rkclock.c rkclock_clocks.h rkrng.c Log message: Add RK3576 support. ok dlg@ CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/05/05 05:40:02 Modified files: usr.sbin/ldpd : address.c Log message: Ensure that alt_len includes at least the size of alt.family member to ensure that the parser is not going off the rails. OK renato@ CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/05/05 05:42:56 Modified files: usr.sbin/ldpd : labelmapping.c Log message: Unlike all other TLV encodings in ldp the sub-tlv includes the header size in its length. Therefore check that the size is at least that of the header. OK renato@ CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/05/05 05:44:27 Modified files: usr.sbin/ldpd : notification.c Log message: Fix minimal length check for notification status messages. Found while reviewing all the length checks in ldpd. OK renato@ CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/05/05 05:46:18 Modified files: usr.sbin/eigrpd: packet.c Log message: In eigrp the TLV encoding includes the header length in the length encoding. So check that the minimal length is at least that of the TLV header. OK renato@ CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2026/05/05 06:02:12 Modified files: usr.bin/tmux : control.c Log message: Discard queued data and clear offsets when turning pane off to prevent later read of data that has been removed. From Aaron Campbell in GitHub issue 5054. CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2026/05/05 06:06:52 Modified files: usr.bin/tmux : screen.c Log message: Add missing flags to screen_mode_to_string and do not write before before if any are missed, second bit from qingliu at alauda dot io. CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2026/05/05 06:28:59 Modified files: sys/kern : kern_time.c Log message: Use the correct struct itemerval when recording the old value for ktrace. This fixes a potential information leak from an uninitializes stack variable. Found by Frank Denis using the Swival Security Scanner. ok deraadt@ CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/05/05 06:56:12 Modified files: regress/lib/libcrypto/wycheproof: Makefile Log message: wycheproof: add regress target to ensure proper go formatting CVSROOT: /cvs Module name: src Changes by: deraadt@cvs.openbsd.org 2026/05/05 07:00:00 Modified files: sys/kern : kern_pledge.c Log message: Frank Denis using the Swival Security Scanner concludes that kill(0,sig) should not be allowed because of a source code comment. Actually, kill of the default pgid 0 MUST be allowed or large amounts of userland software won't work. What pledge prevents is playing with other process groups (ie. -pid where pid is not 0) which require permission from the "proc" pledge. Killing the default pgrp 0 is a common way for privsep (and other) software to tear itself down it's process trees, for cases where a pipe read of 0 doesn't work. The current behaviour is intentional, and the proposed diff was not considered nor tested for consequences. Change the comment very subtly to see which AI/human collaboration fails next. CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2026/05/05 07:01:42 Modified files: usr.bin/rdistd : server.c Log message: correct bounds test found with smatch, ok tb@ deraadt@ CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2026/05/05 07:18:46 Modified files: usr.bin/tmux : screen.c tmux.h Log message: Do not sanitize title when popping it from stack, also add a limit to number of pushed titles. CVSROOT: /cvs Module name: src Changes by: deraadt@cvs.openbsd.org 2026/05/05 08:01:56 Modified files: sys/kern : vfs_syscalls.c Log message: When I added UF_PLEDGEOPEN in the sys_fchflags() chunk I mistakenly used the wrong vnode operation. spotted by Frank Denis using the Swival Security Scanner ok claudio CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2026/05/05 18:07:46 Modified files: usr.bin/pkgconf/libpkgconf: config.h Log message: define HAVE_DECL_REALLOCARRAY to use libc reallocarray() ok millert@ tb@ CVSROOT: /cvs Module name: src Changes by: millert@cvs.openbsd.org 2026/05/05 20:54:35 Modified files: lib/libc/stdio : open_wmemstream.c Log message: Size is the number of wide characters, not the number of bytes. The correct amount of memory was allocated but the stored size did not match the allocation due to being multiplied by sizeof(wchar_t). Spotted by Frank Denis using the Swival Security Scanner OK deraadt@ CVSROOT: /cvs Module name: www Changes by: kmos@cvs.openbsd.org 2026/05/05 21:41:28 Modified files: . : plus.html Log message: Changes for March 2026 and the first few days of April Kill some trailing whitespace Done with pamela@ CVSROOT: /cvs Module name: www Changes by: tb@cvs.openbsd.org 2026/05/05 23:36:31 Modified files: . : 79.html Log message: ruby 3.3.11, not 3.3.1; from robert klein CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2026/05/06 02:07:05 Modified files: libexec/ld.so/sparc64: rtld_machine.c Log message: Add missing bounds check for the relocation flags table. Found by Frank Denis using the Swival Security Scanner. ok guenther@, jsg@ CVSROOT: /cvs Module name: src Changes by: schwarze@cvs.openbsd.org 2026/05/06 02:26:16 Modified files: usr.bin/mandoc : main.c Log message: Fix a regression in rev. 1.269 reported by anton@. Due to unveil(2), mansearch() can no longer change back to the initial working directory. But check_xr() calls mansearch(), so the main program needs to change back if -T lint or -W style is requested, such that these work even when multiple relative file names are given on the command line. CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2026/05/06 03:05:48 Modified files: libexec/ld.so : library.c library_mquery.c Log message: Add checks to make sure that the ELF header and program header fit into the data we read from the on-disk shared library. These checks should only fail for malformed shared libraries, but failing to load a shared library is better than crashing the program because of an out-of-bounds access. Issue found by Frank Denis using the Swival Security Scanner. ok guenther@ CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2026/05/06 05:36:13 Modified files: sys/netinet : ip_output.c Log message: fix build with ENCDEBUG defined, broken by rev 1.409 from Jan Schreiber CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/05/06 06:07:19 Modified files: usr.bin/rsync : sender.c Log message: callloc -> calloc from Jan Schreiber CVSROOT: /cvs Module name: ports Changes by: robert@cvs.openbsd.org 2026/05/06 06:47:03 Modified files: devel/llvm/22 : Makefile distinfo devel/llvm/22/patches: patch-clang_tools_clang-shlib_CMakeLists_txt patch-lld_ELF_RelocScan_h patch-lld_ELF_Relocations_cpp patch-llvm_lib_Target_AArch64_AArch64AsmPrinter_cpp patch-llvm_lib_Transforms_Scalar_LoopIdiomRecognize_cpp patch-llvm_tools_llvm-shlib_CMakeLists_txt Added files: devel/llvm/22/patches: patch-libcxx_include_deque patch-lld_ELF_Relocations_h Log message: update to 22.1.5; sync patches while here CVSROOT: /cvs Module name: ports Changes by: robert@cvs.openbsd.org 2026/05/06 06:47:26 Modified files: devel/llvm : Makefile.inc Log message: add a helper target to create tarballs for merging in base CVSROOT: /cvs Module name: ports Changes by: robert@cvs.openbsd.org 2026/05/06 06:48:05 Modified files: editors/libreoffice: Makefile distinfo editors/libreoffice/patches: patch-configure Removed files: editors/libreoffice/patches: patch-sdext_source_pdfimport_xpdfwrapper_pdfioutdev_gpl_cxx patch-sdext_source_pdfimport_xpdfwrapper_pdfioutdev_gpl_hxx Log message: update to 26.2.3.2 CVSROOT: /cvs Module name: ports Changes by: robert@cvs.openbsd.org 2026/05/06 06:48:55 Modified files: www/chromium : Makefile distinfo www/chromium/patches: patch-chrome_browser_background_glic_glic_status_icon_cc patch-chrome_browser_renderer_context_menu_render_view_context_menu_cc patch-components_user_education_views_help_bubble_view_cc patch-components_user_education_views_help_bubble_view_h patch-content_common_features_cc patch-content_common_features_h patch-gpu_command_buffer_service_shared_image_shared_image_factory_cc patch-gpu_command_buffer_service_shared_image_shared_image_manager_cc patch-gpu_ipc_service_gpu_init_cc patch-v8_src_execution_isolate_cc Log message: update to 147.0.7727.137 CVSROOT: /cvs Module name: ports Changes by: robert@cvs.openbsd.org 2026/05/06 06:49:45 Modified files: www/ungoogled-chromium: Makefile distinfo www/ungoogled-chromium/patches: patch-chrome_browser_background_glic_glic_status_icon_cc patch-chrome_browser_renderer_context_menu_render_view_context_menu_cc patch-components_user_education_views_help_bubble_view_cc patch-components_user_education_views_help_bubble_view_h patch-content_common_features_cc patch-content_common_features_h patch-gpu_command_buffer_service_shared_image_shared_image_factory_cc patch-gpu_command_buffer_service_shared_image_shared_image_manager_cc patch-gpu_ipc_service_gpu_init_cc patch-v8_src_execution_isolate_cc Log message: update to 147.0.7727.137 CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/06 06:53:07 Modified files: www/nginx : Makefile distinfo www/nginx/patches: patch-conf_nginx_conf patch-man_nginx_8 Log message: www/nginx: update to 1.30, ok robert@ (MAINTAINER) see https://nginx.org/en/CHANGES-1.30 notable changes: keepalive enabled by default in upstream definitions, and proxy_http_version now defaults to 1.1. CVSROOT: /cvs Module name: ports Changes by: tb@cvs.openbsd.org 2026/05/06 06:53:52 Modified files: www/seamonkey : Makefile Added files: www/seamonkey/patches: patch-third_party_rust_encoding_rs_src_x_user_defined_rs Log message: seamonkey: fix build with rust 1.95 ok landry (maintainer) CVSROOT: /cvs Module name: src Changes by: deraadt@cvs.openbsd.org 2026/05/06 06:54:27 Modified files: bin/chmod : chmod.c Log message: High Severity end-of-line whitespace found by GrepTechnologies AI ok guenther mlarkin CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/06 06:55:08 Modified files: geo/gdal : Makefile distinfo Removed files: geo/gdal/patches: patch-frmts_pdf_CMakeLists_txt patch-frmts_pdf_pdfobject_cpp Log message: geo/gdal: update to 3.12.4. add hidden dep on math/muparser while here, it is a recommended dependency for mathematical expressions in vrt files CVSROOT: /cvs Module name: ports Changes by: tb@cvs.openbsd.org 2026/05/06 06:55:32 Modified files: www/seamonkey : Makefile www/seamonkey/patches: patch-third_party_python_virtualenv_virtualenv_seed_wheels_embed___init___py Added files: www/seamonkey/patches: patch-python_mozbuild_mozbuild_frontend_reader_py Log message: seamonkey: fix build with python 3.14 clues from sthen, ok landry (maintainer) CVSROOT: /cvs Module name: ports Changes by: robert@cvs.openbsd.org 2026/05/06 06:55:50 Modified files: net/zabbix : Makefile distinfo Log message: update to 7.0.26 CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/06 06:57:56 Modified files: geo/mapcache : Makefile distinfo Log message: geo/mapcache: update to 1.16.0. see https://mapserver.org/development/changelog/mapcache/changelog-1-16.html#changelog-mapcache-1-16 CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/06 06:58:18 Modified files: sysutils/upower: Makefile distinfo sysutils/upower/pkg: PLIST Log message: sysutils/upower: update to 1.91.2 CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/06 07:00:50 Modified files: print/scribus : Makefile distinfo print/scribus/pkg: PLIST Removed files: print/scribus/patches: patch-scribus_plugins_import_pdf_importpdf_cpp patch-scribus_plugins_import_pdf_pdftextrecognition_cpp patch-scribus_plugins_import_pdf_slaoutput_cpp patch-scribus_plugins_import_pdf_slaoutput_h Log message: print/scribus: update to 1.7.3 see https://wiki.scribus.net/canvas/1.7.3_Release CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/06 07:01:20 Modified files: wayland/gtk-layer-shell: Makefile distinfo Log message: wayland/gtk-layer-shell: update to 0.10.1 CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/06 07:02:44 Modified files: wayland/labwc : Makefile distinfo Log message: wayland/labwc: update to 0.9.7. see https://github.com/labwc/labwc/releases/tag/0.9.5 https://github.com/labwc/labwc/releases/tag/0.9.6 and https://github.com/labwc/labwc/releases/tag/0.9.7 CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/06 07:03:19 Modified files: wayland/swaylock: Makefile distinfo Log message: wayland/swaylock: update to 1.8.5 CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/06 07:04:23 Modified files: wayland/swayimg: Makefile distinfo wayland/swayimg/patches: patch-meson_build wayland/swayimg/pkg: PLIST Log message: wayland/swayimg: update to 5.2. adds luajit dependency, config changed to lua see https://github.com/artemsen/swayimg/releases/tag/v5.0 https://github.com/artemsen/swayimg/releases/tag/v5.1 and https://github.com/artemsen/swayimg/releases/tag/v5.2 CVSROOT: /cvs Module name: ports Changes by: tb@cvs.openbsd.org 2026/05/06 07:05:07 Modified files: security/py-cryptography: Makefile crates.inc distinfo security/py-cryptography/pkg: PLIST Removed files: security/py-cryptography/patches: patch-pyproject_toml Log message: Update to py-cryptography 47.0.0 https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst#4700---2026-04-24 (I am aware that 48.0.0 was released two days ago) CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/06 07:05:39 Modified files: www/dillo : Makefile distinfo www/dillo/pkg : PLIST Log message: www/dillo: update to 3.3.0 see https://dillo-browser.org/release/3.3.0/ CVSROOT: /cvs Module name: ports Changes by: tb@cvs.openbsd.org 2026/05/06 07:05:41 Modified files: security/py-cryptography_vectors: Makefile distinfo security/py-cryptography_vectors/patches: patch-pyproject_toml security/py-cryptography_vectors/pkg: PLIST Log message: Update py-cryptography_vectors to 47.0.0 CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/06 07:06:37 Modified files: devel/highway : Makefile distinfo devel/highway/patches: patch-CMakeLists_txt devel/highway/pkg: PLIST Log message: devel/highway: update to 1.4.0. see https://github.com/google/highway/releases/tag/1.3.0 and https://github.com/google/highway/releases/tag/1.4.0 CVSROOT: /cvs Module name: ports Changes by: tb@cvs.openbsd.org 2026/05/06 07:07:46 Modified files: security/py-openssl: Makefile distinfo Log message: Update py-openssl to 26.1.0 https://github.com/pyca/pyopenssl/blob/main/CHANGELOG.rst#2610-2026-04-24 (like pyca/cryptography, 26.2.0 has been out for two days) CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/06 07:07:58 Modified files: databases/arrow/cpp: Makefile distinfo databases/arrow/cpp/patches: patch-cpp_src_arrow_util_thread_pool_test_cc databases/arrow/cpp/pkg: PLIST Removed files: databases/arrow/cpp/patches: patch-cpp_src_arrow_CMakeLists_txt Log message: databases/arrow/cpp: update to 24.0.0 CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/06 07:09:22 Modified files: games/dustrac : Makefile distinfo games/dustrac/pkg: PLIST Added files: games/dustrac/patches: patch-src_game_MiniCore_src_Core_mcworld_cc patch-src_game_MiniCore_src_Physics_mcimpulsegenerator_cc Removed files: games/dustrac/patches: patch-CMakeLists_txt patch-src_game_MiniCore_Graphics_MCGLEW Log message: games/dustrac: update to 2.2.0 (finally!) CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/06 07:10:30 Modified files: math/muparser : Makefile distinfo math/muparser/pkg: PLIST Log message: math/muparser: update to 2.3.5 CVSROOT: /cvs Module name: ports Changes by: tb@cvs.openbsd.org 2026/05/06 07:10:58 Modified files: textproc/check-jsonschema: Makefile distinfo Log message: Update check-jsonschema to 0.37.2 https://github.com/python-jsonschema/check-jsonschema/releases/tag/0.37.2 CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/06 07:13:02 Modified files: geo/qgis : Makefile distinfo geo/qgis/pkg : PLIST Log message: geo/qgis: update to 4.0.2 CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/06 07:16:09 Modified files: geo/py-fiona : Makefile Log message: geo/py-fiona: fixup deps, from Marco van Hulten with tweaks from sthen attrs and certifi were missing, munch and six arent needed anymore. CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/06 07:17:43 Modified files: graphics/blend2d: Makefile distinfo graphics/blend2d/pkg: PLIST Log message: graphics/blend2d: update to 0.21.2 CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/06 07:18:51 Modified files: print/pdf4qt : Makefile distinfo print/pdf4qt/patches: patch-CMakeLists_txt patch-Pdf4QtLaunchPad_launchdialog_cpp Log message: print/pdf4qt: update to 1.5.3.1 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 07:20:40 Modified files: databases/sqlcipher: Makefile distinfo databases/sqlcipher/patches: patch-autosetup_sqlite-config_tcl Log message: update to sqlcipher-4.15.0 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 07:20:44 Modified files: devel/py-build : Makefile distinfo Log message: update to py3-build-1.5.0 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 07:20:47 Modified files: devel/py-cachetools: Makefile distinfo devel/py-cachetools/pkg: PLIST Log message: update to py3-cachetools-7.1.0 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 07:20:52 Modified files: devel/py-certifi: Makefile distinfo Log message: update to py3-certifi-2026.4.22 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 07:20:56 Modified files: devel/py-comm : Makefile distinfo Log message: update to py3-comm-0.2.3 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 07:21:01 Modified files: devel/py-inline-snapshot: Makefile distinfo Log message: update to py3-inline-snapshot-0.32.7 CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/06 07:21:02 Modified files: geo/pygeoapi : Makefile distinfo geo/pygeoapi/pkg: PLIST Log message: geo/pygeoapi: update to 0.23.4. 0.23.3 fixes the following security issues: https://github.com/geopython/pygeoapi/security/advisories/GHSA-f6pr-83pg-ghh6 https://github.com/geopython/pygeoapi/security/advisories/GHSA-jgvc-94c8-3chc 0.23.0 adds support for OGC API pub/sub, so add py-paho-mqtt as an RDEP see https://github.com/geopython/pygeoapi/releases/tag/0.23.0 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 07:21:06 Modified files: devel/py-pathspec: Makefile distinfo Log message: update to py3-pathspec-1.1.1 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 07:21:10 Modified files: devel/py-poetry-core: Makefile distinfo devel/py-poetry-core/pkg: PLIST Log message: update to py3-poetry-core-2.4.0 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 07:21:13 Modified files: devel/py-trove-classifiers: Makefile distinfo Log message: update to py3-trove-classifiers-2026.4.28.13 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 07:21:16 Modified files: devel/py-tzdata: Makefile distinfo Log message: update to py3-tzdata-2026.2 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 07:21:19 Modified files: mail/mutt : Makefile distinfo Log message: update to mutt-2.3.2 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 07:21:22 Modified files: mail/neomutt : Makefile distinfo Log message: update to neomutt-20260504 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 07:21:25 Modified files: mail/pflogsumm : Makefile distinfo Log message: update to pflogsumm-1.2.0 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 07:21:34 Modified files: net/dhcpcd : Makefile distinfo Log message: update to dhcpcd-10.3.2 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 07:21:39 Modified files: net/nfdump : Makefile distinfo net/nfdump/patches: patch-src_libnfdump_Makefile_am patch-src_libnffile_Makefile_am net/nfdump/pkg : PLIST Removed files: net/nfdump/patches: patch-configure_ac Log message: update to nfdump-1.7.8 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 07:21:43 Modified files: net/py-idna : Makefile distinfo Log message: update to py3-idna-3.13 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 07:21:47 Modified files: net/radcli : Makefile distinfo net/radcli/patches: patch-lib_util_h net/radcli/pkg : PLIST Log message: update to radcli-1.5.1 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 07:21:51 Modified files: net/rsync : Makefile distinfo net/rsync/patches: patch-rsync_1 patch-rsyncd_conf_5 Log message: update to rsync-3.4.2 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 07:21:54 Modified files: security/py-google-auth: Makefile distinfo security/py-google-auth/pkg: PLIST Log message: update to py3-google-auth-2.50.0 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 07:21:58 Modified files: sysutils/py-packaging: Makefile distinfo sysutils/py-packaging/pkg: PLIST Log message: update to py3-packaging-26.2 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 07:22:02 Modified files: sysutils/py-xxhash: Makefile distinfo Log message: update to py3-xxhash-3.7.0 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 07:22:05 Modified files: www/libmicrohttpd: Makefile distinfo Removed files: www/libmicrohttpd/patches: patch-src_include_microhttpd_h Log message: update to libmicrohttpd-1.0.5 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 07:22:09 Modified files: www/llhttp : Makefile distinfo www/llhttp/pkg : PLIST Log message: update to llhttp-9.4.1 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 07:22:12 Modified files: www/nghttp2 : Makefile distinfo Log message: update to nghttp2-1.69.0 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 07:22:15 Modified files: www/py-werkzeug: Makefile distinfo Log message: update to py3-werkzeug-3.1.8 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 07:22:48 Modified files: devel/py-pip : Makefile distinfo devel/py-pip/pkg: PLIST Added files: devel/py-pip/patches: patch-src_pip__vendor_urllib3___init___py Log message: update to py3-pip-26.1.1 patch away obnoxious warning from bundled urllib 2.x CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 07:23:37 Modified files: news/tin : Makefile distinfo news/tin/patches: patch-src_Makefile_in patch-src_parsdate_y news/tin/pkg : PLIST Removed files: news/tin/patches: patch-configure_in Log message: update to tin-2.6.5 also enable libtls support as requested by Lennart Jablonka CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 07:24:49 Modified files: astro/kosmorro : Makefile distinfo Log message: update to kosmorro-1.0.2, plus dep fix CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 07:25:07 Modified files: www/tomcat/v11 : Makefile distinfo www/tomcat/v11/pkg: PLIST-examples Log message: update to tomcat-11.0.22 CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/06 07:26:09 Modified files: www/sogo : Makefile distinfo www/sope : Makefile distinfo Log message: www/sogo (& www/sope): security update to 5.12.7 see https://www.sogo.nu/news/2026/sogo-v5127-released.html, https://www.sogo.nu/news/2026/sogo-v5126-released.html and https://www.sogo.nu/news/2026/sogo-v5125-released.html reminder: sogo 5 is now in maintainance-only more CVSROOT: /cvs Module name: ports Changes by: bket@cvs.openbsd.org 2026/05/06 07:27:45 Modified files: devel/cargo : cargo.port.mk Log message: devel/cargo/cargo.port.mk: improve libsqlite3-sys system lib support Bring libsqlite3-sys in line with how we handle similar crates like libz-sys or zstd-sys. OK semarie@ CVSROOT: /cvs Module name: ports Changes by: bket@cvs.openbsd.org 2026/05/06 07:28:06 Modified files: www/vaultwarden-web: Makefile distinfo www/vaultwarden-web/pkg: PLIST Log message: Update to vaultwarden-web-2026.4.1 Changes: https://github.com/dani-garcia/bw_web_builds/releases/tag/v2026.3.1 https://github.com/dani-garcia/bw_web_builds/releases/tag/v2026.4.1 CVSROOT: /cvs Module name: ports Changes by: bket@cvs.openbsd.org 2026/05/06 07:28:28 Modified files: security/vaultwarden: Makefile crates.inc distinfo Added files: security/vaultwarden/patches: patch-modcargo-crates_webauthn-attestation-ca-0_5_5_build_rs patch-modcargo-crates_webauthn-rs-core-0_5_5_build_rs patch-modcargo-crates_webauthn-rs-core-0_5_5_src_crypto_rs patch-modcargo-crates_webauthn-rs-core-0_5_5_src_interface_rs patch-modcargo-crates_webauthn-rs-core-0_5_5_src_internals_rs Removed files: security/vaultwarden/patches: patch-modcargo-crates_webauthn-attestation-ca-0_5_4_build_rs patch-modcargo-crates_webauthn-rs-core-0_5_4_build_rs patch-modcargo-crates_webauthn-rs-core-0_5_4_src_crypto_rs patch-modcargo-crates_webauthn-rs-core-0_5_4_src_interface_rs patch-modcargo-crates_webauthn-rs-core-0_5_4_src_internals_rs Log message: Security update to vaultwarden-1.36.0 Contains security fixes for: - SSO Login CSRF - User/Organization Enumeration - SSO existing-user binding - SSRF via Icon Endpoint - Some crate's updated and other minor security enhancements Changes: https://github.com/dani-garcia/vaultwarden/releases/tag/1.35.8 https://github.com/dani-garcia/vaultwarden/releases/tag/1.36.0 Port now dynamically links against SQLite3. CVSROOT: /cvs Module name: ports Changes by: bket@cvs.openbsd.org 2026/05/06 07:28:49 Modified files: net/wstunnel : Makefile crates.inc distinfo net/wstunnel/patches: patch-Cargo_lock patch-wstunnel-cli_Cargo_toml Log message: Update to wstunnel-10.5.4 Changes: https://github.com/erebe/wstunnel/releases/tag/v10.5.2 https://github.com/erebe/wstunnel/releases/tag/v10.5.3 https://github.com/erebe/wstunnel/releases/tag/v10.5.4 From Christoph Liebender (MAINTAINER) CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/06 07:28:54 Modified files: geo/osrm-backend: Makefile distinfo geo/osrm-backend/patches: patch-src_extractor_edge_based_graph_factory_cpp patch-src_extractor_extractor_cpp patch-src_guidance_guidance_processing_cpp patch-src_partitioner_recursive_bisection_cpp geo/osrm-backend/pkg: PLIST Added files: geo/osrm-backend/patches: patch-src_tools_io-benchmark_cpp Removed files: geo/osrm-backend/patches: patch-include_server_connection_hpp patch-include_server_server_hpp patch-src_engine_plugins_tile_cpp patch-third_party_sol2_include_sol_sol_hpp Log message: geo/osrm-backend: update to 26.4.1. @comment the io-benchmark binary, codepaths are #ifdef linux builds with an upcoming boost update tb@ is working on CVSROOT: /cvs Module name: ports Changes by: bket@cvs.openbsd.org 2026/05/06 07:29:16 Modified files: sysutils/rustic: Makefile sysutils/rustic/patches: patch-modcargo-crates_canonical-path-2_0_2_src_lib_rs Log message: sysutils/bupstash: workaround missing current_exe() on OpenBSD Since env::current_exe() is a no-op on OpenBSD, implement a workaround that resolves the executable path via argv[0] and a PATH search. Bump REVISION. Prodded and tested by Laurence Tratt CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 07:29:30 Modified files: textproc/pymarkdownlnt: Makefile distinfo textproc/pymarkdownlnt/pkg: PLIST Log message: update to pymarkdownlnt-0.9.37 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 07:29:35 Modified files: textproc/py-mistune: Makefile distinfo Log message: update to py3-mistune-3.2.1 CVSROOT: /cvs Module name: ports Changes by: bket@cvs.openbsd.org 2026/05/06 07:29:35 Modified files: sysutils/bupstash: Makefile sysutils/bupstash/pkg: DESCR Log message: sysutils/bupstash: warn about upstream status in DESCR Add a warning to DESCR that the tool is unmaintained and may be removed in the future. Bump REVISION. Prodded by Laurence Tratt CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2026/05/06 07:30:26 Modified files: libexec/ld.so/arm: rtld_machine.c Log message: Add missing bounds check for the relocation flags table. ok kettenis@ CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/06 07:31:01 Modified files: x11/lxqt : Makefile.inc x11/lxqt/about : Makefile distinfo x11/lxqt/about/pkg: PLIST x11/lxqt/build-tools2: distinfo x11/lxqt/build-tools2/pkg: PLIST x11/lxqt/config: distinfo x11/lxqt/config/pkg: PLIST x11/lxqt/globalkeys: distinfo x11/lxqt/globalkeys/pkg: PLIST x11/lxqt/libdbusmenu: Makefile distinfo x11/lxqt/libfm-qt: Makefile distinfo x11/lxqt/libfm-qt/pkg: PLIST x11/lxqt/liblxqt: Makefile distinfo x11/lxqt/liblxqt/pkg: PLIST x11/lxqt/libqtxdg: Makefile distinfo x11/lxqt/libqtxdg/patches: patch-src_qtxdg_xdgdirs_cpp patch-src_xdgiconloader_xdgiconloader_cpp patch-test_tst_xdgdirs_cpp x11/lxqt/lximage-qt: distinfo x11/lxqt/lximage-qt/pkg: PLIST x11/lxqt/menu-data: distinfo x11/lxqt/menu-data/pkg: PLIST x11/lxqt/notificationd: distinfo x11/lxqt/notificationd/pkg: PLIST x11/lxqt/obconf-qt: Makefile distinfo x11/lxqt/obconf-qt/pkg: PLIST x11/lxqt/openssh-askpass: distinfo x11/lxqt/openssh-askpass/pkg: PLIST x11/lxqt/panel : Makefile distinfo x11/lxqt/panel/patches: patch-plugin-mainmenu_lxqtmainmenuconfiguration_cpp x11/lxqt/panel/pkg: PLIST x11/lxqt/pavucontrol-qt: distinfo x11/lxqt/pavucontrol-qt/pkg: PLIST x11/lxqt/pcmanfm-qt: distinfo x11/lxqt/pcmanfm-qt/patches: patch-pcmanfm_tabpage_cpp x11/lxqt/pcmanfm-qt/pkg: PLIST x11/lxqt/policykit: distinfo x11/lxqt/policykit/pkg: PLIST x11/lxqt/powermanagement: distinfo x11/lxqt/powermanagement/pkg: PLIST x11/lxqt/qterminal: distinfo x11/lxqt/qterminal/pkg: PLIST x11/lxqt/qtermwidget: distinfo x11/lxqt/qtermwidget/pkg: PLIST x11/lxqt/qtplugin: Makefile distinfo x11/lxqt/qtxdg-tools: Makefile distinfo x11/lxqt/runner: distinfo x11/lxqt/runner/patches: patch-CMakeLists_txt x11/lxqt/runner/pkg: PLIST x11/lxqt/screengrab: Makefile distinfo x11/lxqt/screengrab/pkg: PLIST x11/lxqt/session: distinfo x11/lxqt/session/patches: patch-lxqt-config-session_sessionconfigwindow_cpp patch-lxqt-session_src_wmselectdialog_cpp x11/lxqt/session/pkg: PLIST x11/lxqt/sudo : distinfo x11/lxqt/sudo/pkg: PLIST x11/lxqt/themes: distinfo x11/lxqt/themes/pkg: PLIST Removed files: x11/lxqt/config/patches: patch-lxqt-config-monitor_monitorsettingsdialog_cpp patch-lxqt-config-monitor_monitorwidget_cpp x11/lxqt/libfm-qt/patches: patch-CMakeLists_txt patch-src_CMakeLists_txt x11/lxqt/libqtxdg/patches: patch-CMakeLists_txt patch-src_qtxdg_CMakeLists_txt patch-src_xdgiconloader_CMakeLists_txt patch-src_xdgiconloader_plugin_CMakeLists_txt x11/lxqt/panel/patches: patch-CMakeLists_txt x11/lxqt/qtplugin/patches: patch-CMakeLists_txt patch-src_CMakeLists_txt x11/lxqt/screengrab/patches: patch-CMakeLists_txt Log message: x11/lxqt: update to 2.4.0. see https://lxqt-project.org/release/2026/04/20/release-lxqt-2-4-0/ CVSROOT: /cvs Module name: ports Changes by: bket@cvs.openbsd.org 2026/05/06 07:31:37 Modified files: news/py-sabctools: Makefile distinfo news/py-sabctools/patches: patch-setup_py Log message: Update to py-sabctools-9.4.0 Changes: https://github.com/sabnzbd/sabctools/compare/v8.2.6...v9.4.0 CVSROOT: /cvs Module name: ports Changes by: bket@cvs.openbsd.org 2026/05/06 07:31:49 Modified files: news/sabnzbd : Makefile distinfo news/sabnzbd/pkg: PLIST Log message: Update to sabnzbd-5.0.1 Changes: https://github.com/sabnzbd/sabnzbd/releases/tag/5.0.0 https://github.com/sabnzbd/sabnzbd/releases/tag/5.0.1 CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/06 07:31:52 Modified files: meta/lxqt : Makefile Log message: meta/lxqt: bump to 2.4.0 CVSROOT: /cvs Module name: ports Changes by: bket@cvs.openbsd.org 2026/05/06 07:32:39 Modified files: net/unison : Makefile distinfo Log message: Update to unison-2.54.0 Changes: https://github.com/bcpierce00/unison/releases/tag/v2.54.0 CVSROOT: /cvs Module name: ports Changes by: bket@cvs.openbsd.org 2026/05/06 07:33:09 Modified files: sysutils/rclone: Makefile distinfo Log message: Update to rclone-1.74.0 Changes: https://rclone.org/changelog/#v1-74-0-2026-05-01 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 07:33:26 Modified files: textproc/py-pyaml: Makefile distinfo Log message: update to py3-pyaml-26.2.1 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 07:33:29 Modified files: sysutils/py-mitogen: Makefile distinfo Log message: update to py3-mitogen-0.3.47 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 07:35:22 Modified files: sysutils/py-pipx: Makefile distinfo Log message: update to py3-pipx-1.11.2 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 07:36:13 Modified files: net/py-curl : Makefile distinfo net/py-curl/pkg: PLIST Log message: update to py3-curl-7.46.0 CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/06 07:38:57 Log message: Import fonts/marelle 1.004. The Marelle font is specifically designed for teaching cursive writing in primary school. see https://marelle.forge.apps.education.fr/ for samples requested by miod@ ok ajacoutot@ Status: Vendor Tag: landry Release Tags: landry_20260506 N ports/fonts/marelle/Makefile N ports/fonts/marelle/distinfo N ports/fonts/marelle/pkg/PLIST-web N ports/fonts/marelle/pkg/DESCR-web N ports/fonts/marelle/pkg/PLIST-main N ports/fonts/marelle/pkg/DESCR-main No conflicts created by this import CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/06 07:39:44 Modified files: fonts : Makefile Log message: fonts/Makefile: +marell CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2026/05/06 07:43:38 Modified files: usr.bin/tmux : format.c Log message: Add time limit to a couple of other loops. CVSROOT: /cvs Module name: ports Changes by: naddy@cvs.openbsd.org 2026/05/06 07:47:26 Modified files: telephony/siproxd: Makefile distinfo telephony/siproxd/patches: patch-doc_siproxd_conf_example patch-src_Makefile_in patch-src_siproxd_c telephony/siproxd/pkg: PLIST Added files: telephony/siproxd/patches: patch-src_auth_c Removed files: telephony/siproxd/patches: patch-src_rtpproxy_c Log message: telephony/siproxd: update to 0.8.4 Changes: - many string handling fixes New plugins: - plugin_regex_body CVSROOT: /cvs Module name: ports Changes by: naddy@cvs.openbsd.org 2026/05/06 07:49:17 Modified files: graphics/netpbm: Makefile distinfo Added files: graphics/netpbm/patches: patch-test_pampick-roundtrip_test Removed files: graphics/netpbm/patches: patch-test_pbmtext-utf8_test patch-test_pnmpad-color_test Log message: graphics/netpbm: update to 11.14.00 Numerous bug fixes. CVSROOT: /cvs Module name: ports Changes by: naddy@cvs.openbsd.org 2026/05/06 07:51:27 Modified files: audio/mpg123 : Makefile distinfo Log message: audio/mpg123: maintenance update to 1.33.5 CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/06 07:52:46 Modified files: lang/wasi-libc : Makefile distinfo lang/wasi-libc/patches: patch-Makefile lang/wasi-libc/pkg: PLIST Log message: lang/wasi-libc: update to sdk 29 don't update to latest (32) as it switched to cmake in the meantime, more work needed. CVSROOT: /cvs Module name: ports Changes by: naddy@cvs.openbsd.org 2026/05/06 07:52:52 Modified files: net/curl : Makefile distinfo net/curl/patches: patch-m4_curl-compilers_m4 net/curl/pkg : PLIST Log message: net/curl: update to 8.20.0 Changes: * drop support for SMB Includes fixes for CVE-2026-4873: connection reuse ignores TLS requirement CVE-2026-5545: wrong reuse of HTTP Negotiate connection CVE-2026-5773: wrong reuse of SMB connection CVE-2026-6253: proxy credentials leak over redirect-to proxy CVE-2026-6276: stale custom cookie host causes cookie leak CVE-2026-6429: netrc credential leak with reused proxy connection CVE-2026-7168: cross-proxy Digest auth state leak CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/06 07:55:02 Modified files: lang/wasi-sdk : Makefile.inc lang/wasi-sdk/compiler-rt: Makefile distinfo lang/wasi-sdk/libcxx: Makefile distinfo lang/wasi-sdk/libcxx/pkg: PLIST Log message: lang/wasi-sdk: update to build from llvm 21.1.8 went through several mozilla builds with llvm 19, and allows to build firefox with llvm 21. first step on updating to llvm 22.. CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 07:56:45 Modified files: textproc/py-ujson: Makefile distinfo Log message: update to py3-ujson-5.12.1 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 08:05:55 Modified files: lang/php/8.2 : Makefile distinfo Log message: update to php-8.2.31 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 08:06:24 Modified files: lang/php/8.3 : Makefile distinfo Log message: update to php-8.3.31 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 08:06:43 Modified files: lang/php/8.4 : Makefile distinfo lang/php/8.4/patches: patch-ext_openssl_openssl_c Log message: update to php-8.4.21 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 08:07:42 Modified files: editors/vim-classic: Makefile distinfo editors/vim-classic/patches: patch-runtime_filetype_vim patch-runtime_syntax_make_vim patch-src_configure_ac editors/vim-classic/pkg: PLIST Log message: update vim-classic to newer checkout CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 08:08:38 Modified files: devel/py-test : Makefile distinfo Log message: update to py3-test-9.0.3 CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/06 08:10:25 ports/telephony/linphone/pkg Update of /cvs/ports/telephony/linphone/pkg In directory cvs.openbsd.org:/tmp/cvs-serv86159/pkg Log Message: Directory /cvs/ports/telephony/linphone/pkg added to the repository CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/06 08:10:25 ports/telephony/linphone/patches Update of /cvs/ports/telephony/linphone/patches In directory cvs.openbsd.org:/tmp/cvs-serv86159/patches Log Message: Directory /cvs/ports/telephony/linphone/patches added to the repository CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 08:11:27 Modified files: net/icinga/icingadb: Makefile net/icinga/icingadb/pkg: README Log message: tweak pkg-readme CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 08:12:17 Modified files: net/icinga/icinga-php-library: Makefile distinfo net/icinga/icinga-php-library/pkg: PLIST Log message: update to icinga-php-library-0.19.2, from Alvar Penning CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 08:15:44 Modified files: net/icinga/core2: Makefile distinfo net/icinga/core2/patches: patch-itl_plugins-contrib_d_web_conf net/icinga/core2/pkg: PLIST-main README-main Added files: net/icinga/core2/pkg: MESSAGE-mysql MESSAGE-pgsql Removed files: net/icinga/core2/patches: patch-lib_base_library_cpp patch-lib_base_utility_cpp Log message: update to icinga2-2.16.0, mostly from Alvar Penning, some tweaks from me license moves from GPLv2+ with openssl exemption to GPLv3+ CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 08:15:48 Modified files: sysutils/f3 : Makefile distinfo sysutils/f3/patches: patch-Makefile Added files: sysutils/f3/patches: patch-src_f3read_c patch-src_f3write_c Removed files: sysutils/f3/patches: patch-f3read_c patch-f3write_c Log message: update to f3-10.0, from Alexander Klimov, + regen patches CVSROOT: /cvs Module name: ports Changes by: naddy@cvs.openbsd.org 2026/05/06 08:20:53 Modified files: telephony/libosip2: Makefile Log message: telephony/libosip2: provide debug packages CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 08:39:44 Modified files: databases/sqlite3: Makefile distinfo databases/sqlite3/pkg: PLIST Added files: databases/sqlite3/patches: patch-autosetup_sqlite-config_tcl Removed files: databases/sqlite3/patches: patch-main_mk Log message: update to sqlite3-3.53.1 there was some reorg in the build and the patch to reenable the DQS (mis)feature is now done in a different place. I'm going to drop that patch (i.e. go back to upstream defaults); sqlports is fixed now and there shouldn't be much else using it - but will do that as a commit on top. CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 08:42:20 Modified files: databases/sqlite3: Makefile Removed files: databases/sqlite3/patches: patch-autosetup_sqlite-config_tcl Log message: stop patching to reenable DQS in the sqlite3 shell by default, i.e. move to the behaviour upstream changed to in 3.41.0 (2023). see https://sqlite.org/quirks.html#dblquote (and comments in the removed patch) for more info CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 08:42:27 Modified files: lang/php/8.5 : Makefile distinfo Log message: update to php-8.5.6 CVSROOT: /cvs Module name: ports Changes by: rsadowski@cvs.openbsd.org 2026/05/06 08:42:30 Log message: Import accounts-qml-module-0.7, ok volker@ Comment: QML bindings for libaccounts-qt and libsignon-qt Description: This QML module provides an API to manage the user's online accounts and get their authentication data. It's a tiny wrapper around the Qt-based APIs of libaccounts-qt and libsignon-qt. It is part of the accounts-sso project. Maintainer: Rafael Sadowski WWW: https://accounts-sso.gitlab.io/ Status: Vendor Tag: rsadowski Release Tags: rsadowski_20260506 N ports/net/accounts-qml-module/Makefile N ports/net/accounts-qml-module/distinfo N ports/net/accounts-qml-module/pkg/DESCR N ports/net/accounts-qml-module/pkg/PLIST No conflicts created by this import CVSROOT: /cvs Module name: ports Changes by: rsadowski@cvs.openbsd.org 2026/05/06 08:45:43 Modified files: net : Makefile Log message: +accounts-qml-module CVSROOT: /cvs Module name: ports Changes by: fcambus@cvs.openbsd.org 2026/05/06 08:48:01 Modified files: net/dbip : Makefile.inc net/dbip/asn : distinfo net/dbip/city : distinfo net/dbip/country: distinfo Log message: Update dbip to 2026.05. CVSROOT: /cvs Module name: ports Changes by: rsadowski@cvs.openbsd.org 2026/05/06 08:48:09 Log message: Import xsimd-14.2.0, ok volker@ Comment: C++ wrappers for SIMD intrinsics Description: C++ wrappers for SIMD intrinsics and parallelized, optimized mathematical functions (SSE, AVX, AVX512, NEON, SVE, WebAssembly, VSX, RISC-V)) Maintainer: The OpenBSD ports mailing-list WWW: https://github.com/xtensor-stack/xsimd Status: Vendor Tag: rsadowski Release Tags: rsadowski_20260506 N ports/devel/xsimd/Makefile N ports/devel/xsimd/distinfo N ports/devel/xsimd/pkg/PLIST N ports/devel/xsimd/pkg/DESCR No conflicts created by this import CVSROOT: /cvs Module name: ports Changes by: fcambus@cvs.openbsd.org 2026/05/06 08:49:52 Modified files: misc/ytree : Makefile distinfo Log message: Update ytree to 2.12. CVSROOT: /cvs Module name: ports Changes by: fcambus@cvs.openbsd.org 2026/05/06 08:51:13 Modified files: graphics/oxipng: Makefile crates.inc distinfo Log message: Update oxipng to 10.1.1. CVSROOT: /cvs Module name: ports Changes by: giovanni@cvs.openbsd.org 2026/05/06 08:54:13 Modified files: www/apache-httpd: Makefile distinfo www/apache-httpd/patches: patch-docs_man_htpasswd_1 patch-docs_man_httpd_8 www/apache-httpd/pkg: PLIST Log message: update to 2.4.67 fixes CVE-2026-23918, CVE-2026-24072, CVE-2026-28780, CVE-2026-29168, CVE-2026-29169, CVE-2026-33006, CVE-2026-33007, CVE-2026-33523, CVE-2026-33857, CVE-2026-34032 and CVE-2026-34059 CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/06 08:54:46 Modified files: misc/hwdata : Makefile distinfo Log message: Update to hwdata-0.407. CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 08:54:49 Modified files: net/wireshark : Makefile distinfo Log message: update to wireshark-4.6.5 CVSROOT: /cvs Module name: ports Changes by: rsadowski@cvs.openbsd.org 2026/05/06 08:55:52 Modified files: x11/kde-plasma/plasma-desktop: Makefile x11/kde-plasma/powerdevil: Makefile Log message: Remove odd knighttime dependency CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/06 08:58:22 Modified files: print/cups : Makefile distinfo Log message: Update to cups-2.4.19. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/06 08:59:43 Modified files: mail/sendmail : Makefile distinfo mail/sendmail/pkg: PLIST-main Log message: Update to sendmail-8.19.0.1. CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2026/05/06 09:02:51 Modified files: lib/libssl : tls_key_share.c Log message: Avoid use of uninitialised decode_error variable. Pull initialisation of decode_error and invalid_key up to tls_key_share_{client,server}_peer_public(), which are the entry points for the key share code. The entry point was previously tls_key_share_peer_public(), however with the introduction of MLKEM this was split into separate client and server functions, without the initialisation being included. Also initialise decode_error and invalid_params on entry to tls_key_share_peer_params(). Code that reaches tls_key_share_client_peer_public_mlkem768x25519() could previously result in code branching based on decode_error, which is uninitialised stack based memory. Thanks to Guido Vranken of Aisle Research for reporting this issue. With and ok tb@ CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2026/05/06 09:06:35 Modified files: lib/libssl : d1_both.c dtls_local.h Log message: Get rid of struct dtls1_retransmit_state. In order to retransmit DTLS messages we potentially need to use the record protection from a previous epoch. However, DTLS currently also saves and restores the session, which is unnecessary - all of the record protection and keys are handled in the TLS record layer. Remove the rather useless dtls1_retransmit_state struct and just keep the epoch - keeping pointers hanging around to sessions is pretty nasty and unnecessary. ok kenjiro@ tb@ CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/06 09:17:04 Modified files: devel/harfbuzz : Makefile distinfo Log message: Update to harfbuzz-14.2.0. CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/06 09:29:20 Modified files: telephony/linphone: Makefile Added files: telephony/linphone/patches: patch-Linphone_CMakeLists_txt patch-Linphone_tool_native_DesktopTools_hpp patch-cmake_install_install_cmake patch-external_linphone-sdk_bctoolbox_include_bctoolbox_port_h patch-external_linphone-sdk_bctoolbox_src_crypto_mbedtls_cc patch-external_linphone-sdk_bctoolbox_src_utils_port_c patch-external_linphone-sdk_belle-sip_src_belle_sip_resolver_c patch-external_linphone-sdk_belle-sip_src_channel_c patch-external_linphone-sdk_belle-sip_src_dns_dns_c patch-external_linphone-sdk_belle-sip_src_transports_udp_listeningpoint_c patch-external_linphone-sdk_bzrtp_src_zidCache_c patch-external_linphone-sdk_cmake_Options_cmake patch-external_linphone-sdk_liblinphone_CMakeLists_txt patch-external_linphone-sdk_liblinphone_coreapi_linphonecore_c patch-external_linphone-sdk_liblinphone_src_CMakeLists_txt patch-external_linphone-sdk_liblinphone_src_core_paths_paths-linux_cpp patch-external_linphone-sdk_liblinphone_src_core_paths_paths_cpp patch-external_linphone-sdk_liblinphone_src_ldap_ldap-contact-provider_cpp patch-external_linphone-sdk_mediastreamer2_CMakeLists_txt patch-external_linphone-sdk_mediastreamer2_cmake_FindAom_cmake patch-external_linphone-sdk_mediastreamer2_cmake_FindDav1d_cmake patch-external_linphone-sdk_mediastreamer2_cmake_FindGSM_cmake patch-external_linphone-sdk_mediastreamer2_cmake_FindV4L_cmake patch-external_linphone-sdk_mediastreamer2_include_mediastreamer2_allfilters_h patch-external_linphone-sdk_mediastreamer2_mediastreamer-config_h_cmake patch-external_linphone-sdk_mediastreamer2_src_CMakeLists_txt patch-external_linphone-sdk_mediastreamer2_src_audiofilters_gsm_c patch-external_linphone-sdk_mediastreamer2_src_audiofilters_sndio_c patch-external_linphone-sdk_mediastreamer2_src_utils_dsptools_c patch-external_linphone-sdk_mediastreamer2_src_videofilters_msv4l2_c patch-external_linphone-sdk_mediastreamer2_src_voip_msvoip_c telephony/linphone/pkg: DESCR PLIST Removed files: telephony/linphone: Makefile.inc telephony/linphone/bctoolbox: Makefile distinfo telephony/linphone/bctoolbox/patches: patch-CMakeLists_txt patch-cmake_BCToolboxCMakeUtils_cmake patch-include_bctoolbox_port_h patch-src_CMakeLists_txt patch-src_crypto_mbedtls_cc patch-src_utils_port_c patch-tester_encrypted_vfs_cc patch-tester_port_c telephony/linphone/bctoolbox/pkg: DESCR PLIST telephony/linphone/bcunit: Makefile distinfo telephony/linphone/bcunit/pkg: DESCR PLIST telephony/linphone/belcard: Makefile distinfo telephony/linphone/belcard/pkg: DESCR PLIST telephony/linphone/belle-sip: Makefile distinfo telephony/linphone/belle-sip/pkg: DESCR PLIST telephony/linphone/belr: Makefile distinfo telephony/linphone/belr/pkg: DESCR PLIST telephony/linphone/bzrtp: Makefile distinfo telephony/linphone/bzrtp/patches: patch-src_zidCache_c telephony/linphone/bzrtp/pkg: DESCR PLIST telephony/linphone/liblinphone: Makefile distinfo telephony/linphone/liblinphone/patches: patch-CMakeLists_txt patch-console_linphonec_c patch-coreapi_linphonecore_c patch-src_CMakeLists_txt patch-src_c-wrapper_api_c-call-log_cpp patch-src_core_paths_paths-linux_cpp patch-src_core_paths_paths_cpp patch-src_nat_ice-service_cpp telephony/linphone/liblinphone/pkg: DESCR PLIST telephony/linphone/linphone-desktop: Makefile distinfo telephony/linphone/linphone-desktop/patches: patch-CMakeLists_txt patch-linphone-app_CMakeLists_txt patch-linphone-app_build_CMakeLists_txt patch-linphone-app_cmake_FindBCToolbox_cmake patch-linphone-app_cmake_FindBelcard_cmake patch-linphone-app_cmake_FindLibLinphone_cmake patch-linphone-app_cmake_FindLinphoneCxx_cmake patch-linphone-app_cmake_FindMediastreamer2_cmake patch-linphone-app_cmake_builder_additional_steps_cmake patch-linphone-app_cmake_builder_linphone_package_CMakeLists_txt patch-linphone-app_src_app_App_cpp patch-linphone-app_src_app_App_hpp patch-linphone-app_src_components_call_CallModel_cpp patch-linphone-app_src_components_other_clipboard_Clipboard_cpp patch-linphone-app_src_components_other_desktop-tools_DesktopTools_hpp patch-linphone-app_src_components_other_spell-checker_SpellChecker_hpp patch-linphone-app_src_config_h_cmake patch-linphone-app_ui_views_App_Main_Assistant_AssistantHome_qml telephony/linphone/linphone-desktop/pkg: DESCR PLIST telephony/linphone/mediastreamer2: Makefile distinfo telephony/linphone/mediastreamer2/patches: patch-CMakeLists_txt patch-cmake_FindGSM_cmake patch-cmake_FindV4L_cmake patch-include_mediastreamer2_allfilters_h patch-mediastreamer-config_h_cmake patch-src_CMakeLists_txt patch-src_audiofilters_gsm_c patch-src_audiofilters_sndio_c patch-src_base_msfactory_c patch-src_utils_dsptools_c patch-src_utils_ffmpeg-priv_c patch-src_utils_ffmpeg-priv_h patch-src_utils_jpgloader-ffmpeg_c patch-src_videofilters_ffmpegjpegwriter_c patch-src_videofilters_h264dec_cpp patch-src_videofilters_msv4l2_c patch-src_videofilters_videodec_c patch-src_videofilters_videoenc_c patch-src_voip_msvoip_c telephony/linphone/mediastreamer2/pkg: DESCR PLIST telephony/linphone/ortp: Makefile distinfo telephony/linphone/ortp/pkg: DESCR PLIST Log message: telephony/linphone: major update to 6.1.2 upstream stopped releasing distinct versions of all libraries and with the 6 branch they're all developped in git submodules of linphone-sdk project (and even inside the project with the next branch) so get rid of all the subports and use DIST_TUPLE. reapply relevant patches here and there, migrate to QT6 - still manages to connect to a sip account, and i can call my cellphone. other features pending more testing... CVSROOT: /cvs Module name: ports Changes by: kirill@cvs.openbsd.org 2026/05/06 09:39:55 Modified files: devel/codex : Makefile crates.inc distinfo devel/codex/patches: patch-codex-rs_Cargo_toml patch-codex-rs_arg0_src_lib_rs patch-codex-rs_core_src_agent_role_rs patch-codex-rs_core_src_config_mod_rs patch-codex-rs_core_src_tools_handlers_multi_agents_common_rs devel/codex/pkg: PLIST Log message: devel/codex: update to 0.128.0 CVSROOT: /cvs Module name: ports Changes by: volker@cvs.openbsd.org 2026/05/06 09:40:15 Modified files: devel/esbuild : Makefile distinfo Log message: devel/esbuild: Update to 0.28.0 From Maintainer Igor Zornik, thanks CVSROOT: /cvs Module name: ports Changes by: kirill@cvs.openbsd.org 2026/05/06 09:40:50 Modified files: devel/intellij : Makefile distinfo devel/intellij/pkg: PLIST Log message: devel/intellij: update to 2026.1.1 CVSROOT: /cvs Module name: ports Changes by: kirill@cvs.openbsd.org 2026/05/06 09:41:23 Modified files: devel/pycharm : Makefile distinfo devel/pycharm/pkg: PLIST Log message: devel/pycharm: update to 2026.1.1 CVSROOT: /cvs Module name: ports Changes by: volker@cvs.openbsd.org 2026/05/06 09:43:42 Modified files: x11/alacritty : Makefile crates.inc distinfo x11/alacritty/pkg: PLIST Log message: x11/alacritty: Update to 0.17.0 From Maintainer Eric Auge, thanks ok lraab@ CVSROOT: /cvs Module name: ports Changes by: volker@cvs.openbsd.org 2026/05/06 09:45:47 Modified files: net/lagrange : Makefile distinfo Log message: net/lagrange: Update to 1.20.4 From Maintainer Florian Viehweger, thanks CVSROOT: /cvs Module name: ports Changes by: kirill@cvs.openbsd.org 2026/05/06 09:47:08 Modified files: devel/sbt : Makefile distinfo Log message: devel/sbt: update to 1.12.11 CVSROOT: /cvs Module name: ports Changes by: kirill@cvs.openbsd.org 2026/05/06 09:48:35 Modified files: fonts/nerd-fonts: Makefile.inc fonts/nerd-fonts/codenewroman: distinfo fonts/nerd-fonts/dejavusansmono: distinfo fonts/nerd-fonts/fantasquesansmono: distinfo fonts/nerd-fonts/intelonemono: distinfo fonts/nerd-fonts/noto: distinfo fonts/nerd-fonts/profont: distinfo fonts/nerd-fonts/symbolsonly: distinfo fonts/nerd-fonts/terminus: distinfo fonts/nerd-fonts/ubuntu: distinfo fonts/nerd-fonts/ubuntu-mono: distinfo Log message: fonts/nerd-fonts: update to 3.4.0 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 09:51:18 Modified files: www/p5-Apache-Session: Makefile Log message: fix license marker, has been Perl since 2007 CVSROOT: /cvs Module name: ports Changes by: volker@cvs.openbsd.org 2026/05/06 09:52:42 Modified files: lang/erlang : erlang.port.mk lang/erlang/26 : Makefile distinfo lang/erlang/27 : Makefile distinfo lang/erlang/28 : Makefile distinfo Log message: lang/erlang: Update to 26.2.5.20, 27.3.4.11 and 28.5 While here, fix a trailing whitespace in erlang.port.mk CVSROOT: /cvs Module name: ports Changes by: volker@cvs.openbsd.org 2026/05/06 09:55:37 Modified files: lang/gleam : Makefile crates.inc distinfo lang/gleam/patches: patch-compiler-core_src_error_rs Log message: lang/gleam: Update to 1.16.0 CVSROOT: /cvs Module name: ports Changes by: kirill@cvs.openbsd.org 2026/05/06 09:55:39 Modified files: fonts/openmoji : Makefile distinfo Log message: fonts/openmoji: update to 17.0.0 Changes: https://github.com/hfg-gmuend/openmoji/releases/tag/17.0.0 CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/06 09:58:19 Modified files: devel/libgsf : Makefile distinfo Log message: Update to libgsf-1.14.58. CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 10:02:57 Modified files: editors/vim : Makefile distinfo editors/vim/patches: patch-runtime_autoload_tar_vim patch-runtime_syntax_make_vim editors/vim/pkg: PLIST Log message: update to vim-9.2.447 CVSROOT: /cvs Module name: ports Changes by: volker@cvs.openbsd.org 2026/05/06 10:03:42 Modified files: shells/nushell : Makefile crates.inc distinfo shells/nushell/patches: patch-tests_repl_test_config_path_rs Log message: shells/nushell: Update to 0.112.2 + enable MCP feature. What could possibly go wrong? CVSROOT: /cvs Module name: www Changes by: tj@cvs.openbsd.org 2026/05/06 10:04:24 Modified files: . : 79.html Log message: bit of cleanup CVSROOT: /cvs Module name: ports Changes by: kirill@cvs.openbsd.org 2026/05/06 10:07:21 Modified files: security/acme.sh: Makefile distinfo security/acme.sh/pkg: PLIST Log message: security/acme.sh: update to 3.1.3 CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/06 10:10:25 Modified files: mail/mozilla-thunderbird: Makefile distinfo mail/thunderbird-i18n: Makefile.inc distinfo Log message: mail/mozilla-thunderbird: update to 140.10.1. see https://www.thunderbird.net/en-US/thunderbird/140.10.1esr/releasenotes/ fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-39/ CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/06 10:11:19 Modified files: math/gnumeric : Makefile Log message: s/python3.13/${MODPY_WANTLIB}/ CVSROOT: /cvs Module name: ports Changes by: caspar@cvs.openbsd.org 2026/05/06 10:18:48 Modified files: meta/tor-browser: Makefile www/tor-browser: Makefile.inc www/tor-browser/browser: Makefile distinfo www/tor-browser/noscript: Makefile distinfo Log message: Tor Browser: update to 15.0.11 CVSROOT: /cvs Module name: ports Changes by: volker@cvs.openbsd.org 2026/05/06 10:21:34 Modified files: graphics/stable-diffusion.cpp: Makefile distinfo graphics/stable-diffusion.cpp/patches: patch-CMakeLists_txt patch-ggml_CMakeLists_txt patch-ggml_src_ggml-backend-reg_cpp graphics/stable-diffusion.cpp/pkg: PLIST Log message: graphics/stable-diffusion.cpp: Update to 0.0.587 CVSROOT: /cvs Module name: ports Changes by: caspar@cvs.openbsd.org 2026/05/06 10:22:35 Modified files: devel/sccache : Makefile crates.inc distinfo devel/sccache/pkg: PLIST Log message: devel/sccache: update to 0.15.0 CVSROOT: /cvs Module name: ports Changes by: volker@cvs.openbsd.org 2026/05/06 10:24:53 Modified files: net/rabbitmq : Makefile distinfo net/rabbitmq/patches: patch-Makefile net/rabbitmq/pkg: PLIST Log message: net/rabbitmq: Update to 4.3.0 CVSROOT: /cvs Module name: ports Changes by: volker@cvs.openbsd.org 2026/05/06 10:26:34 Modified files: graphics/pixelorama: Makefile distinfo Log message: graphics/pixelorama: Update to 1.1.10 CVSROOT: /cvs Module name: ports Changes by: volker@cvs.openbsd.org 2026/05/06 10:33:04 Modified files: wayland/wl-clipboard: Makefile distinfo Log message: wayland/wl-clipboard: Update to 2.3.0 + switch to using DIST_TUPLE CVSROOT: /cvs Module name: ports Changes by: volker@cvs.openbsd.org 2026/05/06 10:37:54 Modified files: devel/difftastic: Makefile crates.inc distinfo Log message: devel/difftastic: Update to 0.69.0 CVSROOT: /cvs Module name: ports Changes by: volker@cvs.openbsd.org 2026/05/06 10:40:28 Modified files: devel/gn : Makefile distinfo Log message: devel/gn: Update to snapshot from 2025-12-14 Needed to build lang/deno 2.7.x CVSROOT: /cvs Module name: ports Changes by: volker@cvs.openbsd.org 2026/05/06 10:48:00 Modified files: devel/capnproto: Makefile distinfo Log message: devel/capnproto: Update to 1.4.0 CVSROOT: /cvs Module name: src Changes by: sthen@cvs.openbsd.org 2026/05/06 10:51:30 Modified files: distrib/sets/lists/man: mi Log message: sync CVSROOT: /cvs Module name: ports Changes by: volker@cvs.openbsd.org 2026/05/06 11:03:46 Added files: shells/nushell/patches: patch-Cargo_toml Log message: shells/nushell: Add missing patch CVSROOT: /cvs Module name: www Changes by: tj@cvs.openbsd.org 2026/05/06 11:08:51 Modified files: . : 79.html Log message: few more fixes CVSROOT: /cvs Module name: www Changes by: tj@cvs.openbsd.org 2026/05/06 11:11:29 Modified files: . : 76.html 77.html 78.html Log message: "platforms specific" -> "platform-specific" CVSROOT: /cvs Module name: ports Changes by: volker@cvs.openbsd.org 2026/05/06 11:46:45 Log message: Import misc/gammastep Comment: adjust color temperature of your screen Description: Adjust the color temperature of your screen according to your surroundings. This may help your eyes hurt less if you are working in front of the screen at night. WWW: https://gitlab.com/chinstrap/gammastep ok sthen@ Status: Vendor Tag: volker Release Tags: volker_20260506 N ports/misc/gammastep/Makefile N ports/misc/gammastep/distinfo N ports/misc/gammastep/pkg/DESCR N ports/misc/gammastep/pkg/PLIST No conflicts created by this import CVSROOT: /cvs Module name: ports Changes by: volker@cvs.openbsd.org 2026/05/06 11:52:16 Modified files: misc : Makefile Log message: + gammastep CVSROOT: /cvs Module name: ports Changes by: volker@cvs.openbsd.org 2026/05/06 11:54:23 Modified files: misc/redshift : Makefile Log message: misc/redshift: Fix license comment GPLv3 -> GPLv3 only ok sthen@ CVSROOT: /cvs Module name: ports Changes by: rsadowski@cvs.openbsd.org 2026/05/06 11:55:15 Modified files: devel/kf6 : kf6.port.mk devel/kf6/attica: distinfo devel/kf6/baloo: Makefile distinfo devel/kf6/bluez-qt: distinfo devel/kf6/breeze-icons: distinfo devel/kf6/breeze-icons/pkg: PLIST devel/kf6/extra-cmake-modules: distinfo devel/kf6/frameworkintegration: distinfo devel/kf6/karchive: distinfo devel/kf6/karchive/pkg: PLIST devel/kf6/kauth: Makefile distinfo devel/kf6/kbookmarks: distinfo devel/kf6/kcalendarcore: distinfo devel/kf6/kcmutils: distinfo devel/kf6/kcodecs: Makefile distinfo devel/kf6/kcolorscheme: distinfo devel/kf6/kcompletion: distinfo devel/kf6/kconfig: distinfo devel/kf6/kconfigwidgets: distinfo devel/kf6/kcontacts: distinfo devel/kf6/kcoreaddons: distinfo devel/kf6/kcrash: distinfo devel/kf6/kdav : distinfo devel/kf6/kdbusaddons: distinfo devel/kf6/kdeclarative: distinfo devel/kf6/kded : distinfo devel/kf6/kdesu: distinfo devel/kf6/kdnssd: distinfo devel/kf6/kdoctools: distinfo devel/kf6/kdoctools/pkg: PLIST devel/kf6/kfilemetadata: distinfo devel/kf6/kglobalaccel: distinfo devel/kf6/kguiaddons: Makefile distinfo devel/kf6/kholidays: distinfo devel/kf6/ki18n: distinfo devel/kf6/kiconthemes: distinfo devel/kf6/kidletime: distinfo devel/kf6/kimageformats: distinfo devel/kf6/kimageformats/pkg: PLIST devel/kf6/kio : Makefile distinfo devel/kf6/kio/patches: patch-src_core_worker_cpp devel/kf6/kirigami: Makefile distinfo devel/kf6/kirigami/pkg: PLIST devel/kf6/kitemmodels: distinfo devel/kf6/kitemviews: distinfo devel/kf6/kjobwidgets: distinfo devel/kf6/knewstuff: distinfo devel/kf6/knotifications: distinfo devel/kf6/knotifyconfig: Makefile distinfo devel/kf6/kpackage: distinfo devel/kf6/kparts: Makefile distinfo devel/kf6/kpeople: distinfo devel/kf6/kplotting: distinfo devel/kf6/kpty : distinfo devel/kf6/kquickcharts: distinfo devel/kf6/krunner: distinfo devel/kf6/kservice: Makefile distinfo devel/kf6/kstatusnotifieritem: distinfo devel/kf6/ksvg : distinfo devel/kf6/ktexteditor: Makefile distinfo devel/kf6/ktexttemplate: distinfo devel/kf6/ktextwidgets: Makefile distinfo devel/kf6/kunitconversion: distinfo devel/kf6/kuserfeedback: distinfo devel/kf6/kwallet: distinfo devel/kf6/kwidgetsaddons: distinfo devel/kf6/kwindowsystem: distinfo devel/kf6/kxmlgui: distinfo devel/kf6/prison: distinfo devel/kf6/purpose: Makefile distinfo devel/kf6/purpose/pkg: PLIST devel/kf6/qqc2-desktop-style: distinfo devel/kf6/solid: distinfo devel/kf6/sonnet: distinfo devel/kf6/syndication: distinfo devel/kf6/syntax-highlighting: distinfo devel/kf6/threadweaver: distinfo Log message: Update KDE Frameworks to 6.25.0 CVSROOT: /cvs Module name: ports Changes by: rsadowski@cvs.openbsd.org 2026/05/06 11:55:24 ports/devel/kf6/kholidays/patches Update of /cvs/ports/devel/kf6/kholidays/patches In directory cvs.openbsd.org:/tmp/cvs-serv22934/kholidays/patches Log Message: Directory /cvs/ports/devel/kf6/kholidays/patches added to the repository CVSROOT: /cvs Module name: ports Changes by: rsadowski@cvs.openbsd.org 2026/05/06 11:55:51 Added files: devel/kf6/kholidays/patches: patch-src_parsers_plan2_FlexLexer_h Log message: missing patch for 6.25 CVSROOT: /cvs Module name: ports Changes by: rsadowski@cvs.openbsd.org 2026/05/06 11:56:49 Modified files: devel/universal-ctags: Makefile distinfo devel/universal-ctags/pkg: PLIST Log message: Update universal-ctags to 6.2.1 CVSROOT: /cvs Module name: ports Changes by: kirill@cvs.openbsd.org 2026/05/06 12:12:55 Log message: security/b3sum: new port (version 1.8.4) OK: sthen@ Status: Vendor Tag: kirill Release Tags: kirill_20260506 N ports/security/b3sum/Makefile N ports/security/b3sum/crates.inc N ports/security/b3sum/distinfo N ports/security/b3sum/pkg/DESCR N ports/security/b3sum/pkg/PLIST No conflicts created by this import CVSROOT: /cvs Module name: ports Changes by: kirill@cvs.openbsd.org 2026/05/06 12:13:45 Modified files: security : Makefile Log message: +security/b3sum CVSROOT: /cvs Module name: ports Changes by: semarie@cvs.openbsd.org 2026/05/06 12:30:06 Modified files: lang/rust : Makefile distinfo rust.port.mk lang/rust/patches: patch-compiler_rustc_session_src_options_rs patch-src_bootstrap_bootstrap_py patch-src_bootstrap_src_lib_rs lang/rust/pkg : PLIST-main PLIST-src Log message: lang/rust: update to 1.95.0 Announce: https://blog.rust-lang.org/2026/04/16/Rust-1.95.0/ Release notes: https://doc.rust-lang.org/stable/releases.html#version-1950-2026-04-16 ok tb@ landry@ CVSROOT: /cvs Module name: ports Changes by: volker@cvs.openbsd.org 2026/05/06 12:35:33 Modified files: lang/deno : Makefile crates.inc distinfo lang/deno/patches: patch-cli_Cargo_toml patch-cli_args_mod_rs patch-cli_lib_version_rs patch-cli_standalone_binary_rs patch-cli_task_runner_rs patch-cli_tools_deploy_rs patch-cli_tools_upgrade_rs patch-ext_os_lib_rs patch-modcargo-crates_libffi-sys-3_2_0_build_not_msvc_rs patch-modcargo-crates_v8-0_106_0_build_config_clang_BUILD_gn patch-modcargo-crates_v8-0_106_0_build_config_linux_pkg-config_py patch-modcargo-crates_v8-0_106_0_build_config_v8_target_cpu_gni patch-modcargo-crates_v8-0_106_0_build_toolchain_gcc_solink_wrapper_py patch-modcargo-crates_v8-0_106_0_build_toolchain_openbsd_BUILD_gn patch-modcargo-crates_v8-0_106_0_build_toolchain_toolchain_gni patch-modcargo-crates_v8-0_68_0_build_config_BUILDCONFIG_gn patch-modcargo-crates_v8-0_68_0_build_config_BUILD_gn patch-modcargo-crates_v8-0_68_0_build_config_compiler_BUILD_gn patch-modcargo-crates_v8-0_68_0_build_config_linux_BUILD_gn patch-modcargo-crates_v8-0_68_0_build_detect_host_arch_py patch-modcargo-crates_v8-0_68_0_build_rs patch-modcargo-crates_v8-0_68_0_build_toolchain_gcc_toolchain_gni patch-modcargo-crates_v8-0_68_0_v8_BUILD_gn patch-modcargo-crates_v8-0_68_0_v8_include_v8-internal_h patch-modcargo-crates_v8-0_68_0_v8_include_v8config_h patch-modcargo-crates_v8-0_68_0_v8_src_api_api_cc patch-modcargo-crates_v8-0_68_0_v8_src_base_atomicops_h patch-modcargo-crates_v8-0_68_0_v8_src_base_platform_platform-openbsd_cc patch-modcargo-crates_v8-0_68_0_v8_src_base_platform_platform-posix_cc patch-modcargo-crates_v8-0_68_0_v8_src_base_sys-info_cc patch-modcargo-crates_v8-0_68_0_v8_src_diagnostics_perf-jit_cc patch-modcargo-crates_v8-0_68_0_v8_src_diagnostics_perf-jit_h patch-modcargo-crates_v8-0_68_0_v8_src_execution_isolate_cc patch-modcargo-crates_v8-0_68_0_v8_src_sandbox_sandbox_cc patch-modcargo-crates_v8-0_68_0_v8_src_snapshot_embedded_platform-embedded-file-writer-base_cc patch-modcargo-crates_v8-0_68_0_v8_src_snapshot_embedded_platform-embedded-file-writer-base_h patch-modcargo-crates_v8-0_68_0_v8_src_snapshot_embedded_platform-embedded-file-writer-generic_cc patch-modcargo-crates_v8-0_68_0_v8_src_trap-handler_handler-inside-posix_cc patch-modcargo-crates_v8-0_68_0_v8_src_trap-handler_handler-inside-posix_h patch-modcargo-crates_v8-0_68_0_v8_src_trap-handler_trap-handler_h patch-modcargo-crates_v8-0_68_0_v8_tools_run_py patch-modcargo-crates_v8-0_74_2_v8_src_flags_flags_cc patch-modcargo-crates_v8-0_90_1_third_party_abseil-cpp_absl_base_config_h patch-modcargo-crates_v8-0_90_1_third_party_abseil-cpp_absl_base_internal_sysinfo_cc patch-modcargo-crates_v8-137_1_0_third_party_libc++_src_src_filesystem_filesystem_clock_cpp patch-modcargo-crates_v8-142_2_0_build_config_clang_clang_gni patch-runtime_js_99_main_js Added files: lang/deno/patches: patch-cli_lib_rs patch-ext_node_lib_rs patch-ext_node_ops_udp_rs patch-ext_node_polyfills_internal_binding_udp_wrap_ts patch-libs_core_uv_compat_tty_rs patch-modcargo-crates_v8-145_0_0_build_config_c++_modules_gni patch-modcargo-crates_v8-145_0_0_build_toolchain_sysroot_gni patch-modcargo-crates_v8-147_0_0__gn patch-modcargo-crates_v8-147_0_0_third_party_libunwind_src_src_Registers_hpp Removed files: lang/deno/patches: patch-cli_main_rs patch-modcargo-crates_aws-lc-sys-0_26_0_aws-lc_crypto_fipsmodule_bcm_c patch-modcargo-crates_aws-lc-sys-0_29_0_aws-lc_third_party_s2n-bignum_s2n-bignum-imported_arm_curve25519_curve25519_x25519base_byte_S patch-modcargo-crates_aws-lc-sys-0_29_0_aws-lc_third_party_s2n-bignum_s2n-bignum-imported_x86_att_curve25519_curve25519_x25519base_S patch-modcargo-crates_v8-0_68_0_build_config_sysroot_gni patch-modcargo-crates_v8-140_0_0__gn patch-modcargo-crates_v8-142_2_0_build_config_c++_modules_gni patch-tests_util_server_src_lib_rs patch-tests_util_server_src_servers_mod_rs Log message: lang/deno: Update to 2.7.12 Fingers crossed that I got the patches right ... + give up and set USE_NOEXECONLY due to aws-lc + switch to DIST_TUPLE CVSROOT: /cvs Module name: ports Changes by: kirill@cvs.openbsd.org 2026/05/06 13:17:20 Modified files: devel/libggml : Makefile distinfo devel/libggml/patches: patch-CMakeLists_txt patch-src_ggml-backend-reg_cpp Log message: devel/libggml: update to 0.11.0 CVSROOT: /cvs Module name: ports Changes by: kirill@cvs.openbsd.org 2026/05/06 13:17:49 Modified files: misc/llama.cpp : Makefile distinfo misc/llama.cpp/pkg: PLIST Log message: misc/llama.cpp: update to b9033 CVSROOT: /cvs Module name: ports Changes by: volker@cvs.openbsd.org 2026/05/06 13:41:02 Log message: Import wayland/fnott Comment lightweight Wayland notification daemon Description Fnott is a keyboard driven and lightweight notification daemon for wlroots-based Wayland compositors. It implements (parts of) the Desktop Notifications Specification. WWW: https://codeberg.org/dnkl/fnott feedback and ok landry@ Status: Vendor Tag: volker Release Tags: volker_20260506 N ports/wayland/fnott/Makefile N ports/wayland/fnott/distinfo N ports/wayland/fnott/patches/patch-char32_c N ports/wayland/fnott/patches/patch-notification_c N ports/wayland/fnott/pkg/DESCR N ports/wayland/fnott/pkg/PLIST No conflicts created by this import CVSROOT: /cvs Module name: ports Changes by: volker@cvs.openbsd.org 2026/05/06 13:42:13 Modified files: wayland : Makefile Log message: + fnott CVSROOT: /cvs Module name: ports Changes by: volker@cvs.openbsd.org 2026/05/06 14:39:37 Modified files: wayland/fuzzel : Makefile Log message: wayland/fuzzel: Remove superfluous pre-configure target Pointed out by landry@, thanks + While here, change my email address CVSROOT: /cvs Module name: ports Changes by: naddy@cvs.openbsd.org 2026/05/06 14:47:00 Modified files: editors/nano : Makefile distinfo editors/nano/pkg: PLIST Log message: editors/nano: update to 9.0 Improvements: - With M-< and M-> the viewport can be scrolled sideways. - When the cursor nears the edge, all lines are scrolled sideways. - M-Left, M-Right, M-Up, and M-Down have become rebindable. - Immediately stopping a recording retains the existing macro. - Clicking in the scrollbar crudely navigates in the buffer. CVSROOT: /cvs Module name: ports Changes by: kn@cvs.openbsd.org 2026/05/06 15:20:34 Modified files: sysutils/ruby-openfact: Makefile Added files: sysutils/ruby-openfact/patches: patch-lib_facter_resolvers_networking_rb Log message: cherry-pick fix for interface flags facts CVSROOT: /cvs Module name: ports Changes by: jca@cvs.openbsd.org 2026/05/06 15:24:35 Modified files: textproc/diffstat: Makefile distinfo Log message: Update to diffstat-1.69 CVSROOT: /cvs Module name: ports Changes by: jca@cvs.openbsd.org 2026/05/06 15:27:49 Modified files: net/openvpn : Makefile distinfo Log message: Update to openvpn-2.7.4 ChangeLog: https://github.com/OpenVPN/openvpn/blob/v2.7.4/Changes.rst CVSROOT: /cvs Module name: ports Changes by: jca@cvs.openbsd.org 2026/05/06 15:31:20 Modified files: shells/dash : Makefile distinfo Log message: Update to dash-0.5.13.3 CVSROOT: /cvs Module name: ports Changes by: jca@cvs.openbsd.org 2026/05/06 15:32:39 Modified files: security/gnupg : Makefile distinfo Log message: Update to gnupg-2.5.19 ChangeLog: https://dev.gnupg.org/T7998 CVSROOT: /cvs Module name: ports Changes by: kn@cvs.openbsd.org 2026/05/06 15:47:08 Modified files: net/telemt : Makefile crates.inc distinfo Log message: update to telemt 3.4.10 CVSROOT: /cvs Module name: ports Changes by: kn@cvs.openbsd.org 2026/05/06 15:56:08 Modified files: devel/git : Makefile distinfo devel/git/patches: patch-gitweb_gitweb_perl devel/git/pkg : PLIST-main Log message: update to git 2.54.0 CVSROOT: /cvs Module name: ports Changes by: kn@cvs.openbsd.org 2026/05/06 15:57:28 Modified files: net/bro : Makefile distinfo Removed files: net/bro/patches: patch-scripts_policy_frameworks_cluster_backend_zeromq_main_zeek Log message: update to zeek 8.1.2 CVSROOT: /cvs Module name: www Changes by: benno@cvs.openbsd.org 2026/05/06 16:42:27 Modified files: . : 79.html Log message: up to April CVSROOT: /cvs Module name: www Changes by: benno@cvs.openbsd.org 2026/05/06 16:47:31 Modified files: . : 79.html Log message: past tense CVSROOT: /cvs Module name: ports Changes by: kn@cvs.openbsd.org 2026/05/06 16:57:15 Modified files: net/qbittorrent: Makefile.inc net/qbittorrent/qbittorrent: distinfo net/qbittorrent/qbittorrent/patches: patch-CMakeLists_txt net/qbittorrent/qbittorrent-nox: distinfo net/qbittorrent/qbittorrent-nox/patches: patch-CMakeLists_txt net/qbittorrent/qbittorrent-nox/pkg: PLIST Log message: update to qbittorrent 5.2.0 CVSROOT: /cvs Module name: www Changes by: tj@cvs.openbsd.org 2026/05/06 18:09:05 Modified files: . : 79.html Log message: some more fixes CVSROOT: /cvs Module name: ports Changes by: kirill@cvs.openbsd.org 2026/05/06 19:24:02 Modified files: audio/beets : Makefile distinfo audio/beets/pkg: PLIST Log message: audio/beets: update to 2.11.0 CVSROOT: /cvs Module name: ports Changes by: danj@cvs.openbsd.org 2026/05/06 19:38:19 Modified files: security/lego : Makefile distinfo modules.inc Log message: Update to lego-4.35.2 From Horia Racoviceanu (maintainer) CVSROOT: /cvs Module name: ports Changes by: danj@cvs.openbsd.org 2026/05/06 19:39:55 Modified files: databases/redis: Makefile distinfo Log message: Update to redis-6.2.22 (CVE-2026-25243) Invalid memory access in RESTORE may lead to Remote Code Execution CVSROOT: /cvs Module name: ports Changes by: tb@cvs.openbsd.org 2026/05/06 22:04:52 Modified files: devel/cargo-c : Makefile crates.inc distinfo Log message: Update to cargo-c 0.10.22 https://github.com/lu-zero/cargo-c/releases/tag/v0.10.22 CVSROOT: /cvs Module name: www Changes by: jsg@cvs.openbsd.org 2026/05/06 22:13:53 Modified files: . : 79.html Log message: correct asterisk and krita version numbers CVSROOT: /cvs Module name: ports Changes by: lraab@cvs.openbsd.org 2026/05/06 22:33:51 Modified files: sysutils/telegraf: Makefile distinfo modules.inc Log message: sysutils/telegraf: update to 1.38.3 from Atanas Vladimirov, thanks! CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/06 22:52:19 Added files: telephony/linphone: distinfo Log message: telephony/linphone: forgotten cvs add.. spotted by tb@ CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/06 22:54:02 Removed files: lang/wasi-sdk/libcxx/patches: patch-libcxx_include_CMakeLists_txt patch-runtimes_CMakeLists_txt Log message: lang/wasi-sdk/libcxx: forgot to cvs rm patches, spotted by tb@ CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/06 23:10:06 Removed files: telephony/linphone/belle-sip/patches: patch-src_belle_sip_resolver_c patch-src_channel_c patch-src_dns_dns_c patch-src_transports_udp_listeningpoint_c Log message: telephony/linphone: forgot to cvs rm belle-sip/patches/patch-*, spotted by naddy@ CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/06 23:16:13 Modified files: audio/mpd : Makefile distinfo audio/mpd/patches: patch-doc_meson_build patch-doc_mpdconf_example Log message: audio/mpd: update to 0.24.10 CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/06 23:19:43 Modified files: geo/gpxsee : Makefile distinfo Log message: geo/gpxsee: update to 16.6 CVSROOT: /cvs Module name: src Changes by: mlarkin@cvs.openbsd.org 2026/05/07 00:15:23 Modified files: usr.sbin/vmd : vmd.c Log message: fix copy-paste error assigning vmc owner fields from Jan Schreiber, thanks CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2026/05/07 00:31:44 Modified files: sys/dev/pci/drm/amd/amdgpu: amdgpu_gart.c amdgpu_vcn.h sys/dev/pci/drm/amd/display/dc: dc_dmub_srv.c Log message: drm/amd: Fix set but not used warnings From Tiezhu Yang 77eb3e79a3e75b1dff8d8a8a6772a7d0ceaeccb5 in linux-6.18.y/6.18.27 46791d147d3ab3262298478106ef2a52fc7192e2 in mainline linux CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2026/05/07 00:34:30 Modified files: sys/dev/pci/drm/amd/amdgpu: jpeg_v4_0_3.c Log message: amdgpu/jpeg: fix deepsleep register for jpeg 5_0_0 and 5_0_2 From David (Ming Qiang) Wu f7d9d0e4a64fe42c4f25e2a4fbabe3887efbb490 in linux-6.18.y/6.18.27 e90dc3b2d73986610476b02c29d0074aa4d92fb0 in mainline linux CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2026/05/07 00:36:31 Modified files: sys/dev/pci/drm/amd/amdgpu: amdgpu_ttm.c Log message: drm/amdgpu: fix zero-size GDS range init on RDNA4 From Arjan van de Ven 30c000a49094ec568c9b51b7421f7a4a3f0b0298 in linux-6.18.y/6.18.27 095a8b0ad3c3b5cdc3850d961adb8a8f735220bb in mainline linux CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/07 00:41:25 Modified files: devel/libgit2/libgit2: Makefile distinfo Log message: Update to libgit2-1.9.3. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/07 00:44:24 Modified files: graphics/openjph: Makefile distinfo Log message: Update to openjph-0.27.0. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/07 00:44:32 Modified files: graphics/openexr: Makefile distinfo Log message: Update to OpenEXR-3.4.11. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/07 00:52:55 Modified files: productivity/libphonenumber: Makefile distinfo Log message: Update to libphonenumber-9.0.29. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/07 01:07:45 Modified files: security/gnutls: Makefile distinfo security/gnutls/patches: patch-lib_x509_output_c patch-src_gl_fseeko_c security/gnutls/pkg: PLIST Log message: SECURITY update to gnutls-3.8.13. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/07 01:09:31 Modified files: security/gnutls/patches: patch-src_gl_fseeko_c Log message: Add comment. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/07 01:12:41 Modified files: security/libgpg-error: Makefile distinfo Log message: Update to libgpg-error-1.60. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/07 01:44:28 Modified files: x11/gtk+4 : Makefile distinfo Log message: Update to gtk+4-4.22.4. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/07 01:56:58 Modified files: inputmethods/ibus: Makefile distinfo inputmethods/ibus/patches: patch-bus_main_c inputmethods/ibus/pkg: PLIST-main Removed files: inputmethods/ibus/patches: patch-client_wayland_ibuswaylandim_c patch-client_x11_main_c patch-src_ibustext_c patch-ui_gtk3_panelbinding_vala patch-util_IMdkit_FrameMgr_c patch-util_IMdkit_XimProto_h patch-util_IMdkit_i18nMethod_c Log message: Update to ibus-1.5.34. CVSROOT: /cvs Module name: ports Changes by: bket@cvs.openbsd.org 2026/05/07 02:02:21 Modified files: news/sabnzbd : Makefile news/sabnzbd/pkg: PLIST Log message: news/sabnzbd: fix build with python 3.14 The 5.0.1 distfile included pre-compiled __pycache__ files for python 3.14, leading to duplicate entries in the PLIST. Nuke the upstream pycache during post-extract, sync the PLIST and bump REVISION. Found by tb@, fix suggested by sthen@ CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/07 02:33:50 Modified files: inputmethods/ibus-typing-booster: Makefile distinfo Log message: Update to ibus-typing-booster-2.30.7. CVSROOT: /cvs Module name: ports Changes by: otto@cvs.openbsd.org 2026/05/07 03:01:24 Modified files: net/powerdns_recursor: Makefile distinfo Log message: Update to PowerDNS Recursor 5.4.1 See https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2026-03.html CVSROOT: /cvs Module name: ports Changes by: otto@cvs.openbsd.org 2026/05/07 03:14:41 Modified files: net/dnsdist : Makefile distinfo Log message: Update to dnsdist 2.0.5 See https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-04.html CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2026/05/07 03:15:44 Modified files: usr.bin/tmux : key-bindings.c tmux.1 window-copy.c Log message: Add Emacs-style recentre-top-bottom, GitHub issue 5053 from sinyax75 at gmail dot com. CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/05/07 03:17:27 Modified files: usr.sbin/bgpd : session.h session.c control.c Log message: Convert the control_accept pauseaccept timeout to a deadline. In rev. 1.525 of session.c the pauseaccept was converted to a deadline. This part was missed in this conversion. OK tb@ CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/05/07 03:19:48 Modified files: usr.sbin/bgpd : rde_peer.c Log message: Use simpler logic to ensure path_id_tx is never 0 There is a theoretical case where the 0 conflict would be missed if this arc4random() returned 0 for the first peer. OK tb@ CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2026/05/07 03:21:05 Modified files: usr.bin/tmux : layout-custom.c window-copy.c Log message: Require layout prefix to be 5 characters, GitHub issue 5067 from cglosner at gmail dot com. CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/05/07 03:22:10 Modified files: usr.sbin/bgpd : chash.c Log message: Fix two memory accounting issues in chash - ch_table_resize() did not increase the global cc_num_extendible value - ch_sub_free() can be called with NULL pointer arguments and in that case the accounting must be skipped OK tb@ CVSROOT: /cvs Module name: src Changes by: robert@cvs.openbsd.org 2026/05/07 03:28:48 Modified files: gnu/llvm/libcxx/include: deque gnu/usr.bin/clang/llvm-tblgen: Makefile Log message: lower std::deque blocksize if _LIBCPP_USE_LOWER_DEQUE_BLOCK_SIZE is defined defining _LIBCPP_USE_LOWER_DEQUE_BLOCK_SIZE will make std::deque behave more in line with what libstdc++ is doing by using 512 byte blocks instead of 4096 to waste less memory this can be used by llvm-tblgen to reduce the memory usage of some operations which completely blow up with llvm22, so let's prepare now https://github.com/llvm/llvm-project/issues/31782 https://chromium.googlesource.com/android_ndk/+/eecd8c2d681b019efca486f92fdda9a93f52328f%5E%21/#F0 ok deraadt@ CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/05/07 03:42:26 Modified files: usr.sbin/bgpd : rde.c Log message: Fix treat as withdraw handling for invalid ORIGIN attributes If a prefix triggers the F_ATTR_PARSE_ERR case and therefor a RFC 7606 treat as withdraw rde_attr_parse() needs to return a success and not -1. The return (-1) was missed when the RFC 7606 handling was added. Move the F_ATTR_ORIGIN marker up to be more in line with other attributes. OK tb@ CVSROOT: /cvs Module name: ports Changes by: kirill@cvs.openbsd.org 2026/05/07 04:17:00 Modified files: net/ejabberd : Makefile distinfo modules.inc net/ejabberd/pkg: PLIST Log message: net/ejabberd: update to 26.04 Changes: https://www.process-one.net/blog/ejabberd-26-04/ CVSROOT: /cvs Module name: ports Changes by: rsadowski@cvs.openbsd.org 2026/05/07 04:58:50 Modified files: x11/qt6/qtwebengine: Makefile x11/qt6/qtwebengine/patches: patch-src_3rdparty_chromium_media_audio_sndio_sndio_output_cc patch-src_3rdparty_chromium_media_media_options_gni Log message: fix audio/sndio backend CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/05/07 05:21:24 Modified files: usr.sbin/bgpd : rde.h rde_rib.c Log message: Improve path_calc_hash() Includes other attributes into the hash calculation and also adjust the the span of hashed elements of struct rde_aspath to exclude aspa_generation. On top of this reshuffle the siphash calls to work on 64bit values first and only then other sizes. OK tb@ CVSROOT: /cvs Module name: ports Changes by: kirill@cvs.openbsd.org 2026/05/07 05:42:06 Modified files: graphics/ffmpeg: Makefile distinfo graphics/ffmpeg/patches: patch-configure Removed files: graphics/ffmpeg/patches: patch-libavcodec_libsvtav1_c Log message: graphics/ffmpeg: update to 8.0.2 CVSROOT: /cvs Module name: ports Changes by: sebastia@cvs.openbsd.org 2026/05/07 06:05:54 Modified files: misc/openhab/4 : Makefile misc/openhab/5 : Makefile misc/openhab/pkg: openhab.rc Log message: Use TRUEPREFIX instead of PREFIX in the rc script, to enable the service to start up. Nice catch: Chaz Kelleson (MAINTAINER) OK sthen@ CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/05/07 06:20:42 Modified files: usr.sbin/bgpd : session_bgp.c Log message: KNF CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/05/07 06:33:12 Modified files: usr.sbin/bgpd : rde_adjout.c Log message: Typecast idx to size_t so that the comparison is safe on 32bit arch. idx < 0 was already checked so casting this value from signed to unsigned is safe. OK tb@ CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/05/07 06:35:03 Modified files: usr.sbin/bgpctl: parser.c Log message: Default to STDIN_FILENO for the mrtfd so that the documented behaviour of using stdin in show mrt, if no file argument is used, is restored. OK tb@ CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/07 06:40:16 Modified files: textproc/enchant2: Makefile distinfo Log message: Update to enchant2-2.8.16. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/07 06:53:13 Modified files: x11/gnome/yelp : Makefile distinfo x11/gnome/yelp/pkg: PLIST Log message: Update to yelp-49.1. CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/07 07:05:36 Modified files: geo/mapserver : Makefile distinfo Log message: geo/mapserver: security update to 8.6.3 fixes https://github.com/MapServer/MapServer/security/advisories/GHSA-4h8g-378q-r75m NULL pointer dereference in SLD `` rule parsing reachable via WMS `SLD_BODY` CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/07 07:21:19 Modified files: devel/goffice : Makefile distinfo devel/goffice/pkg: PLIST Log message: Update to goffice-0.10.61. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/07 07:21:28 Modified files: math/gnumeric : Makefile distinfo math/gnumeric/pkg: PLIST Removed files: math/gnumeric/patches: patch-src_sstest_c Log message: Update to gnumeric-1.12.61. CVSROOT: /cvs Module name: ports Changes by: tb@cvs.openbsd.org 2026/05/07 07:33:47 Modified files: devel/jujutsu : Makefile crates.inc distinfo Log message: Update to jujutsu 0.41.0 https://github.com/jj-vcs/jj/releases/tag/v0.41.0 CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/07 07:38:05 Modified files: net/coredns : Makefile distinfo modules.inc net/coredns/pkg: PLIST Log message: Update to coredns-1.14.3. CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/07 07:40:20 Modified files: www/mozilla-firefox: Makefile distinfo www/firefox-i18n: Makefile.inc distinfo Log message: www/mozilla-firefox: update to 150.0.2. see https://www.firefox.com/en-US/firefox/150.0.2/releasenotes/ fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-40/ CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/07 07:41:20 Modified files: www/firefox-esr: Makefile distinfo www/firefox-esr-i18n: Makefile.inc distinfo Log message: www/firefox-esr: update to 140.10.2. see https://www.firefox.com/en-US/firefox/140.10.2/releasenotes/ fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-41/ CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/07 07:54:56 Modified files: sysutils/terragrunt: Makefile distinfo modules.inc Log message: Update to terragrunt-1.0.3. CVSROOT: /cvs Module name: ports Changes by: thfr@cvs.openbsd.org 2026/05/07 07:56:43 Modified files: games/dxx-rebirth: Makefile distinfo games/dxx-rebirth/patches: patch-SConstruct patch-similar_main_mglobal_cpp games/dxx-rebirth/pkg: README Removed files: games/dxx-rebirth/patches: patch-similar_2d_font_cpp Log message: Update dxx-rebirth to recent commit, switching to github dxx-rebirth as upstream (this is an active fork; original author has abandoned project). This fixes issues with scons build system and upcoming python 3.14. While here, update README instructions to be a little more generic, acknowledging reality that distfiles on GOG.com keep updating/ renaming. Diff from sthen@, I added the README changes. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/07 07:58:17 Modified files: sysutils/amazon-ssm-agent: Makefile distinfo Log message: Update to amazon-ssm-agent-3.3.4268.0. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/07 08:00:02 Modified files: sysutils/exoscale-cli: Makefile distinfo Log message: Update to exoscale-cli-1.94.2. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/07 08:06:09 Modified files: sysutils/google-cloud-sdk: Makefile distinfo sysutils/google-cloud-sdk/patches: patch-lib_googlecloudsdk_core_util_platforms_py sysutils/google-cloud-sdk/pkg: PLIST Log message: Update to google-cloud-sdk-567.0.0. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/07 08:13:18 Modified files: sysutils/libvirt: Makefile distinfo sysutils/libvirt/pkg: PLIST Log message: Update to libvirt-12.3.0. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/07 08:13:30 Modified files: sysutils/libvirt-python: Makefile distinfo Log message: Update to py3-libvirt-12.3.0. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/07 08:13:47 Modified files: sysutils/p5-Sys-Virt: Makefile distinfo Log message: Update to p5-Sys-Virt-12.3.0. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/07 08:17:23 Modified files: sysutils/deja-dup: Makefile distinfo Log message: Update to deja-dup-50.1. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/07 08:20:56 Modified files: sysutils/gemini-cli: Makefile distinfo sysutils/gemini-cli/pkg: PLIST Removed files: sysutils/gemini-cli/patches: patch-lib_node_modules_@google_gemini-cli_bundle_gemini_js Log message: Update to gemini-cli-0.41.1. CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/07 08:27:22 Modified files: sysutils/btop : Makefile distinfo sysutils/btop/patches: patch-Makefile sysutils/btop/pkg: PLIST Removed files: sysutils/btop/patches: patch-src_openbsd_btop_collect.cpp Log message: update to btop-1.4.7, from Laurent Cheylus CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/07 08:27:37 Modified files: sysutils/fzf : Makefile distinfo Log message: update to fzf-0.72.0, from Laurent Cheylus (maintainer) CVSROOT: /cvs Module name: src Changes by: martijn@cvs.openbsd.org 2026/05/07 08:35:12 Modified files: usr.sbin/snmpd : ax.c Log message: Include the padding length when testing the remaining bytes in an octet string, to prevent a size_t underflow on a malformed packet and make us run into infinity. OK deraadt@ CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/07 08:43:56 Modified files: x11/yaru : Makefile distinfo x11/yaru/patches: patch-gnome-shell_src_meson_build patch-icons_meson_build x11/yaru/pkg : PLIST Added files: x11/yaru/patches: patch-cinnamon-shell_src_meson_build patch-gtk_src_meson_build Log message: Update to yaru-26.04.5. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/07 08:44:08 Modified files: devel/spidermonkey140: Makefile distinfo devel/spidermonkey140/pkg: PLIST-main Log message: Update to spidermonkey140-140.10.1. CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/05/07 08:47:36 Modified files: usr.sbin/bgpd : session.c Log message: Template peers need to check xp->rdesession to know if the RDE has the session running or not. Right now it checks the template itself which is never synced. OK tb@ CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2026/05/07 08:48:27 Modified files: devel/snare : Makefile crates.inc distinfo Log message: update to snare-0.4.13, from Laurence Tratt (maintainer) CVSROOT: /cvs Module name: src Changes by: martijn@cvs.openbsd.org 2026/05/07 08:51:20 Modified files: lib/libagentx : ax.c Log message: Include the padding length when testing the remaining bytes in an octet string, to prevent a size_t underflow on a malformed packet and make us run into infinity. Same diff as for snmpd CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/05/07 08:58:03 Modified files: sys/netinet : ipsec_input.c Log message: In ipsec_common_input_cb() ensure that the packet size does not overflow the maximum packet size before writing the value back to the IP header. IPv4 and IPv6 have slightly different rules and so do it per AF. OK millert@ CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/07 08:59:36 Modified files: sysutils/consul: Makefile distinfo Log message: Update to consul-1.22.7. CVSROOT: /cvs Module name: ports Changes by: bket@cvs.openbsd.org 2026/05/07 09:13:26 Modified files: net/libfilezilla: Makefile distinfo net/libfilezilla/patches: patch-lib_impersonation_cpp Log message: Update to libfilezilla-0.55.5 Bump minor of shared lib CVSROOT: /cvs Module name: ports Changes by: bket@cvs.openbsd.org 2026/05/07 09:21:25 Log message: Import py-jsonargparse DESCR jsonargparse is a library for creating command-line interfaces (CLIs) and making Python apps easily configurable. OK sthen@ Status: Vendor Tag: bket Release Tags: bket_20260507 N ports/devel/py-jsonargparse/Makefile N ports/devel/py-jsonargparse/distinfo N ports/devel/py-jsonargparse/pkg/DESCR N ports/devel/py-jsonargparse/pkg/PLIST No conflicts created by this import CVSROOT: /cvs Module name: ports Changes by: bket@cvs.openbsd.org 2026/05/07 09:24:00 Modified files: devel : Makefile Log message: +py-jsonargparse CVSROOT: /cvs Module name: ports Changes by: rsadowski@cvs.openbsd.org 2026/05/07 09:27:18 Modified files: devel/kf6/purpose: Makefile Log message: Update diff 6.25.0 removed solid as dependency bring back as build depends depends Thanks tb@ CVSROOT: /cvs Module name: ports Changes by: bket@cvs.openbsd.org 2026/05/07 09:31:51 Modified files: databases/py-borgstore: Makefile distinfo databases/py-borgstore/pkg: PLIST Log message: Update to py-borgstore-0.4.0 Changes: https://github.com/borgbackup/borgstore/blob/0.4.0/CHANGES.rst CVSROOT: /cvs Module name: ports Changes by: bket@cvs.openbsd.org 2026/05/07 09:34:29 Modified files: sysutils/borgbackup: Makefile.inc sysutils/borgbackup/1.4: Makefile sysutils/borgbackup/2.0: Makefile distinfo sysutils/borgbackup/2.0/patches: patch-src_borg_testsuite_shell_completions_test_py sysutils/borgbackup/2.0/pkg: PLIST Log message: Update to borgbackup-2.0.0beta21 Changes: https://borgbackup.readthedocs.io/en/2.0.0b21/changes.html#version-2-0-0b21-2026-03-16 As a result some stuff had to be moved around between Makefile.inc, 1.4/Makefile and 2.0/Makefile. CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2026/05/07 09:38:03 Modified files: lib/libcrypto : crypto_assembly.h lib/libcrypto/sha: sha1_aarch64_ce.S sha1_amd64_generic.S sha1_amd64_shani.S sha256_aarch64_ce.S sha256_amd64_generic.S sha256_amd64_shani.S sha512_aarch64_ce.S sha512_amd64_generic.S Log message: Use a define based instruction separator in SHA assembly. Unfortunately, not all assemblers use the same instruction separator. In particular, LLVM on macOS uses %% as an instruction separator, while most other assemblers use a semi-colon. ok kenjiro@ tb@ CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2026/05/07 09:40:33 Modified files: lib/libcrypto : crypto_assembly.h lib/libcrypto/sha: sha1_aarch64_ce.S sha1_amd64_shani.S sha256_aarch64_ce.S sha256_amd64_generic.S sha256_amd64_shani.S sha512_aarch64_ce.S sha512_amd64_generic.S Log message: Use defines for text and rodata section names in SHA assembly. These vary between platforms. ok kenjiro@ tb@ CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2026/05/07 09:41:37 Modified files: lib/libcrypto : crypto_assembly.h lib/libcrypto/sha: sha256_aarch64_ce.S sha512_aarch64_ce.S Log message: Use defines for symbol offsets in aarch64 assembly. These also very between platforms. ok kenjiro@ tb@ CVSROOT: /cvs Module name: ports Changes by: tb@cvs.openbsd.org 2026/05/07 09:47:12 Modified files: devel/jjui : Makefile distinfo Log message: Update to jjui 0.10.4 https://github.com/idursun/jjui/releases/tag/v0.10.4 CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2026/05/07 09:50:47 Modified files: lib/libcrypto : crypto_assembly.h lib/libcrypto/sha: sha1_aarch64_ce.S sha1_amd64_generic.S sha1_amd64_shani.S sha256_aarch64_ce.S sha256_amd64_generic.S sha256_amd64_shani.S sha512_aarch64_ce.S sha512_amd64_generic.S Log message: Use macros for global functions and objects within SHA assembly. This lets us remove some of the repetitive statements and allows for them to be adjusted for various platforms. ok kenjiro@ tb@ CVSROOT: /cvs Module name: www Changes by: tj@cvs.openbsd.org 2026/05/07 10:25:14 Modified files: . : armv7.html hppa.html macppc.html pegasos.html pmax.html faq : faq10.html faq17.html faq/ports : specialtopics.html Log message: some grammar and spelling fixes CVSROOT: /cvs Module name: ports Changes by: volker@cvs.openbsd.org 2026/05/07 10:39:06 Modified files: sysutils/starship: Makefile crates.inc distinfo sysutils/starship/pkg: DESCR PLIST Log message: sysutils/starship: Update to 1.25.1 From Maintainer Lydia Sobot (thanks!) with tweaks from me CVSROOT: /cvs Module name: ports Changes by: volker@cvs.openbsd.org 2026/05/07 10:49:29 Modified files: lang/deno : Makefile crates.inc distinfo lang/deno/patches: patch-cli_Cargo_toml patch-cli_tools_upgrade_rs patch-ext_node_lib_rs patch-libs_core_uv_compat_tty_rs patch-modcargo-crates_v8-0_106_0_build_config_clang_BUILD_gn patch-modcargo-crates_v8-0_106_0_build_config_linux_pkg-config_py patch-modcargo-crates_v8-0_106_0_build_config_v8_target_cpu_gni patch-modcargo-crates_v8-0_106_0_build_toolchain_gcc_solink_wrapper_py patch-modcargo-crates_v8-0_106_0_build_toolchain_openbsd_BUILD_gn patch-modcargo-crates_v8-0_106_0_build_toolchain_toolchain_gni patch-modcargo-crates_v8-0_68_0_build_config_BUILDCONFIG_gn patch-modcargo-crates_v8-0_68_0_build_config_BUILD_gn patch-modcargo-crates_v8-0_68_0_build_config_compiler_BUILD_gn patch-modcargo-crates_v8-0_68_0_build_config_linux_BUILD_gn patch-modcargo-crates_v8-0_68_0_build_detect_host_arch_py patch-modcargo-crates_v8-0_68_0_build_rs patch-modcargo-crates_v8-0_68_0_build_toolchain_gcc_toolchain_gni patch-modcargo-crates_v8-0_68_0_v8_BUILD_gn patch-modcargo-crates_v8-0_68_0_v8_include_v8-internal_h patch-modcargo-crates_v8-0_68_0_v8_include_v8config_h patch-modcargo-crates_v8-0_68_0_v8_src_api_api_cc patch-modcargo-crates_v8-0_68_0_v8_src_base_atomicops_h patch-modcargo-crates_v8-0_68_0_v8_src_base_platform_platform-openbsd_cc patch-modcargo-crates_v8-0_68_0_v8_src_base_platform_platform-posix_cc patch-modcargo-crates_v8-0_68_0_v8_src_base_sys-info_cc patch-modcargo-crates_v8-0_68_0_v8_src_diagnostics_perf-jit_cc patch-modcargo-crates_v8-0_68_0_v8_src_diagnostics_perf-jit_h patch-modcargo-crates_v8-0_68_0_v8_src_execution_isolate_cc patch-modcargo-crates_v8-0_68_0_v8_src_sandbox_sandbox_cc patch-modcargo-crates_v8-0_68_0_v8_src_snapshot_embedded_platform-embedded-file-writer-base_cc patch-modcargo-crates_v8-0_68_0_v8_src_snapshot_embedded_platform-embedded-file-writer-base_h patch-modcargo-crates_v8-0_68_0_v8_src_snapshot_embedded_platform-embedded-file-writer-generic_cc patch-modcargo-crates_v8-0_68_0_v8_src_trap-handler_handler-inside-posix_cc patch-modcargo-crates_v8-0_68_0_v8_src_trap-handler_handler-inside-posix_h patch-modcargo-crates_v8-0_68_0_v8_src_trap-handler_trap-handler_h patch-modcargo-crates_v8-0_68_0_v8_tools_run_py patch-modcargo-crates_v8-0_74_2_v8_src_flags_flags_cc patch-modcargo-crates_v8-0_90_1_third_party_abseil-cpp_absl_base_config_h patch-modcargo-crates_v8-0_90_1_third_party_abseil-cpp_absl_base_internal_sysinfo_cc patch-modcargo-crates_v8-137_1_0_third_party_libc++_src_src_filesystem_filesystem_clock_cpp patch-modcargo-crates_v8-142_2_0_build_config_clang_clang_gni patch-modcargo-crates_v8-145_0_0_build_config_c++_modules_gni patch-modcargo-crates_v8-145_0_0_build_toolchain_sysroot_gni patch-modcargo-crates_v8-147_0_0__gn patch-modcargo-crates_v8-147_0_0_third_party_libunwind_src_src_Registers_hpp patch-runtime_js_99_main_js Log message: lang/deno: Update to 2.7.14 + remove MODCLANG_VERSION from SUBST_VARS, that was a leftover from an earlier attempt at getting v8 147.x to build CVSROOT: /cvs Module name: ports Changes by: volker@cvs.openbsd.org 2026/05/07 11:01:57 Log message: Import misc/fyi Comment: cli to send desktop notifications Description: FYI is a command line utility to send desktop notifications to the user via a notification daemon implementing XDG desktop notifications. WWW: https://codeberg.org/dnkl/fyi ok landry@ Status: Vendor Tag: volker Release Tags: volker_20260507 N ports/misc/fyi/Makefile N ports/misc/fyi/distinfo N ports/misc/fyi/pkg/DESCR N ports/misc/fyi/pkg/PLIST No conflicts created by this import CVSROOT: /cvs Module name: ports Changes by: volker@cvs.openbsd.org 2026/05/07 11:03:00 Modified files: misc : Makefile Log message: + fyi CVSROOT: /cvs Module name: src Changes by: bluhm@cvs.openbsd.org 2026/05/07 11:08:48 Modified files: lib/libexpat : Tag: OPENBSD_7_8 Changes lib/libexpat/lib: Tag: OPENBSD_7_8 internal.h xmlparse.c Log message: Backport fixes from libexpat version 2.8.0. Relevant for OpenBSD are security fixes #47 #1183. Library bump is not necessary. CVE-2026-41080 OK tb@ this is errata/7.8/034_expat.patch.sig CVSROOT: /cvs Module name: src Changes by: bluhm@cvs.openbsd.org 2026/05/07 11:09:29 Modified files: lib/libexpat : Tag: OPENBSD_7_7 Changes lib/libexpat/lib: Tag: OPENBSD_7_7 internal.h xmlparse.c Log message: Backport fixes from libexpat version 2.8.0. Relevant for OpenBSD are security fixes #47 #1183. Library bump is not necessary. CVE-2026-41080 OK tb@ this is errata/7.7/040_expat.patch.sig CVSROOT: /cvs Module name: src Changes by: bluhm@cvs.openbsd.org 2026/05/07 11:27:25 Modified files: sys/nfs : Tag: OPENBSD_7_8 nfs_serv.c Log message: Add checks for invalid dir count and max size for readdir/readdirplus. A zero count or max size value is now rejected early instead of relying on VOP_GETATTR to return an error. Also verify that the max size after rounding up to a multiple of DIRBLKSIZ is positive. A negative value would turn into a large allocation, causing the malloc() to fail. From an LLM bug report. With help from miod@ and kirill@. from millert@ this is errata/7.8/035_nfs.patch.sig CVSROOT: /cvs Module name: src Changes by: bluhm@cvs.openbsd.org 2026/05/07 11:27:42 Modified files: sys/nfs : Tag: OPENBSD_7_7 nfs_serv.c Log message: Add checks for invalid dir count and max size for readdir/readdirplus. A zero count or max size value is now rejected early instead of relying on VOP_GETATTR to return an error. Also verify that the max size after rounding up to a multiple of DIRBLKSIZ is positive. A negative value would turn into a large allocation, causing the malloc() to fail. From an LLM bug report. With help from miod@ and kirill@. from millert@ this is errata/7.7/041_nfs.patch.sig CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/07 11:28:41 Modified files: sysutils/terraform: Makefile distinfo Log message: Update to terraform-1.15.1. CVSROOT: /cvs Module name: ports Changes by: volker@cvs.openbsd.org 2026/05/07 11:29:25 Modified files: wayland/fnott/pkg: DESCR Log message: wayland/fnott: Tweak description The project homepage advertises that fnott works for *wlroots-based* Wayland compositors, however it works with others as well CVSROOT: /cvs Module name: src Changes by: bluhm@cvs.openbsd.org 2026/05/07 11:36:35 Modified files: sbin/iked : Tag: OPENBSD_7_8 ikev2.c Log message: check address size; from markus via millert from deraadt@ this is errata/7.8/036_iked.patch.sig CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/07 11:36:39 Modified files: sysutils/nomad : Makefile distinfo Log message: Update to nomad-2.0.0. CVSROOT: /cvs Module name: src Changes by: bluhm@cvs.openbsd.org 2026/05/07 11:36:58 Modified files: sbin/iked : Tag: OPENBSD_7_7 ikev2.c Log message: check address size; from markus via millert from deraadt@ this is errata/7.7/042_iked.patch.sig CVSROOT: /cvs Module name: ports Changes by: edd@cvs.openbsd.org 2026/05/07 11:57:41 Modified files: net/wormhole-william: Makefile distinfo modules.inc Log message: net/wormhole-willian: update to version 1.0.8. Apparently this fixes the riscv64 build also. Diff from "mischief ". OK sthen@. Thanks both. CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/05/07 11:59:15 Modified files: usr.sbin/bgpd : session.c Log message: In session_graceful_restart() also arm the SessionDown timer session_graceful_restart() does more or less the same as session_down() and therefor needs to arm the SessionDown timer and on top of that update stats.last_updown. The interval for the SessionDown timer needs to depend on the graceful restart timer, since that one needs to fire first. OK tb@ CVSROOT: /cvs Module name: src Changes by: deraadt@cvs.openbsd.org 2026/05/07 11:59:56 Modified files: lib/libc/gen : getpwent.c Log message: In the yp_next() case, on error the key memory is leaked. Hiding in an unrelated diff from Frank Denis ok millert jmatthew CVSROOT: /cvs Module name: ports Changes by: pascal@cvs.openbsd.org 2026/05/07 12:02:36 Modified files: textproc/cookcli: Makefile crates.inc distinfo Log message: Update to CookCLI 0.29.1. Same diff from bket@ CVSROOT: /cvs Module name: ports Changes by: tb@cvs.openbsd.org 2026/05/07 12:14:22 Modified files: x11/mplayer : Makefile Log message: mplayer: sync ffmpeg version; from kirill CVSROOT: /cvs Module name: src Changes by: deraadt@cvs.openbsd.org 2026/05/07 12:21:27 Modified files: lib/libc/gen : getpwent.c Log message: A collection of AI-assisted reports come from Frank Denis, which says that the YP getpwent code when doing YP operations has a group of buffer mismanagement issues which in the reports are labelled 'high severity'. This fixes the buffer checks. In reality, the memory being operated on is always a full page so the overflow onto unmanagement memory is hard to see as a risk. The big question to ask is this: Is a malicious YP server going to send you messages that exercise a buffer overflow codepath, or are they going to send you perfectly correct messages containing :0:0: ? The old-school ypserv model was that you run ypserv on a "trusted network" segment, which today is laughable but it matched operations in that era. (Our) new operational model is that ypbind is reached with a custom system call and provides trusted path to a an on-host ypserv, which is more likely to be the ypldap(8) LDAP schema to YP protocol converter. If a YP server is broken and sending bad messages, THIS code is the least of your worries. High severity? No. ok millert jmatthew CVSROOT: /cvs Module name: src Changes by: deraadt@cvs.openbsd.org 2026/05/07 12:22:26 Modified files: lib/libc/gen : getgrent.c Log message: A collection of AI-assisted reports come from Frank Denis, which says that the YP getgrent code when doing YP operations has a group of buffer mismanagement issues which in the reports are labelled 'high severity'. This fixes the buffer checks. The big question to ask is this: Is a malicious YP server going to send you messages that exercise a buffer overflow codepath, or are they going to send you perfectly correct messages containing wrong group members? The old-school ypserv model was that you run ypserv on a "trusted network" segment, which today is laughable but it matched operations in that era. (Our) new operational model is that ypbind is reached with a custom system call and provides trusted path to a an on-host ypserv, which is more likely to be the ypldap(8) LDAP schema to YP protocol converter. If a YP server is broken and sending bad messages, THIS code is the least of your worries. High severity? No. ok millert jmatthew CVSROOT: /cvs Module name: ports Changes by: edd@cvs.openbsd.org 2026/05/07 12:22:58 Modified files: editors/neovim : Makefile distinfo editors/neovim/pkg: PLIST Log message: editors/neovim: update to v0.12.2. Diff from Laurent Cheylus, thanks! CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/05/07 12:55:05 Modified files: usr.sbin/bgpd : parse.y Log message: Reduce maximum configurable stale time to CAPA_GR_TIMEMASK (4095) since that is the maximum anyway. OK tb@ CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/05/07 12:56:38 Modified files: usr.sbin/bgpd : bgpd.h Log message: Convert grestart.timeout to uint16_t while the value can never be negative the compiler trips over this in a comparison with u_int. OK tb@ CVSROOT: /cvs Module name: ports Changes by: tb@cvs.openbsd.org 2026/05/07 13:04:06 Modified files: net/kea : Makefile Added files: net/kea/patches: patch-src_lib_log_logger_level_impl_cc Log message: kea: fix build with Boost 1.90 by adding a missing include CVSROOT: /cvs Module name: ports Changes by: tb@cvs.openbsd.org 2026/05/07 13:10:12 Modified files: textproc/luceneplusplus: Makefile Added files: textproc/luceneplusplus/patches: patch-include_lucene++_BitSet_h patch-src_core_util_BitSet_cpp Log message: luceneplusplus: unbreak build with boost 1.90 CVSROOT: /cvs Module name: ports Changes by: pascal@cvs.openbsd.org 2026/05/07 13:20:13 Modified files: textproc/xan : Makefile crates.inc distinfo Log message: Update to xan 0.57.1. CVSROOT: /cvs Module name: ports Changes by: anton@cvs.openbsd.org 2026/05/07 13:23:46 Modified files: mail/mdsort : Makefile distinfo Log message: update to mdsort-11.6.1 CVSROOT: /cvs Module name: www Changes by: bluhm@cvs.openbsd.org 2026/05/07 13:23:53 Modified files: . : errata77.html errata78.html Log message: Release expat nfs iked errata. CVSROOT: /cvs Module name: ports Changes by: anton@cvs.openbsd.org 2026/05/07 13:32:09 Modified files: devel/knfmt : Makefile distinfo Log message: update to knfmt-5.3.0 CVSROOT: /cvs Module name: ports Changes by: rsadowski@cvs.openbsd.org 2026/05/07 13:35:01 Modified files: devel/kf6/purpose: Makefile Log message: More new QML dependencies ecm_find_qmlmodule(org.kde.prison REQUIRED) ecm_find_qmlmodule(org.kde.kitemmodels REQUIRED) ecm_find_qmlmodule(org.kde.kcmutils REQUIRED) Spotted by tb (again), thanks CVSROOT: /cvs Module name: ports Changes by: anton@cvs.openbsd.org 2026/05/07 13:38:47 Modified files: devel/robsd : Makefile distinfo Log message: update to robsd-21.1.0 CVSROOT: /cvs Module name: ports Changes by: tb@cvs.openbsd.org 2026/05/07 14:04:10 Modified files: productivity/gnucash/patches: patch-CMakeLists_txt Log message: gnucash: pull in upstream fix for required libs for boost >=1.90 ok aja (maintainer) CVSROOT: /cvs Module name: ports Changes by: caspar@cvs.openbsd.org 2026/05/07 14:10:51 Modified files: meta/tor-browser: Makefile www/tor-browser: Makefile.inc www/tor-browser/browser: Makefile distinfo Log message: Tor Browser: update to 15.0.12 CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/05/07 14:35:19 Modified files: usr.sbin/bgpd : mrt.c rde.c rde_attr.c rde_update.c Log message: Use unsigned int for the length variable when traversing the others array. Doing this in all places now after fixing an overflow in attr_optadd(). OK tb@ deraadt@ CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2026/05/07 15:08:40 Modified files: regress/usr.sbin/bgpd/integrationtests: Makefile Log message: Add forgotten addpath regress test. CVSROOT: /cvs Module name: ports Changes by: fcambus@cvs.openbsd.org 2026/05/07 15:46:01 Modified files: lang/wabt : Makefile distinfo lang/wabt/patches: patch-src_tools_wasm-stats_cc patch-src_tools_wasm-validate_cc patch-src_tools_wasm2c_cc patch-src_tools_wasm2wat_cc patch-src_tools_wast2json_cc patch-src_tools_wat-desugar_cc patch-src_tools_wat2wasm_cc Log message: Update wabt to 1.0.41. CVSROOT: /cvs Module name: ports Changes by: fcambus@cvs.openbsd.org 2026/05/07 16:06:48 Modified files: sysutils/psftools: Makefile distinfo sysutils/psftools/pkg: PLIST Log message: Update psftools to 1.1.3. CVSROOT: /cvs Module name: ports Changes by: kirill@cvs.openbsd.org 2026/05/07 17:06:09 Modified files: devel/codex : Makefile distinfo devel/codex/patches: patch-codex-rs_Cargo_toml patch-codex-rs_core_src_config_mod_rs devel/codex/pkg: PLIST Log message: devel/codex: update to 0.129.0 CVSROOT: /cvs Module name: ports Changes by: kn@cvs.openbsd.org 2026/05/07 17:13:36 Modified files: net/tdesktop : Makefile distinfo Log message: update to tdesktop 6.8.0 CVSROOT: /cvs Module name: ports Changes by: tb@cvs.openbsd.org 2026/05/07 18:42:43 Modified files: devel/mergiraf : Makefile crates.inc distinfo Log message: Update to mergiraf 0.17.0 https://codeberg.org/mergiraf/mergiraf/releases/tag/v0.17.0 CVSROOT: /cvs Module name: www Changes by: kmos@cvs.openbsd.org 2026/05/07 18:56:45 Modified files: . : plus.html Log message: Changelog for April 4th through the 8th Done by pamela@. Manpage markup by me. CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2026/05/07 21:36:04 Modified files: sys/net : if_trunk.h sbin/ifconfig : ifconfig.c Log message: make ifconfig build without trunklacp.h The only used part of trunklacp.h in ifconfig is LACP_STATE_BITS. Add it to if_trunk.h so trunklacp.h can be removed. ok dlg@ CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2026/05/07 21:45:29 Removed files: sys/net : trunklacp.c trunklacp.h Log message: remove unused trunklacp code trunklacp.c is not built since January's 'remove lacp support from trunk(4)' ok dlg@ CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/05/07 22:01:04 Modified files: regress/lib/libc/asr/bin: threads.c Log message: asr regress: extern three variables to fix build with -fcommon CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/05/07 22:02:24 Modified files: regress/lib/libc/asr/bin: Makefile.inc Log message: asr regress: set -Wno-unused-but-set-variables in CFLAGS This allows building without modifying some debugging code. CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/05/07 22:02:59 Modified files: regress/lib/libc/asr: regress.subr Log message: asr regress: /etc/networks was removed in 2018 CVSROOT: /cvs Module name: ports Changes by: jeremy@cvs.openbsd.org 2026/05/07 22:11:42 Modified files: lang/ruby/4.0 : Makefile distinfo lang/ruby/4.0/patches: patch-lib_rubygems_rb lang/ruby/4.0/pkg: PLIST-main Log message: Update to Ruby 4.0.3 Fixes CVE-2026-41316 OK tb@ CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/05/07 22:13:44 Modified files: regress/lib/libc/asr: regress.sh Log message: asr regress: workaround due to removal of . from the path Since . is no longer part of the default path, . regress.subr no longer works. Use ${PWD}. With this, the regress appears to mostly work except for what looks like ordering issues and of course it isn't using bsd.regress.mk. I leave the former to the DNS experts and the latter to the regress experts if they're interested. CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/05/07 22:28:28 Modified files: lib/libcrypto/x509: x509_purp.c Log message: x509_purp: fix doc comment for check_ca() This comment has gotten out of sync with reality. The "I don't know..." fallback was removed and a special case for netscape CAs was added. Sync from the manual and add some more details. Pointed out by Maximilian Radoy in https://github.com/libressl/portable/issues/1274 ok kenjiro CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2026/05/07 23:15:20 Modified files: lib/libcrypto/ripemd: ripemd.h Log message: remove bogus ifdefs; ok tb@ CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/05/07 23:26:32 Modified files: usr.sbin/bgpd : parse.y Log message: bgpd: switch two for loop index from u8 to u_int ok claudio CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/05/07 23:27:25 Modified files: usr.sbin/bgpd : parse.y Log message: bgpd: switch last u_int8_t to uint8_t ok claudio CVSROOT: /cvs Module name: ports Changes by: rsadowski@cvs.openbsd.org 2026/05/07 23:31:17 Modified files: devel/kf6/purpose: Makefile Log message: Yet another missing build/run QML dependency CVSROOT: /cvs Module name: ports Changes by: renaud@cvs.openbsd.org 2026/05/08 00:08:37 Modified files: geo/traccar : Makefile distinfo geo/traccar/pkg: PLIST Log message: Update to 6.13.3 OK sthen CVSROOT: /cvs Module name: ports Changes by: robert@cvs.openbsd.org 2026/05/08 00:13:30 Modified files: devel/llvm : Makefile Log message: hook llvm/22 up to the build; required by the chromium ports CVSROOT: /cvs Module name: ports Changes by: robert@cvs.openbsd.org 2026/05/08 00:14:25 Modified files: www/chromium : Makefile distinfo www/chromium/patches: patch-base_BUILD_gn patch-base_allocator_partition_allocator_partition_alloc_gni patch-base_allocator_partition_allocator_src_partition_alloc_BUILD_gn patch-base_allocator_partition_allocator_src_partition_alloc_partition_alloc_base_debug_proc_maps_linux_cc patch-base_allocator_partition_allocator_src_partition_alloc_partition_alloc_constants_h patch-base_debug_stack_trace_posix_cc patch-base_files_file_path_watcher_h patch-base_files_file_util_unittest_cc patch-base_memory_platform_shared_memory_region_posix_cc patch-base_rand_util_posix_cc patch-base_system_sys_info_h patch-base_threading_platform_thread_posix_cc patch-build_config_compiler_BUILD_gn patch-build_config_linux_pkg-config_py patch-build_rust_std_BUILD_gn patch-build_toolchain_gcc_toolchain_gni patch-cc_base_features_cc patch-chrome_browser_BUILD_gn patch-chrome_browser_about_flags_cc patch-chrome_browser_background_extensions_background_mode_manager_cc patch-chrome_browser_background_glic_glic_status_icon_cc patch-chrome_browser_browser_features_cc patch-chrome_browser_browser_process_impl_cc patch-chrome_browser_browser_process_impl_h patch-chrome_browser_chrome_browser_interface_binders_cc patch-chrome_browser_chrome_browser_interface_binders_webui_cc patch-chrome_browser_chrome_browser_interface_binders_webui_parts_desktop_cc patch-chrome_browser_chrome_browser_main_cc patch-chrome_browser_chrome_content_browser_client_cc patch-chrome_browser_chrome_content_browser_client_h patch-chrome_browser_chrome_content_browser_client_navigation_throttles_cc patch-chrome_browser_collaboration_messaging_messaging_backend_service_factory_cc patch-chrome_browser_component_updater_registration_cc patch-chrome_browser_download_chrome_download_manager_delegate_cc patch-chrome_browser_download_download_item_model_cc patch-chrome_browser_enterprise_browser_management_browser_management_service_cc patch-chrome_browser_enterprise_connectors_common_cc patch-chrome_browser_extensions_BUILD_gn patch-chrome_browser_extensions_api_enterprise_reporting_private_enterprise_reporting_private_api_cc patch-chrome_browser_extensions_api_passwords_private_passwords_private_delegate_impl_cc patch-chrome_browser_extensions_api_settings_private_prefs_util_cc patch-chrome_browser_extensions_api_tabs_tabs_api_cc patch-chrome_browser_extensions_api_webstore_private_webstore_private_api_cc patch-chrome_browser_extensions_sync_extension_sync_service_cc patch-chrome_browser_file_system_access_chrome_file_system_access_permission_context_cc patch-chrome_browser_flag_descriptions_h patch-chrome_browser_glic_host_glic_page_handler_cc patch-chrome_browser_glic_widget_glic_widget_cc patch-chrome_browser_global_features_cc patch-chrome_browser_memory_details_cc patch-chrome_browser_metrics_chrome_browser_main_extra_parts_metrics_cc patch-chrome_browser_metrics_chrome_metrics_service_client_cc patch-chrome_browser_net_profile_network_context_service_cc patch-chrome_browser_net_system_network_context_manager_cc patch-chrome_browser_notifications_notification_display_service_impl_cc patch-chrome_browser_ntp_tiles_chrome_most_visited_sites_factory_cc patch-chrome_browser_page_load_metrics_page_load_metrics_initialize_cc patch-chrome_browser_password_manager_chrome_password_manager_client_cc patch-chrome_browser_platform_util_linux_cc patch-chrome_browser_policy_configuration_policy_handler_list_factory_cc patch-chrome_browser_prefs_browser_prefs_cc patch-chrome_browser_profiles_chrome_browser_main_extra_parts_profiles_cc patch-chrome_browser_profiles_profile_impl_cc patch-chrome_browser_renderer_context_menu_render_view_context_menu_cc patch-chrome_browser_safe_browsing_safe_browsing_pref_change_handler_cc patch-chrome_browser_safe_browsing_safe_browsing_pref_change_handler_h patch-chrome_browser_safe_browsing_safe_browsing_service_cc patch-chrome_browser_screen_ai_screen_ai_service_handler_base_cc patch-chrome_browser_sessions_session_restore_cc patch-chrome_browser_signin_chrome_signin_client_cc patch-chrome_browser_signin_signin_hats_util_cc patch-chrome_browser_sync_test_integration_sync_service_impl_harness_cc patch-chrome_browser_themes_theme_service_cc patch-chrome_browser_ui_accelerator_table_cc patch-chrome_browser_ui_browser_command_controller_cc patch-chrome_browser_ui_browser_commands_cc patch-chrome_browser_ui_browser_h patch-chrome_browser_ui_browser_ui_prefs_cc patch-chrome_browser_ui_browser_window_internal_browser_window_features_cc patch-chrome_browser_ui_browser_window_public_browser_window_features_h patch-chrome_browser_ui_chrome_pages_cc patch-chrome_browser_ui_chrome_pages_h patch-chrome_browser_ui_hats_survey_config_cc patch-chrome_browser_ui_passwords_manage_passwords_ui_controller_cc patch-chrome_browser_ui_sad_tab_cc patch-chrome_browser_ui_signin_signin_view_controller_cc patch-chrome_browser_ui_startup_bad_flags_prompt_cc patch-chrome_browser_ui_startup_infobar_utils_cc patch-chrome_browser_ui_startup_startup_browser_creator_impl_cc patch-chrome_browser_ui_startup_startup_tab_provider_cc patch-chrome_browser_ui_tab_helpers_cc patch-chrome_browser_ui_tabs_public_tab_features_h patch-chrome_browser_ui_tabs_tab_features_cc patch-chrome_browser_ui_tabs_tab_strip_prefs_cc patch-chrome_browser_ui_ui_features_cc patch-chrome_browser_ui_ui_features_h patch-chrome_browser_ui_views_data_sharing_collaboration_controller_delegate_desktop_cc patch-chrome_browser_ui_views_frame_browser_view_cc patch-chrome_browser_ui_views_frame_system_menu_model_builder_cc patch-chrome_browser_ui_views_frame_system_menu_model_delegate_cc patch-chrome_browser_ui_views_location_bar_location_bar_view_cc patch-chrome_browser_ui_views_new_tab_footer_footer_controller_cc patch-chrome_browser_ui_views_profiles_avatar_toolbar_button_cc patch-chrome_browser_ui_views_profiles_first_run_flow_controller_cc patch-chrome_browser_ui_views_profiles_profile_picker_view_cc patch-chrome_browser_ui_views_tabs_dragging_tab_drag_controller_cc patch-chrome_browser_ui_views_tabs_projects_projects_panel_thread_item_view_cc patch-chrome_browser_ui_views_tabs_tab_cc patch-chrome_browser_ui_views_tabs_tab_style_views_cc patch-chrome_browser_ui_views_tabs_vertical_vertical_tab_group_header_view_cc patch-chrome_browser_ui_views_toolbar_toolbar_view_cc patch-chrome_browser_ui_views_user_education_browser_user_education_service_cc patch-chrome_browser_ui_views_web_apps_web_app_integration_test_driver_cc patch-chrome_browser_ui_web_applications_web_app_ui_manager_impl_cc patch-chrome_browser_ui_web_applications_web_app_ui_manager_impl_h patch-chrome_browser_ui_webui_about_about_ui_cc patch-chrome_browser_ui_webui_browser_webui_browser_window_cc patch-chrome_browser_ui_webui_chrome_web_ui_configs_cc patch-chrome_browser_ui_webui_connectors_internals_connectors_internals_page_handler_cc patch-chrome_browser_ui_webui_cr_components_searchbox_searchbox_handler_cc patch-chrome_browser_ui_webui_history_history_identity_state_watcher_cc patch-chrome_browser_ui_webui_management_management_ui_cc patch-chrome_browser_ui_webui_management_management_ui_constants_cc patch-chrome_browser_ui_webui_management_management_ui_constants_h patch-chrome_browser_ui_webui_management_management_ui_handler_cc patch-chrome_browser_ui_webui_settings_appearance_handler_cc patch-chrome_browser_ui_webui_settings_settings_localized_strings_provider_cc patch-chrome_browser_ui_webui_settings_site_settings_handler_cc patch-chrome_browser_ui_webui_side_panel_customize_chrome_customize_chrome_page_handler_cc patch-chrome_browser_ui_webui_user_education_internals_user_education_internals_page_handler_impl_cc patch-chrome_browser_web_applications_commands_launch_web_app_command_cc patch-chrome_browser_web_applications_os_integration_os_integration_manager_cc patch-chrome_browser_web_applications_test_os_integration_test_override_impl_cc patch-chrome_browser_web_applications_test_os_integration_test_override_impl_h patch-chrome_browser_web_applications_web_app_cc patch-chrome_browser_webauthn_chrome_authenticator_request_delegate_cc patch-chrome_browser_webauthn_enclave_manager_cc patch-chrome_common_chrome_features_cc patch-chrome_common_chrome_features_h patch-chrome_common_chrome_switches_cc patch-chrome_common_chrome_switches_h patch-chrome_common_pref_names_h patch-chrome_common_url_constants_h patch-chrome_common_webui_url_constants_cc patch-chrome_common_webui_url_constants_h patch-chrome_renderer_chrome_content_renderer_client_cc patch-chrome_updater_configurator_cc patch-chrome_updater_util_posix_util_cc patch-components_BUILD_gn patch-components_autofill_core_browser_payments_amount_extraction_manager_cc patch-components_autofill_core_browser_payments_bnpl_manager_cc patch-components_autofill_core_common_autofill_payments_features_cc patch-components_collaboration_public_collaboration_controller_delegate_h patch-components_dbus_xdg_file_transfer_portal_cc patch-components_device_signals_core_common_signals_features_cc patch-components_device_signals_core_common_signals_features_h patch-components_discardable_memory_service_discardable_shared_memory_manager_cc patch-components_enterprise_data_controls_core_browser_rule_cc patch-components_error_page_common_localized_error_cc patch-components_feature_engagement_public_feature_configurations_cc patch-components_feature_engagement_public_feature_constants_cc patch-components_feature_engagement_public_feature_constants_h patch-components_feature_engagement_public_feature_list_cc patch-components_feature_engagement_public_feature_list_h patch-components_feed_core_v2_feed_network_impl_unittest_cc patch-components_gwp_asan_crash_handler_crash_analyzer_cc patch-components_media_router_common_media_source_cc patch-components_metrics_drive_metrics_provider_cc patch-components_named_mojo_ipc_server_connection_info_h patch-components_optimization_guide_core_feature_registry_feature_registration_cc patch-components_optimization_guide_core_optimization_guide_features_cc patch-components_optimization_guide_core_optimization_guide_util_cc patch-components_paint_preview_browser_paint_preview_client_cc patch-components_paint_preview_player_player_compositor_delegate_cc patch-components_password_manager_core_browser_features_password_features_cc patch-components_password_manager_core_browser_features_password_features_h patch-components_password_manager_core_browser_password_autofill_manager_cc patch-components_password_manager_core_browser_password_autofill_manager_h patch-components_password_manager_core_browser_password_form_manager_cc patch-components_password_manager_core_browser_password_manager_client_h patch-components_password_manager_core_browser_password_manual_fallback_flow_cc patch-components_password_manager_core_browser_password_manual_fallback_flow_h patch-components_password_manager_core_browser_stub_password_manager_client_cc patch-components_password_manager_core_browser_stub_password_manager_client_h patch-components_safe_browsing_core_browser_realtime_url_lookup_service_base_cc patch-components_search_engines_template_url_service_cc patch-components_signin_public_base_signin_switches_cc patch-components_signin_public_base_signin_switches_h patch-components_soda_soda_util_cc patch-components_sync_device_info_local_device_info_util_cc patch-components_sync_service_sync_prefs_cc patch-components_user_education_views_help_bubble_view_cc patch-components_variations_service_variations_service_cc patch-components_viz_host_host_display_client_cc patch-components_viz_service_display_embedder_skia_output_surface_impl_cc patch-components_viz_service_gl_gpu_service_impl_cc patch-components_viz_service_gl_gpu_service_impl_h patch-components_webui_flags_flags_state_cc patch-content_browser_BUILD_gn patch-content_browser_accessibility_browser_accessibility_state_impl_auralinux_cc patch-content_browser_browser_main_loop_cc patch-content_browser_compositor_viz_process_transport_factory_cc patch-content_browser_devtools_devtools_frontend_host_impl_cc patch-content_browser_file_system_access_file_path_watcher_file_path_watcher_h patch-content_browser_renderer_host_delegated_frame_host_cc patch-content_browser_renderer_host_render_process_host_impl_cc patch-content_browser_renderer_host_render_view_host_impl_cc patch-content_browser_renderer_host_render_widget_host_view_aura_cc patch-content_browser_scheduler_responsiveness_jank_monitor_impl_cc patch-content_browser_scheduler_responsiveness_native_event_observer_cc patch-content_browser_scheduler_responsiveness_native_event_observer_h patch-content_browser_service_host_utility_process_host_cc patch-content_browser_web_contents_web_contents_view_aura_cc patch-content_common_BUILD_gn patch-content_common_features_cc patch-content_common_features_h patch-content_gpu_gpu_main_cc patch-content_public_browser_content_browser_client_cc patch-content_public_common_content_features_cc patch-content_public_common_content_switches_cc patch-content_public_common_content_switches_h patch-content_renderer_render_thread_impl_cc patch-content_renderer_renderer_blink_platform_impl_cc patch-content_renderer_renderer_blink_platform_impl_h patch-content_renderer_renderer_main_cc patch-content_shell_BUILD_gn patch-content_shell_browser_shell_platform_delegate_views_cc patch-content_shell_renderer_shell_content_renderer_client_cc patch-content_utility_services_cc patch-device_fido_public_features_cc patch-device_gamepad_public_cpp_gamepad_features_cc patch-device_gamepad_public_cpp_gamepad_features_h patch-gpu_command_buffer_service_dawn_context_provider_cc patch-gpu_command_buffer_service_gles2_cmd_decoder_cc patch-gpu_command_buffer_service_shared_context_state_h patch-gpu_command_buffer_service_shared_image_external_vk_image_backing_cc patch-gpu_command_buffer_service_shared_image_external_vk_image_backing_factory_cc patch-gpu_command_buffer_service_shared_image_shared_image_factory_cc patch-gpu_command_buffer_service_shared_image_shared_image_manager_cc patch-gpu_command_buffer_service_webgpu_decoder_impl_cc patch-gpu_config_gpu_finch_features_cc patch-gpu_ipc_service_gpu_init_cc patch-headless_BUILD_gn patch-headless_lib_browser_headless_content_browser_client_cc patch-headless_lib_headless_content_main_delegate_cc patch-media_base_media_switches_cc patch-media_base_media_switches_h patch-media_base_video_frame_cc patch-media_base_video_frame_h patch-media_capture_video_create_video_capture_device_factory_cc patch-media_capture_video_fake_video_capture_device_factory_cc patch-media_capture_video_linux_v4l2_capture_delegate_cc patch-media_capture_video_linux_video_capture_device_factory_v4l2_cc patch-media_capture_video_linux_video_capture_device_factory_v4l2_h patch-media_ffmpeg_scripts_build_ffmpeg_py patch-media_gpu_v4l2_v4l2_utils_cc patch-media_gpu_vaapi_vaapi_video_decoder_cc patch-media_gpu_vaapi_vaapi_wrapper_cc patch-media_media_options_gni patch-media_video_mappable_shared_image_video_frame_pool_cc patch-media_video_renderable_mappable_shared_image_video_frame_pool_cc patch-media_video_video_encode_accelerator_adapter_cc patch-media_webrtc_audio_processor_cc patch-media_webrtc_helpers_cc patch-mojo_public_tools_bindings_mojom_gni patch-net_BUILD_gn patch-net_base_features_cc patch-net_dns_BUILD_gn patch-net_dns_dns_util_cc patch-net_dns_public_BUILD_gn patch-net_socket_tcp_socket_posix_cc patch-net_url_request_url_request_context_builder_cc patch-net_url_request_url_request_context_h patch-net_websockets_websocket_basic_stream_adapters_test_cc patch-remoting_host_base_switches_cc patch-remoting_host_base_switches_h patch-remoting_host_chromoting_host_cc patch-remoting_host_chromoting_host_h patch-remoting_host_chromoting_host_services_client_cc patch-remoting_host_desktop_process_main_cc patch-remoting_host_host_main_cc patch-remoting_host_ipc_constants_cc patch-remoting_host_ipc_constants_h patch-remoting_host_ipc_desktop_environment_h patch-remoting_host_mojo_caller_security_checker_cc patch-remoting_host_remoting_me2me_host_cc patch-remoting_host_setup_start_host_main_cc patch-remoting_host_webauthn_remote_webauthn_extension_notifier_cc patch-sandbox_policy_features_cc patch-sandbox_policy_sandbox_type_cc patch-services_device_time_zone_monitor_time_zone_monitor_linux_cc patch-services_network_BUILD_gn patch-services_network_network_context_cc patch-services_network_network_context_h patch-services_network_network_sandbox_hook_linux_cc patch-services_network_network_service_cc patch-services_network_public_cpp_BUILD_gn patch-services_network_public_cpp_features_cc patch-services_network_public_mojom_BUILD_gn patch-services_screen_ai_sandbox_screen_ai_sandbox_hook_linux_cc patch-services_shape_detection_shape_detection_sandbox_hook_cc patch-services_tracing_public_cpp_system_metrics_sampler_cc patch-services_viz_public_mojom_BUILD_gn patch-services_webnn_features_gni patch-sql_database_cc patch-third_party_angle_BUILD_gn patch-third_party_angle_src_libANGLE_renderer_gl_glx_FunctionsGLX_cpp patch-third_party_blink_common_features_cc patch-third_party_blink_public_platform_platform_h patch-third_party_blink_renderer_controller_memory_usage_monitor_posix_cc patch-third_party_blink_renderer_core_exported_web_view_impl_cc patch-third_party_blink_renderer_core_frame_web_frame_test_cc patch-third_party_blink_renderer_core_page_context_menu_controller_cc patch-third_party_blink_renderer_modules_webaudio_audio_worklet_thread_test_cc patch-third_party_blink_renderer_modules_webgl_webgl_rendering_context_base_cc patch-third_party_blink_renderer_modules_webgpu_gpu_canvas_context_cc patch-third_party_blink_renderer_modules_webgpu_gpu_queue_cc patch-third_party_blink_renderer_platform_BUILD_gn patch-third_party_blink_renderer_platform_graphics_canvas_resource_provider_cc patch-third_party_blink_renderer_platform_graphics_video_frame_submitter_cc patch-third_party_blink_renderer_platform_runtime_enabled_features_json5 patch-third_party_ffmpeg_configure patch-third_party_pdfium_core_fxge_cfx_fontmapper_cpp patch-third_party_perfetto_src_base_unix_socket_cc patch-third_party_sqlite_src_amalgamation_dev_sqlite3_c patch-third_party_sqlite_src_amalgamation_sqlite3_c patch-third_party_webrtc_modules_audio_device_BUILD_gn patch-tools_gn_build_gen_py patch-ui_accessibility_accessibility_features_cc patch-ui_accessibility_accessibility_features_h patch-ui_accessibility_ax_node_cc patch-ui_accessibility_ax_node_h patch-ui_accessibility_ax_tree_cc patch-ui_base_clipboard_clipboard_cc patch-ui_base_ui_base_features_cc patch-ui_base_x_x11_drag_context_cc patch-ui_compositor_compositor_h patch-ui_events_event_cc patch-ui_gfx_native_ui_types_h patch-ui_gtk_select_file_dialog_linux_gtk_cc patch-ui_ozone_platform_wayland_host_wayland_clipboard_cc patch-ui_ozone_platform_wayland_host_wayland_data_drag_controller_cc patch-ui_ozone_platform_wayland_host_wayland_exchange_data_provider_cc patch-ui_ozone_platform_wayland_host_wayland_frame_manager_cc patch-ui_ozone_platform_x11_x11_clipboard_ozone_cc patch-ui_views_BUILD_gn patch-ui_views_controls_textfield_textfield_cc patch-ui_views_controls_textfield_textfield_h patch-ui_views_widget_widget_cc patch-ui_views_widget_widget_h patch-ui_views_window_dialog_delegate_cc patch-v8_BUILD_gn patch-v8_src_api_api_cc patch-v8_src_execution_isolate_cc patch-v8_src_flags_flags_cc Added files: www/chromium/patches: patch-base_threading_hang_watcher_cc patch-chrome_browser_enterprise_connectors_reporting_crash_reporting_context_h patch-chrome_browser_extensions_api_api_browser_context_keyed_service_factories_cc patch-chrome_browser_extensions_api_web_authentication_proxy_web_authentication_proxy_api_h patch-chrome_browser_feedback_show_feedback_page_cc patch-chrome_browser_glic_public_features_cc patch-chrome_browser_ui_views_frame_horizontal_tab_strip_region_view_cc patch-chrome_browser_ui_views_tabs_hovercard_tab_hover_card_bubble_view_cc patch-chrome_browser_ui_views_tabs_shared_drop_arrow_cc patch-chrome_browser_ui_webui_sanitized_image_sanitized_image_source_cc patch-chrome_browser_ui_webui_sanitized_image_sanitized_image_source_h patch-chrome_browser_ui_webui_search_engine_choice_search_engine_choice_ui_cc patch-chrome_browser_ui_webui_signin_sync_confirmation_ui_cc patch-chrome_browser_webauthn_chrome_web_authentication_delegate_cc patch-components_autofill_core_browser_suggestions_payments_credit_card_suggestion_generator_cc patch-components_signin_internal_identity_manager_account_capabilities_list_h patch-components_signin_public_identity_manager_account_capabilities_cc patch-components_signin_public_identity_manager_account_capabilities_h patch-components_sync_service_device_statistics_tracker_cc patch-components_wallet_core_browser_network_wallet_request_cc patch-components_webapps_browser_web_app_url_config_cc patch-gpu_command_buffer_service_shared_image_dawn_ozone_image_representation_cc patch-remoting_base_crash_crashpad_database_manager_cc patch-remoting_base_remoting_export_h patch-remoting_base_security_key_socket_name_cc patch-remoting_host_chromoting_host_services_server_cc patch-remoting_host_desktop_session_proxy_cc patch-remoting_host_desktop_session_proxy_h patch-remoting_host_host_attributes_cc patch-remoting_host_ipc_desktop_environment_cc patch-third_party_cpuinfo_BUILD_gn patch-third_party_libsync_src_include_ndk_sync_h patch-third_party_libsync_src_sync_c patch-third_party_litert_features_gni patch-ui_base_x_selection_owner_cc patch-ui_base_x_selection_owner_h patch-ui_base_x_x11_drag_context_h patch-ui_ozone_platform_x11_x11_clipboard_ozone_h patch-v8_src_base_macros_h Removed files: www/chromium/patches: patch-chrome_app_settings_strings_grdp patch-chrome_browser_ui_url_identity_cc patch-chrome_browser_ui_views_tabs_tab_hover_card_bubble_view_cc patch-chrome_browser_web_applications_web_app_helpers_cc patch-extensions_browser_api_management_management_api_cc patch-third_party_blink_renderer_core_origin_trials_origin_trial_context_cc patch-third_party_libunwind_src_src_Registers_hpp patch-ui_base_x_selection_utils_cc patch-ui_base_x_x11_os_exchange_data_provider_cc patch-ui_gfx_gpu_fence_cc patch-ui_views_widget_root_view_cc Log message: update to 148.0.7778.96 CVSROOT: /cvs Module name: src Changes by: sashan@cvs.openbsd.org 2026/05/08 00:31:51 Modified files: sys/net : pf_lb.c Log message: pf(4): load balancer rpool->weight is never zero, state that explicitly in code to make future reviews more smooth. OK @deraadt CVSROOT: /cvs Module name: src Changes by: renaud@cvs.openbsd.org 2026/05/08 00:35:47 Modified files: usr.bin/patch : pch.c Log message: Solve an infinite loop on malformed ed script input OK kirill CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/08 00:40:44 Modified files: graphics/openjph: Makefile distinfo Log message: Update to openjph-0.27.1. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/08 00:42:16 Modified files: print/psutils : Makefile distinfo Log message: Update to psutils-3.3.15. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/08 00:43:35 Modified files: productivity/libphonenumber: Makefile distinfo Log message: Update to libphonenumber-9.0.30. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/08 00:44:54 Modified files: security/libgpg-error: Makefile distinfo Log message: Update to libgpg-error-1.61. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/08 00:46:30 Modified files: sysutils/amazon-ssm-agent: Makefile distinfo Log message: Update to amazon-ssm-agent-3.3.4364.0. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/08 00:51:28 Modified files: sysutils/terragrunt: Makefile distinfo modules.inc Log message: Update to terragrunt-1.0.4. CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2026/05/08 00:57:38 Modified files: usr.bin/tmux : status.c tmux.h Log message: Do not cache format for status line because it stores various pointers that might be stale, instead cache the cmd_find_state and rebuild the formats every time they are needed. Reported by Marcel Partap in GitHub isue 5065. CVSROOT: /cvs Module name: ports Changes by: paco@cvs.openbsd.org 2026/05/08 00:59:39 Modified files: editors/emacs : Makefile editors/emacs/patches: patch-src_treesit_c Added files: editors/emacs/patches: patch-test_src_treesit-tests_el Log message: fix tree-sitter modes on emacs by applying this patch: https://github.com/emacs-mirror/emacs/commit/b01435306a36e4e75671fbe7bacea351f89947d5 ok jca@ CVSROOT: /cvs Module name: ports Changes by: rsadowski@cvs.openbsd.org 2026/05/08 01:04:04 Modified files: net/bitcoin : Makefile distinfo net/bitcoin/pkg: PFRAG.no-no_x11 Log message: Update bitcoin to 31.0 CVSROOT: /cvs Module name: ports Changes by: rsadowski@cvs.openbsd.org 2026/05/08 01:04:26 Modified files: net/litecoin : Makefile distinfo Log message: Update litecoin to 0.21.5.4 CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/08 01:09:46 Modified files: sysutils/terraform: Makefile distinfo Log message: Update to terraform-1.15.2. CVSROOT: /cvs Module name: www Changes by: kmos@cvs.openbsd.org 2026/05/08 01:11:16 Modified files: . : plus.html Log message: Changes for April minus cherrypicks for release Done with pamela@ CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2026/05/08 01:18:02 Modified files: distrib/sets/lists/comp: mi Log message: sync CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/08 01:23:52 Modified files: devel/spidermonkey140: Makefile distinfo Log message: Update to spidermonkey140-140.10.2. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/08 01:33:44 Modified files: sysutils/gemini-cli: Makefile distinfo sysutils/gemini-cli/pkg: PLIST Log message: Update to gemini-cli-0.41.2. CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/08 01:45:24 Modified files: telephony/linphone: Makefile Log message: telephony/linphone: add doxygen to BUILD_DEPENDS spotted by sthen@, ENABLE_DOC=NO should disable it, but ENABLE_CXX_WRAPPER also drags it and it is enforced in toplevel CMakeLists.txt CVSROOT: /cvs Module name: ports Changes by: benoit@cvs.openbsd.org 2026/05/08 02:46:10 Modified files: astro/py-astropy-iers-data: Makefile distinfo Log message: Update to py3-astropy-iers-data-0.2026.5.4.1.4.54. CVSROOT: /cvs Module name: xenocara Changes by: matthieu@cvs.openbsd.org 2026/05/08 03:02:11 Modified files: lib/libXfont2 : Makefile.bsd-wrapper lib/libpng : Makefile.bsd-wrapper share/mk : bsd.xorg.mk Log message: Fix the build system changes that handle the autoconf cache patches. The beforeconfigure target doesn't work as expected and causes extra configure script executions and sometimes full rebuilds. replace it by more ad-hoc code to generate a local autoconf cache for the packages that need it (currently libpng and libXfont2) ok miod@ CVSROOT: /cvs Module name: xenocara Changes by: matthieu@cvs.openbsd.org 2026/05/08 03:05:17 Modified files: app/editres : ChangeLog Makefile.am Makefile.in aclocal.m4 comm.c compile config.guess config.sub configure configure.ac depcomp editresP.h handler.c missing utils.c app/editres/app-defaults: Editres app/editres/man: Makefile.in editres.man Added files: app/editres : meson.build meson.options Log message: update to editres 1.1.1 CVSROOT: /cvs Module name: xenocara Changes by: matthieu@cvs.openbsd.org 2026/05/08 03:06:23 Modified files: app/fonttosfnt : ChangeLog Makefile.am Makefile.in aclocal.m4 compile configure configure.ac depcomp fonttosfnt.c missing read.c struct.c write.c app/fonttosfnt/man: Makefile.in fonttosfnt.man Log message: update to fonttosnft 1.2.5 CVSROOT: /cvs Module name: xenocara Changes by: matthieu@cvs.openbsd.org 2026/05/08 03:10:46 Modified files: app/iceauth : ChangeLog Makefile.am Makefile.in README.md aclocal.m4 compile config.guess config.sub configure configure.ac depcomp iceauth.c missing app/iceauth/man: Makefile.in iceauth.man Added files: app/iceauth : meson.build Log message: Update to iceauth 1.0.11 CVSROOT: /cvs Module name: xenocara Changes by: matthieu@cvs.openbsd.org 2026/05/08 03:23:41 Modified files: app/listres : ChangeLog Makefile.am Makefile.in aclocal.m4 compile config.guess config.sub configure configure.ac depcomp missing app/listres/man: Makefile.in listres.man Added files: app/listres : meson.build Log message: Update to listres 1.0.7 CVSROOT: /cvs Module name: xenocara Changes by: matthieu@cvs.openbsd.org 2026/05/08 03:28:03 Modified files: app/mkfontscale: ChangeLog Makefile.am Makefile.in aclocal.m4 compile config.guess config.sub configure configure.ac depcomp missing mkfontscale.c app/mkfontscale/man: Makefile.in mkfontscale.man Added files: app/mkfontscale: meson.build meson.options Log message: Update to mkfontscale 1.2.4 CVSROOT: /cvs Module name: xenocara Changes by: matthieu@cvs.openbsd.org 2026/05/08 03:37:40 Modified files: app/rgb : COPYING ChangeLog Makefile.am Makefile.in aclocal.m4 compile config.guess config.h.in config.sub configure configure.ac depcomp install-sh missing rgb.c rgb.txt showrgb.c app/rgb/man : Makefile.am Makefile.in rgb.man showrgb.man app/rgb/others : README Log message: Update to rgb 1.1.1 CVSROOT: /cvs Module name: ports Changes by: denis@cvs.openbsd.org 2026/05/08 03:37:59 Modified files: net/gp-openconnect: Makefile crates.inc distinfo Removed files: net/gp-openconnect/patches: patch-crates_openconnect_build_rs Log message: Update to 2.5.3 CVSROOT: /cvs Module name: src Changes by: mvs@cvs.openbsd.org 2026/05/08 03:38:07 Modified files: sys/kern : sysv_sem.c Log message: Do sleeping malloc() and copyin() before checks within sys_semop(). Otherwise the semaphore id referenced by `semaptr' could be destroyed or replaced during context switch. ok cludwig CVSROOT: /cvs Module name: xenocara Changes by: matthieu@cvs.openbsd.org 2026/05/08 03:38:57 Modified files: app/setxkbmap : ChangeLog Makefile.am Makefile.in aclocal.m4 compile config.guess config.sub configure configure.ac depcomp missing setxkbmap.c app/setxkbmap/man: Makefile.in setxkbmap.man Added files: app/setxkbmap : meson.build meson.options Log message: Update to setxkbmap 1.3.5 CVSROOT: /cvs Module name: xenocara Changes by: matthieu@cvs.openbsd.org 2026/05/08 03:40:20 Modified files: app/xbiff : ChangeLog Mailbox.c Mailbox.h MailboxP.h Makefile.am Makefile.in aclocal.m4 compile config.guess config.sub configure configure.ac depcomp missing xbiff.c app/xbiff/man : Makefile.in xbiff.man Added files: app/xbiff : meson.build meson.options Log message: Update to xbiff 1.0.6 CVSROOT: /cvs Module name: xenocara Changes by: matthieu@cvs.openbsd.org 2026/05/08 03:43:39 Modified files: app/xconsole : ChangeLog Makefile.am Makefile.in compile configure configure.ac app/xconsole/man: xconsole.man Added files: app/xconsole : meson.build meson.options Log message: Update to xconsole 1.1.1 CVSROOT: /cvs Module name: xenocara Changes by: matthieu@cvs.openbsd.org 2026/05/08 03:44:58 Modified files: app/xkbcomp : ChangeLog Makefile.am Makefile.in alias.c compat.c compile config.h.in configure configure.ac keycodes.c keytypes.c symbols.c utils.c utils.h vmod.c xkbcomp.c xkbcomp.pc.in xkbparse.y xkbpath.c xkbscan.c app/xkbcomp/man: Makefile.am Makefile.in xkbcomp.man Added files: app/xkbcomp : meson.build meson.options app/xkbcomp/man: meson.build Log message: Update to xkbcomp 1.5.0 CVSROOT: /cvs Module name: xenocara Changes by: matthieu@cvs.openbsd.org 2026/05/08 03:49:41 Modified files: app/xrandr : COPYING ChangeLog Makefile.am Makefile.in aclocal.m4 compile configure configure.ac depcomp keystone.5c missing xrandr.c app/xrandr/man : Makefile.in xrandr.man Log message: Upate to xrandr 1.5.4 CVSROOT: /cvs Module name: ports Changes by: denis@cvs.openbsd.org 2026/05/08 03:51:00 Log message: Import oras v1.3.1 ORAS is the de facto tool for working with OCI Artifacts. It treats media types as a critical piece of the puzzle. Container images are never assumed to be the artifact in question. ORAS provides CLI and client libraries to distribute artifacts across OCI-compliant registries. * Artifact Reference - Attach supply chain artifacts to container images. - Discover and show the artifact reference relations. - Extend the registries not just for storing container images. * Distributed Software Artifacts - Manage artifacts in OCI registries. - Migrate artifacts across registries. - Manage artifacts in file system through OCI image layout. * Explore and Manage OCI Image - Manage image manifest and layer in an OCI registry. - Operate tag and repository in an OCI registry. - Explore the detailed content of an OCI image. Improvement and OK lraab@ Status: Vendor Tag: denis Release Tags: denis_20260508 N ports/sysutils/oras/distinfo N ports/sysutils/oras/Makefile N ports/sysutils/oras/modules.inc N ports/sysutils/oras/pkg/DESCR N ports/sysutils/oras/pkg/PLIST No conflicts created by this import CVSROOT: /cvs Module name: ports Changes by: denis@cvs.openbsd.org 2026/05/08 03:52:14 Modified files: sysutils : Makefile Log message: Import oras v1.3.1 CVSROOT: /cvs Module name: xenocara Changes by: matthieu@cvs.openbsd.org 2026/05/08 03:52:32 Modified files: data/bitmaps : COPYING ChangeLog Makefile.am configure.ac xbitmaps.pc.in Added files: data/bitmaps : meson.build Log message: Update to xbitmaps 1.1.4 CVSROOT: /cvs Module name: xenocara Changes by: matthieu@cvs.openbsd.org 2026/05/08 03:54:43 Modified files: font/alias : ChangeLog Makefile.am Makefile.in aclocal.m4 config.guess config.sub configure configure.ac install-sh missing font/alias/100dpi: Makefile.in font/alias/75dpi: Makefile.in font/alias/cyrillic: Makefile.in font/alias/misc: Makefile.in Added files: font/alias : meson.build meson_options.txt Log message: Update to font-alias 1.0.6 CVSROOT: /cvs Module name: xenocara Changes by: matthieu@cvs.openbsd.org 2026/05/08 03:59:06 Modified files: font/util : COPYING ChangeLog Makefile.in aclocal.m4 bdftruncate.c compile config.guess config.h.in config.sub configure configure.ac depcomp fontutil.pc.in map-ISO8859-7 missing ucs2any.c font/util/man : Makefile.in bdftruncate.man ucs2any.man Log message: Update to font-util 1.4.2 CVSROOT: /cvs Module name: xenocara Changes by: matthieu@cvs.openbsd.org 2026/05/08 04:25:57 Modified files: app/ico : COPYING ChangeLog Makefile.am Makefile.in aclocal.m4 compile config.guess config.h.in config.sub configure configure.ac depcomp ico.c install-sh missing app/ico/man : Makefile.in ico.man Added files: app/ico : meson.build Log message: Update to ico 1.0.7 CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/08 04:31:43 Modified files: telephony/linphone: Makefile Added files: telephony/linphone/patches: patch-external_linphone-sdk_CMakeLists_txt patch-external_linphone-sdk_cmake_CheckBuildToolsCommon_cmake Log message: telephony/linphone: add py-stache and py-six to BUILD_DEPENDS they were previously in telephony/liblinphone. add patches to disable checking for nasm/yasm/meson, they would only be needed if we built the bundled dav1d/openh264, which isnt the case.. additional missing dependencies spotted by sthen@, thanks again! CVSROOT: /cvs Module name: xenocara Changes by: matthieu@cvs.openbsd.org 2026/05/08 05:12:08 Modified files: xserver : COPYING ChangeLog Makefile.am Makefile.in aclocal.m4 configure configure.ac meson.build xserver/Xext : xf86bigfont.c xserver/dix : dixfonts.c events.c gc.c xserver/glamor : glamor.c glamor_core.c glamor_dash.c glamor_egl.c glamor_largepixmap.c glamor_render.c xserver/hw/xfree86/loader: loadmod.c xserver/hw/xfree86/modes: xf86Crtc.h xserver/hw/xfree86/os-support/linux: lnx_video.c xserver/hw/xquartz/bundle: Info.plist.cpp xserver/miext/rootless: rootlessCommon.h rootlessScreen.c xserver/os : Makefile.in connection.c ospoll.c utils.c xsha1.c xserver/randr : rroutput.c xserver/render : picture.c xserver/xkb : xkb.c xkbActions.c xkbUtils.c Log message: Update to xserver 21.1.22. The security fixes were already committed. CVSROOT: /cvs Module name: xenocara Changes by: matthieu@cvs.openbsd.org 2026/05/08 05:16:01 Modified files: lib/libfontenc : ChangeLog Makefile.am Makefile.in aclocal.m4 compile config.guess config.h.in config.sub configure configure.ac depcomp fontenc.pc.in missing lib/libfontenc/src: Makefile.am Makefile.in Added files: lib/libfontenc : meson.build meson.options Log message: Update to libfontenc 1.1.9 CVSROOT: /cvs Module name: xenocara Changes by: matthieu@cvs.openbsd.org 2026/05/08 05:17:10 Modified files: lib/libXxf86vm : ChangeLog Makefile.am Makefile.in compile configure configure.ac xxf86vm.pc.in lib/libXxf86vm/man: XF86VM.man Added files: lib/libXxf86vm : meson.build meson.options Log message: Update to libXxf86vm 1.1.7 CVSROOT: /cvs Module name: xenocara Changes by: matthieu@cvs.openbsd.org 2026/05/08 05:18:21 Modified files: lib/libXxf86dga: ChangeLog Makefile.am Makefile.in aclocal.m4 config.guess config.sub configure configure.ac depcomp install-sh missing xxf86dga.pc.in lib/libXxf86dga/man: Makefile.am Makefile.in XDGA.man lib/libXxf86dga/src: Makefile.in config.h.in Added files: lib/libXxf86dga: meson.build meson.options Log message: Update to libXxf86dga 1.1.7 CVSROOT: /cvs Module name: xenocara Changes by: matthieu@cvs.openbsd.org 2026/05/08 05:20:05 Modified files: lib/libXvMC : ChangeLog Makefile.in aclocal.m4 compile config.guess config.sub configure configure.ac depcomp meson.build missing lib/libXvMC/include: Makefile.in lib/libXvMC/include/X11: Makefile.in lib/libXvMC/include/X11/extensions: Makefile.in lib/libXvMC/src: Makefile.in XvMC.c lib/libXvMC/wrapper: Makefile.in Removed files: lib/libXvMC/m4 : libtool.m4 ltoptions.m4 ltsugar.m4 ltversion.m4 lt~obsolete.m4 Log message: Update to libXvMC 1.0.15 CVSROOT: /cvs Module name: ports Changes by: tb@cvs.openbsd.org 2026/05/08 05:54:48 Modified files: devel/uv : Makefile crates.inc distinfo Log message: Update to uv 0.11.11 from maintainer https://github.com/astral-sh/uv/releases/tag/0.11.11 https://github.com/astral-sh/uv/releases/tag/0.11.10 https://github.com/astral-sh/uv/releases/tag/0.11.9 https://github.com/astral-sh/uv/releases/tag/0.11.8 CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/05/08 06:03:50 Modified files: usr.sbin/bgpd : parse.y printconf.c rde.c rde_adjout.c rde_peer.c session.c session_bgp.c util.c Log message: bgpd: continue converting loop counters from uint8_t to u_int ok claudio CVSROOT: /cvs Module name: ports Changes by: tb@cvs.openbsd.org 2026/05/08 06:13:24 Modified files: devel/ruff : Makefile crates.inc distinfo devel/ruff/patches: patch-Cargo_toml Log message: ruff: update to 0.15.12, from maintainer salsa is now a normal dependency, which gets rid of one DIST_TUPLE and related complications. https://github.com/astral-sh/ruff/releases/tag/0.15.12 CVSROOT: /cvs Module name: ports Changes by: matthieu@cvs.openbsd.org 2026/05/08 06:15:03 Modified files: wayland/xwayland: Makefile distinfo Log message: Update xwayland to 24.1.11 CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2026/05/08 06:25:33 Removed files: sys/arch/riscv64/dev: plic.h Log message: remove unused plic.h; ok kettenis@ CVSROOT: /cvs Module name: xenocara Changes by: matthieu@cvs.openbsd.org 2026/05/08 07:19:59 Modified files: lib/libXpm : ChangeLog configure configure.ac lib/libXpm/src : parse.c Log message: Update to libXpm 3.5.19 CVSROOT: /cvs Module name: xenocara Changes by: matthieu@cvs.openbsd.org 2026/05/08 07:21:24 Modified files: lib/libX11 : AUTHORS COPYING ChangeLog Makefile.in README.md aclocal.m4 compile configure configure.ac depcomp missing lib/libX11/include: Makefile.in lib/libX11/man : AllPlanes.man BlackPixelOfScreen.man Compose.man DisplayOfCCC.man ImageByteOrder.man IsCursorKey.man Makefile.in XAddHost.man XAllocClassHint.man XAllocColor.man XAllocIconSize.man XAllocSizeHints.man XAllocStandardColormap.man XAllocWMHints.man XAnyEvent.man XButtonEvent.man XChangeKeyboardControl.man XChangeKeyboardMapping.man XChangeSaveSet.man XChangeWindowAttributes.man XCirculateEvent.man XCirculateRequestEvent.man XClearArea.man XClientMessageEvent.man XColormapEvent.man XConfigureEvent.man XConfigureRequestEvent.man XConfigureWindow.man XCopyArea.man XCreateColormap.man XCreateFontCursor.man XCreateFontSet.man XCreateGC.man XCreateIC.man XCreateOC.man XCreatePixmap.man XCreateRegion.man XCreateWindow.man XCreateWindowEvent.man XCrossingEvent.man XDefineCursor.man XDestroyWindow.man XDestroyWindowEvent.man XDrawArc.man XDrawImageString.man XDrawLine.man XDrawPoint.man XDrawRectangle.man XDrawString.man XDrawText.man XEmptyRegion.man XErrorEvent.man XExposeEvent.man XExtentsOfFontSet.man XFillRectangle.man XFilterEvent.man XFlush.man XFocusChangeEvent.man XFontSetExtents.man XFontsOfFontSet.man XGetEventData.man XGetVisualInfo.man XGetWindowAttributes.man XGetWindowProperty.man XGetXCBConnection.man XGrabButton.man XGrabKey.man XGrabKeyboard.man XGrabPointer.man XGrabServer.man XGraphicsExposeEvent.man XGravityEvent.man XIconifyWindow.man XIfEvent.man XInitImage.man XInstallColormap.man XInternAtom.man XIntersectRegion.man XKeymapEvent.man XListFonts.man XLoadFont.man XLookupKeysym.man XMapEvent.man XMapRequestEvent.man XMapWindow.man XNextEvent.man XOpenDisplay.man XOpenIM.man XOpenOM.man XParseGeometry.man XPolygonRegion.man XPropertyEvent.man XPutBackEvent.man XQueryBestSize.man XQueryColor.man XQueryExtension.man XQueryPointer.man XQueryTree.man XRaiseWindow.man XReadBitmapFile.man XRecolorCursor.man XReparentEvent.man XReparentWindow.man XResizeRequestEvent.man XSelectionClearEvent.man XSelectionEvent.man XSelectionRequestEvent.man XSendEvent.man XSetArcMode.man XSetClipOrigin.man XSetCommand.man XSetErrorHandler.man XSetEventQueueOwner.man XSetFillStyle.man XSetFont.man XSetFontPath.man XSetICFocus.man XSetICValues.man XSetInputFocus.man XSetLineAttributes.man XSetPointerMapping.man XSetState.man XSetTextProperty.man XSetTile.man XSetTransientForHint.man XSetWMClientMachine.man XSetWMColormapWindows.man XSetWMIconName.man XSetWMName.man XSetWMProperties.man XSetWMProtocols.man XStoreBytes.man XStoreColors.man XStringListToTextProperty.man XStringToKeysym.man XSynchronize.man XTextExtents.man XTextWidth.man XUnmapEvent.man XUnmapWindow.man XVisibilityEvent.man XWarpPointer.man XcmsAllocColor.man XcmsCCCOfColormap.man XcmsCIELabQueryMaxC.man XcmsCIELuvQueryMaxC.man XcmsColor.man XcmsConvertColors.man XcmsCreateCCC.man XcmsDefaultCCC.man XcmsQueryBlack.man XcmsQueryColor.man XcmsSetWhitePoint.man XcmsStoreColor.man XcmsTekHVCQueryMaxC.man XmbDrawImageString.man XmbDrawString.man XmbDrawText.man XmbLookupString.man XmbResetIC.man XmbTextEscapement.man XmbTextExtents.man XmbTextListToTextProperty.man XmbTextPerCharExtents.man XrmEnumerateDatabase.man XrmGetFileDatabase.man XrmGetResource.man XrmInitialize.man XrmMergeDatabases.man XrmPutResource.man XrmUniqueQuark.man lib/libX11/man/xkb: Makefile.am Makefile.in XkbActionCtrls.man XkbActionSetCtrls.man XkbAddDeviceLedInfo.man XkbAddGeomColor.man XkbAddGeomDoodad.man XkbAddGeomKey.man XkbAddGeomKeyAlias.man XkbAddGeomOutline.man XkbAddGeomOverlay.man XkbAddGeomOverlayKey.man XkbAddGeomOverlayRow.man XkbAddGeomProperty.man XkbAddGeomRow.man XkbAddGeomSection.man XkbAddGeomShape.man XkbAddSymInterpret.man XkbAllocClientMap.man XkbAllocCompatMap.man XkbAllocControls.man XkbAllocDeviceInfo.man XkbAllocGeomColors.man XkbAllocGeomDoodads.man XkbAllocGeomKeyAliases.man XkbAllocGeomKeys.man XkbAllocGeomOutlines.man XkbAllocGeomOverlayKeys.man XkbAllocGeomOverlayRows.man XkbAllocGeomOverlays.man XkbAllocGeomPoints.man XkbAllocGeomProps.man XkbAllocGeomRows.man XkbAllocGeomSectionDoodads.man XkbAllocGeomSections.man XkbAllocGeomShapes.man XkbAllocGeometry.man XkbAllocIndicatorMaps.man XkbAllocKeyboard.man XkbAllocNames.man XkbAllocServerMap.man XkbApplyCompatMapToKey.man XkbBell.man XkbBellEvent.man XkbChangeControls.man XkbChangeDeviceInfo.man XkbChangeEnabledControls.man XkbChangeMap.man XkbChangeNames.man XkbChangeTypesOfKey.man XkbComputeRowBounds.man XkbComputeSectionBounds.man XkbComputeShapeBounds.man XkbComputeShapeTop.man XkbCopyKeyType.man XkbCopyKeyTypes.man XkbDeviceBell.man XkbDeviceBellEvent.man XkbFindOverlayForKey.man XkbForceBell.man XkbForceDeviceBell.man XkbFreeClientMap.man XkbFreeCompatMap.man XkbFreeComponentList.man XkbFreeControls.man XkbFreeDeviceInfo.man XkbFreeGeomColors.man XkbFreeGeomDoodads.man XkbFreeGeomKeyAliases.man XkbFreeGeomKeys.man XkbFreeGeomOutlines.man XkbFreeGeomOverlayKeys.man XkbFreeGeomOverlayRows.man XkbFreeGeomOverlays.man XkbFreeGeomPoints.man XkbFreeGeomProperties.man XkbFreeGeomRows.man XkbFreeGeomSections.man XkbFreeGeomShapes.man XkbFreeGeometry.man XkbFreeIndicatorMaps.man XkbFreeKeyboard.man XkbFreeNames.man XkbFreeServerMap.man XkbGetAutoRepeatRate.man XkbGetAutoResetControls.man XkbGetCompatMap.man XkbGetControls.man XkbGetControlsChanges.man XkbGetDeviceButtonActions.man XkbGetDeviceInfo.man XkbGetDeviceInfoChanges.man XkbGetDeviceLedInfo.man XkbGetGeometry.man XkbGetIndicatorMap.man XkbGetIndicatorState.man XkbGetKeyActions.man XkbGetKeyBehaviors.man XkbGetKeyExplicitComponents.man XkbGetKeyModifierMap.man XkbGetKeySyms.man XkbGetKeyTypes.man XkbGetKeyVirtualModMap.man XkbGetKeyboard.man XkbGetKeyboardByName.man XkbGetMap.man XkbGetNamedGeometry.man XkbGetNamedIndicator.man XkbGetNames.man XkbGetState.man XkbGetUpdatedMap.man XkbGetVirtualMods.man XkbGetXlibControls.man XkbIgnoreExtension.man XkbKeyAction.man XkbKeyActionEntry.man XkbKeyActionsPtr.man XkbKeyGroupInfo.man XkbKeyGroupWidth.man XkbKeyGroupsWidth.man XkbKeyHasActions.man XkbKeyKeyType.man XkbKeyKeyTypeIndex.man XkbKeyNumActions.man XkbKeyNumGroups.man XkbKeyNumSyms.man XkbKeySymEntry.man XkbKeySymsPtr.man XkbKeyTypesForCoreSymbols.man XkbKeycodeToKeysym.man XkbKeysymToModifiers.man XkbLatchGroup.man XkbLatchModifiers.man XkbLibraryVersion.man XkbListComponents.man XkbLockGroup.man XkbLockModifiers.man XkbLookupKeyBinding.man XkbLookupKeySym.man XkbModActionVMods.man XkbNoteControlsChanges.man XkbNoteDeviceChanges.man XkbNoteNameChanges.man XkbOpenDisplay.man XkbOutOfRangeGroupInfo.man XkbOutOfRangeGroupNumber.man XkbPtrActionX.man XkbPtrActionY.man XkbQueryExtension.man XkbRefreshKeyboardMapping.man XkbResizeDeviceButtonActions.man XkbResizeKeyActions.man XkbResizeKeySyms.man XkbResizeKeyType.man XkbSAGroup.man XkbSAPtrDfltValue.man XkbSARedirectSetVMods.man XkbSARedirectSetVModsMask.man XkbSARedirectVMods.man XkbSARedirectVModsMask.man XkbSAScreen.man XkbSASetGroup.man XkbSASetPtrDfltValue.man XkbSASetScreen.man XkbSelectEventDetails.man XkbSetAutoRepeatRate.man XkbSetAutoResetControls.man XkbSetCompatMap.man XkbSetControls.man XkbSetDebuggingFlags.man XkbSetDeviceButtonActions.man XkbSetDeviceInfo.man XkbSetIgnoreLockMods.man XkbSetIndicatorMap.man XkbSetMap.man XkbSetModActionVMods.man XkbSetNamedIndicator.man XkbSetNames.man XkbSetPtrActionX.man XkbSetPtrActionY.man XkbSetServerInternalMods.man XkbSetXlibControls.man XkbTranslateKeyCode.man XkbTranslateKeySym.man XkbUpdateMapFromCore.man XkbVirtualModsToReal.man lib/libX11/modules: Makefile.in lib/libX11/modules/im: Makefile.in lib/libX11/modules/im/ximcp: Makefile.in imDefFlt.c imDefLkup.c imLcIc.c imRm.c imThaiFlt.c lib/libX11/modules/lc: Makefile.in lib/libX11/modules/lc/Utf8: Makefile.in lib/libX11/modules/lc/def: Makefile.in lib/libX11/modules/lc/gen: Makefile.in lib/libX11/modules/om: Makefile.in lib/libX11/modules/om/generic: Makefile.in omGeneric.c lib/libX11/nls : Makefile.in locale.alias.pre lib/libX11/nls/C: XLC_LOCALE.pre lib/libX11/nls/armscii-8: XLC_LOCALE.pre lib/libX11/nls/en_US.UTF-8: XLC_LOCALE.pre lib/libX11/nls/georgian-academy: XLC_LOCALE.pre lib/libX11/nls/georgian-ps: XLC_LOCALE.pre lib/libX11/nls/ibm-cp1133: XLC_LOCALE.pre lib/libX11/nls/iscii-dev: XLC_LOCALE.pre lib/libX11/nls/isiri-3342: XLC_LOCALE.pre lib/libX11/nls/iso8859-1: XLC_LOCALE.pre lib/libX11/nls/iso8859-10: XLC_LOCALE.pre lib/libX11/nls/iso8859-11: XLC_LOCALE.pre lib/libX11/nls/iso8859-13: XLC_LOCALE.pre lib/libX11/nls/iso8859-14: XLC_LOCALE.pre lib/libX11/nls/iso8859-15: XLC_LOCALE.pre lib/libX11/nls/iso8859-2: Compose.pre XLC_LOCALE.pre lib/libX11/nls/iso8859-3: XLC_LOCALE.pre lib/libX11/nls/iso8859-4: XLC_LOCALE.pre lib/libX11/nls/iso8859-5: XLC_LOCALE.pre lib/libX11/nls/iso8859-6: XLC_LOCALE.pre lib/libX11/nls/iso8859-7: XLC_LOCALE.pre lib/libX11/nls/iso8859-8: XLC_LOCALE.pre lib/libX11/nls/iso8859-9: XLC_LOCALE.pre lib/libX11/nls/iso8859-9e: XLC_LOCALE.pre lib/libX11/nls/ja: XLC_LOCALE.pre lib/libX11/nls/ja.JIS: XLC_LOCALE.pre lib/libX11/nls/ja.SJIS: XLC_LOCALE.pre lib/libX11/nls/ja_JP.UTF-8: XLC_LOCALE.pre lib/libX11/nls/ko: XLC_LOCALE.pre lib/libX11/nls/ko_KR.UTF-8: XLC_LOCALE.pre lib/libX11/nls/koi8-c: XLC_LOCALE.pre lib/libX11/nls/koi8-r: XLC_LOCALE.pre lib/libX11/nls/koi8-u: XLC_LOCALE.pre lib/libX11/nls/microsoft-cp1251: XLC_LOCALE.pre lib/libX11/nls/microsoft-cp1255: XLC_LOCALE.pre lib/libX11/nls/microsoft-cp1256: XLC_LOCALE.pre lib/libX11/nls/mulelao-1: XLC_LOCALE.pre lib/libX11/nls/nokhchi-1: XLC_LOCALE.pre lib/libX11/nls/pt_BR.UTF-8: XLC_LOCALE.pre lib/libX11/nls/pt_PT.UTF-8: XLC_LOCALE.pre lib/libX11/nls/tatar-cyr: XLC_LOCALE.pre lib/libX11/nls/th_TH: XLC_LOCALE.pre lib/libX11/nls/th_TH.UTF-8: XLC_LOCALE.pre lib/libX11/nls/tscii-0: XLC_LOCALE.pre lib/libX11/nls/vi_VN.tcvn: XLC_LOCALE.pre lib/libX11/nls/vi_VN.viscii: XLC_LOCALE.pre lib/libX11/nls/zh_CN.UTF-8: XLC_LOCALE.pre lib/libX11/nls/zh_CN.gb18030: XLC_LOCALE.pre lib/libX11/nls/zh_CN.gbk: XLC_LOCALE.pre lib/libX11/nls/zh_HK.UTF-8: XLC_LOCALE.pre lib/libX11/nls/zh_HK.big5: XLC_LOCALE.pre lib/libX11/nls/zh_HK.big5hkscs: XLC_LOCALE.pre lib/libX11/nls/zh_TW: XLC_LOCALE.pre lib/libX11/nls/zh_TW.UTF-8: XLC_LOCALE.pre lib/libX11/specs: Makefile.in lib/libX11/specs/XIM: Makefile.in lib/libX11/specs/XKB: Makefile.in lib/libX11/specs/i18n: Makefile.in lib/libX11/specs/i18n/compose: Makefile.in lib/libX11/specs/i18n/framework: Makefile.in lib/libX11/specs/i18n/localedb: Makefile.in lib/libX11/specs/i18n/trans: Makefile.in trans.xml lib/libX11/specs/libX11: AppC.xml AppD.xml CH02.xml CH03.xml CH04.xml CH05.xml CH06.xml CH07.xml CH08.xml CH09.xml CH10.xml CH11.xml CH12.xml CH13.xml CH14.xml CH15.xml CH16.xml Makefile.in credits.xml glossary.xml libX11.xml lib/libX11/src : KeysymStr.c Makefile.am Makefile.in XErrorDB XlibInt.c Xrm.c xcb_io.c lib/libX11/src/util: Makefile.in mkks.sh lib/libX11/src/xcms: Makefile.in lib/libX11/src/xkb: Makefile.in XKBBind.c XKBGeom.c XKBMisc.c XKBNames.c XKBSetGeom.c XKBUse.c lib/libX11/src/xlibi18n: Makefile.in XimintP.h lcGeneric.c lcUTF8.c lib/libX11/src/xlibi18n/lcUniConv: iso8859_9e.h Added files: lib/libX11 : test-driver Removed files: lib/libX11/src : os2Stubs.c Log message: Update to libX11 1.8.13 CVSROOT: /cvs Module name: xenocara Changes by: matthieu@cvs.openbsd.org 2026/05/08 07:25:28 Modified files: driver/xf86-video-ast: ChangeLog Makefile.am Makefile.in aclocal.m4 configure configure.ac driver/xf86-video-ast/src: Makefile.in ast.h ast_2dtool.c ast_accel.c ast_cursor.c ast_driver.c ast_mode.c ast_mode.h ast_vgatool.c ast_vgatool.h Added files: driver/xf86-video-ast: README.md Removed files: driver/xf86-video-ast: README Log message: Update to xf86-video-ast 1.1.6 CVSROOT: /cvs Module name: xenocara Changes by: matthieu@cvs.openbsd.org 2026/05/08 07:30:40 Modified files: driver/xf86-video-ast: ChangeLog Makefile.in aclocal.m4 config.guess config.h.in config.sub configure configure.ac depcomp install-sh missing driver/xf86-video-ast/src: Makefile.am Makefile.in ast.h ast_accel.c ast_driver.c ast_vgatool.c Removed files: driver/xf86-video-ast/src: compat-api.h Log message: Update to xf86-video-ast 1.2.0 CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/08 07:53:40 Modified files: wayland/fuzzel : Makefile Log message: Unbreak. A change in package requires a bump. CVSROOT: /cvs Module name: src Changes by: millert@cvs.openbsd.org 2026/05/08 08:30:57 Modified files: lib/libc/stdio : open_wmemstream.c Log message: Adapt the negative seek fix from rev 1.8 of open_memstream.c CVSROOT: /cvs Module name: src Changes by: millert@cvs.openbsd.org 2026/05/08 08:36:33 src/regress/lib/libc/open_wmemstream Update of /cvs/src/regress/lib/libc/open_wmemstream In directory cvs.openbsd.org:/tmp/cvs-serv97040/open_wmemstream Log Message: Directory /cvs/src/regress/lib/libc/open_wmemstream added to the repository CVSROOT: /cvs Module name: src Changes by: millert@cvs.openbsd.org 2026/05/08 08:37:16 Modified files: regress/lib/libc: Makefile Added files: regress/lib/libc/open_wmemstream: Makefile open_wmemstreamtest.c Log message: Add wide version of open_memstream regress. CVSROOT: /cvs Module name: xenocara Changes by: matthieu@cvs.openbsd.org 2026/05/08 09:29:45 Modified files: driver/xf86-video-wsfb: Makefile.in aclocal.m4 config.guess config.h.in config.sub configure configure.ac depcomp install-sh missing driver/xf86-video-wsfb/man: Makefile.in wsfb.man driver/xf86-video-wsfb/src: Makefile.in compat-api.h wsfb_driver.c Added files: driver/xf86-video-wsfb: README.md Log message: Merge changes from xorg repository: - manual page improvements - drop support for old X servers - various other small formatting / indentation tweaks CVSROOT: /cvs Module name: www Changes by: tj@cvs.openbsd.org 2026/05/08 09:45:15 Modified files: faq/ports : differences.html guide.html ports.html specialtopics.html testing.html Log message: fix spelling, grammar, whitespace CVSROOT: /cvs Module name: ports Changes by: robert@cvs.openbsd.org 2026/05/08 09:47:00 Modified files: www/ungoogled-chromium: Makefile distinfo www/ungoogled-chromium/patches: patch-base_BUILD_gn patch-base_allocator_partition_allocator_partition_alloc_gni patch-base_allocator_partition_allocator_src_partition_alloc_BUILD_gn patch-base_allocator_partition_allocator_src_partition_alloc_partition_alloc_base_debug_proc_maps_linux_cc patch-base_allocator_partition_allocator_src_partition_alloc_partition_alloc_constants_h patch-base_debug_stack_trace_posix_cc patch-base_files_file_path_watcher_h patch-base_files_file_util_unittest_cc patch-base_memory_platform_shared_memory_region_posix_cc patch-base_rand_util_posix_cc patch-base_system_sys_info_h patch-base_threading_platform_thread_posix_cc patch-build_config_compiler_BUILD_gn patch-build_config_linux_pkg-config_py patch-build_rust_std_BUILD_gn patch-build_toolchain_gcc_toolchain_gni patch-cc_base_features_cc patch-chrome_browser_BUILD_gn patch-chrome_browser_about_flags_cc patch-chrome_browser_background_extensions_background_mode_manager_cc patch-chrome_browser_background_glic_glic_status_icon_cc patch-chrome_browser_browser_features_cc patch-chrome_browser_browser_process_impl_cc patch-chrome_browser_browser_process_impl_h patch-chrome_browser_chrome_browser_interface_binders_cc patch-chrome_browser_chrome_browser_interface_binders_webui_cc patch-chrome_browser_chrome_browser_interface_binders_webui_parts_desktop_cc patch-chrome_browser_chrome_browser_main_cc patch-chrome_browser_chrome_content_browser_client_cc patch-chrome_browser_chrome_content_browser_client_h patch-chrome_browser_chrome_content_browser_client_navigation_throttles_cc patch-chrome_browser_collaboration_messaging_messaging_backend_service_factory_cc patch-chrome_browser_component_updater_registration_cc patch-chrome_browser_download_chrome_download_manager_delegate_cc patch-chrome_browser_download_download_item_model_cc patch-chrome_browser_enterprise_browser_management_browser_management_service_cc patch-chrome_browser_enterprise_connectors_common_cc patch-chrome_browser_extensions_BUILD_gn patch-chrome_browser_extensions_api_enterprise_reporting_private_enterprise_reporting_private_api_cc patch-chrome_browser_extensions_api_passwords_private_passwords_private_delegate_impl_cc patch-chrome_browser_extensions_api_settings_private_prefs_util_cc patch-chrome_browser_extensions_api_tabs_tabs_api_cc patch-chrome_browser_extensions_api_webstore_private_webstore_private_api_cc patch-chrome_browser_extensions_sync_extension_sync_service_cc patch-chrome_browser_file_system_access_chrome_file_system_access_permission_context_cc patch-chrome_browser_flag_descriptions_h patch-chrome_browser_glic_host_glic_page_handler_cc patch-chrome_browser_glic_widget_glic_widget_cc patch-chrome_browser_global_features_cc patch-chrome_browser_memory_details_cc patch-chrome_browser_metrics_chrome_browser_main_extra_parts_metrics_cc patch-chrome_browser_metrics_chrome_metrics_service_client_cc patch-chrome_browser_net_profile_network_context_service_cc patch-chrome_browser_net_system_network_context_manager_cc patch-chrome_browser_notifications_notification_display_service_impl_cc patch-chrome_browser_ntp_tiles_chrome_most_visited_sites_factory_cc patch-chrome_browser_page_load_metrics_page_load_metrics_initialize_cc patch-chrome_browser_password_manager_chrome_password_manager_client_cc patch-chrome_browser_platform_util_linux_cc patch-chrome_browser_policy_configuration_policy_handler_list_factory_cc patch-chrome_browser_prefs_browser_prefs_cc patch-chrome_browser_profiles_chrome_browser_main_extra_parts_profiles_cc patch-chrome_browser_profiles_profile_impl_cc patch-chrome_browser_renderer_context_menu_render_view_context_menu_cc patch-chrome_browser_safe_browsing_safe_browsing_pref_change_handler_cc patch-chrome_browser_safe_browsing_safe_browsing_pref_change_handler_h patch-chrome_browser_safe_browsing_safe_browsing_service_cc patch-chrome_browser_screen_ai_screen_ai_service_handler_base_cc patch-chrome_browser_sessions_session_restore_cc patch-chrome_browser_signin_chrome_signin_client_cc patch-chrome_browser_signin_signin_hats_util_cc patch-chrome_browser_sync_test_integration_sync_service_impl_harness_cc patch-chrome_browser_themes_theme_service_cc patch-chrome_browser_ui_accelerator_table_cc patch-chrome_browser_ui_browser_command_controller_cc patch-chrome_browser_ui_browser_commands_cc patch-chrome_browser_ui_browser_h patch-chrome_browser_ui_browser_ui_prefs_cc patch-chrome_browser_ui_browser_window_internal_browser_window_features_cc patch-chrome_browser_ui_browser_window_public_browser_window_features_h patch-chrome_browser_ui_chrome_pages_cc patch-chrome_browser_ui_chrome_pages_h patch-chrome_browser_ui_hats_survey_config_cc patch-chrome_browser_ui_passwords_manage_passwords_ui_controller_cc patch-chrome_browser_ui_sad_tab_cc patch-chrome_browser_ui_signin_signin_view_controller_cc patch-chrome_browser_ui_startup_bad_flags_prompt_cc patch-chrome_browser_ui_startup_infobar_utils_cc patch-chrome_browser_ui_startup_startup_browser_creator_impl_cc patch-chrome_browser_ui_startup_startup_tab_provider_cc patch-chrome_browser_ui_tab_helpers_cc patch-chrome_browser_ui_tabs_public_tab_features_h patch-chrome_browser_ui_tabs_tab_features_cc patch-chrome_browser_ui_tabs_tab_strip_prefs_cc patch-chrome_browser_ui_ui_features_cc patch-chrome_browser_ui_ui_features_h patch-chrome_browser_ui_views_data_sharing_collaboration_controller_delegate_desktop_cc patch-chrome_browser_ui_views_frame_browser_view_cc patch-chrome_browser_ui_views_frame_system_menu_model_builder_cc patch-chrome_browser_ui_views_frame_system_menu_model_delegate_cc patch-chrome_browser_ui_views_location_bar_location_bar_view_cc patch-chrome_browser_ui_views_new_tab_footer_footer_controller_cc patch-chrome_browser_ui_views_profiles_avatar_toolbar_button_cc patch-chrome_browser_ui_views_profiles_first_run_flow_controller_cc patch-chrome_browser_ui_views_profiles_profile_picker_view_cc patch-chrome_browser_ui_views_tabs_dragging_tab_drag_controller_cc patch-chrome_browser_ui_views_tabs_projects_projects_panel_thread_item_view_cc patch-chrome_browser_ui_views_tabs_tab_cc patch-chrome_browser_ui_views_tabs_tab_style_views_cc patch-chrome_browser_ui_views_tabs_vertical_vertical_tab_group_header_view_cc patch-chrome_browser_ui_views_toolbar_toolbar_view_cc patch-chrome_browser_ui_views_user_education_browser_user_education_service_cc patch-chrome_browser_ui_views_web_apps_web_app_integration_test_driver_cc patch-chrome_browser_ui_web_applications_web_app_ui_manager_impl_cc patch-chrome_browser_ui_web_applications_web_app_ui_manager_impl_h patch-chrome_browser_ui_webui_about_about_ui_cc patch-chrome_browser_ui_webui_browser_webui_browser_window_cc patch-chrome_browser_ui_webui_chrome_web_ui_configs_cc patch-chrome_browser_ui_webui_connectors_internals_connectors_internals_page_handler_cc patch-chrome_browser_ui_webui_cr_components_searchbox_searchbox_handler_cc patch-chrome_browser_ui_webui_history_history_identity_state_watcher_cc patch-chrome_browser_ui_webui_management_management_ui_cc patch-chrome_browser_ui_webui_management_management_ui_constants_cc patch-chrome_browser_ui_webui_management_management_ui_constants_h patch-chrome_browser_ui_webui_management_management_ui_handler_cc patch-chrome_browser_ui_webui_settings_appearance_handler_cc patch-chrome_browser_ui_webui_settings_settings_localized_strings_provider_cc patch-chrome_browser_ui_webui_settings_site_settings_handler_cc patch-chrome_browser_ui_webui_side_panel_customize_chrome_customize_chrome_page_handler_cc patch-chrome_browser_ui_webui_user_education_internals_user_education_internals_page_handler_impl_cc patch-chrome_browser_web_applications_commands_launch_web_app_command_cc patch-chrome_browser_web_applications_os_integration_os_integration_manager_cc patch-chrome_browser_web_applications_test_os_integration_test_override_impl_cc patch-chrome_browser_web_applications_test_os_integration_test_override_impl_h patch-chrome_browser_web_applications_web_app_cc patch-chrome_browser_webauthn_chrome_authenticator_request_delegate_cc patch-chrome_browser_webauthn_enclave_manager_cc patch-chrome_common_chrome_features_cc patch-chrome_common_chrome_features_h patch-chrome_common_chrome_switches_cc patch-chrome_common_chrome_switches_h patch-chrome_common_pref_names_h patch-chrome_common_url_constants_h patch-chrome_common_webui_url_constants_cc patch-chrome_common_webui_url_constants_h patch-chrome_renderer_chrome_content_renderer_client_cc patch-chrome_updater_configurator_cc patch-chrome_updater_util_posix_util_cc patch-components_BUILD_gn patch-components_autofill_core_browser_payments_amount_extraction_manager_cc patch-components_autofill_core_browser_payments_bnpl_manager_cc patch-components_autofill_core_common_autofill_payments_features_cc patch-components_collaboration_public_collaboration_controller_delegate_h patch-components_dbus_xdg_file_transfer_portal_cc patch-components_device_signals_core_common_signals_features_cc patch-components_device_signals_core_common_signals_features_h patch-components_discardable_memory_service_discardable_shared_memory_manager_cc patch-components_enterprise_data_controls_core_browser_rule_cc patch-components_error_page_common_localized_error_cc patch-components_feature_engagement_public_feature_configurations_cc patch-components_feature_engagement_public_feature_constants_cc patch-components_feature_engagement_public_feature_constants_h patch-components_feature_engagement_public_feature_list_cc patch-components_feature_engagement_public_feature_list_h patch-components_feed_core_v2_feed_network_impl_unittest_cc patch-components_gwp_asan_crash_handler_crash_analyzer_cc patch-components_media_router_common_media_source_cc patch-components_metrics_drive_metrics_provider_cc patch-components_named_mojo_ipc_server_connection_info_h patch-components_optimization_guide_core_feature_registry_feature_registration_cc patch-components_optimization_guide_core_optimization_guide_features_cc patch-components_optimization_guide_core_optimization_guide_util_cc patch-components_paint_preview_browser_paint_preview_client_cc patch-components_paint_preview_player_player_compositor_delegate_cc patch-components_password_manager_core_browser_features_password_features_cc patch-components_password_manager_core_browser_features_password_features_h patch-components_password_manager_core_browser_password_autofill_manager_cc patch-components_password_manager_core_browser_password_autofill_manager_h patch-components_password_manager_core_browser_password_form_manager_cc patch-components_password_manager_core_browser_password_manager_client_h patch-components_password_manager_core_browser_password_manual_fallback_flow_cc patch-components_password_manager_core_browser_password_manual_fallback_flow_h patch-components_password_manager_core_browser_stub_password_manager_client_cc patch-components_password_manager_core_browser_stub_password_manager_client_h patch-components_safe_browsing_core_browser_realtime_url_lookup_service_base_cc patch-components_search_engines_template_url_service_cc patch-components_signin_public_base_signin_switches_cc patch-components_signin_public_base_signin_switches_h patch-components_soda_soda_util_cc patch-components_sync_device_info_local_device_info_util_cc patch-components_sync_service_sync_prefs_cc patch-components_user_education_views_help_bubble_view_cc patch-components_variations_service_variations_service_cc patch-components_viz_host_host_display_client_cc patch-components_viz_service_display_embedder_skia_output_surface_impl_cc patch-components_viz_service_gl_gpu_service_impl_cc patch-components_viz_service_gl_gpu_service_impl_h patch-components_webui_flags_flags_state_cc patch-content_browser_BUILD_gn patch-content_browser_accessibility_browser_accessibility_state_impl_auralinux_cc patch-content_browser_browser_main_loop_cc patch-content_browser_compositor_viz_process_transport_factory_cc patch-content_browser_devtools_devtools_frontend_host_impl_cc patch-content_browser_file_system_access_file_path_watcher_file_path_watcher_h patch-content_browser_renderer_host_delegated_frame_host_cc patch-content_browser_renderer_host_render_process_host_impl_cc patch-content_browser_renderer_host_render_view_host_impl_cc patch-content_browser_renderer_host_render_widget_host_view_aura_cc patch-content_browser_scheduler_responsiveness_jank_monitor_impl_cc patch-content_browser_scheduler_responsiveness_native_event_observer_cc patch-content_browser_scheduler_responsiveness_native_event_observer_h patch-content_browser_service_host_utility_process_host_cc patch-content_browser_web_contents_web_contents_view_aura_cc patch-content_common_BUILD_gn patch-content_common_features_cc patch-content_common_features_h patch-content_gpu_gpu_main_cc patch-content_public_browser_content_browser_client_cc patch-content_public_common_content_features_cc patch-content_public_common_content_switches_cc patch-content_public_common_content_switches_h patch-content_renderer_render_thread_impl_cc patch-content_renderer_renderer_blink_platform_impl_cc patch-content_renderer_renderer_blink_platform_impl_h patch-content_renderer_renderer_main_cc patch-content_shell_BUILD_gn patch-content_shell_browser_shell_platform_delegate_views_cc patch-content_shell_renderer_shell_content_renderer_client_cc patch-content_utility_services_cc patch-device_fido_public_features_cc patch-device_gamepad_public_cpp_gamepad_features_cc patch-device_gamepad_public_cpp_gamepad_features_h patch-gpu_command_buffer_service_dawn_context_provider_cc patch-gpu_command_buffer_service_gles2_cmd_decoder_cc patch-gpu_command_buffer_service_shared_context_state_h patch-gpu_command_buffer_service_shared_image_external_vk_image_backing_cc patch-gpu_command_buffer_service_shared_image_external_vk_image_backing_factory_cc patch-gpu_command_buffer_service_shared_image_shared_image_factory_cc patch-gpu_command_buffer_service_shared_image_shared_image_manager_cc patch-gpu_command_buffer_service_webgpu_decoder_impl_cc patch-gpu_config_gpu_finch_features_cc patch-gpu_ipc_service_gpu_init_cc patch-headless_BUILD_gn patch-headless_lib_browser_headless_content_browser_client_cc patch-headless_lib_headless_content_main_delegate_cc patch-media_base_media_switches_cc patch-media_base_media_switches_h patch-media_base_video_frame_cc patch-media_base_video_frame_h patch-media_capture_video_create_video_capture_device_factory_cc patch-media_capture_video_fake_video_capture_device_factory_cc patch-media_capture_video_linux_v4l2_capture_delegate_cc patch-media_capture_video_linux_video_capture_device_factory_v4l2_cc patch-media_capture_video_linux_video_capture_device_factory_v4l2_h patch-media_ffmpeg_scripts_build_ffmpeg_py patch-media_gpu_v4l2_v4l2_utils_cc patch-media_gpu_vaapi_vaapi_video_decoder_cc patch-media_gpu_vaapi_vaapi_wrapper_cc patch-media_media_options_gni patch-media_video_mappable_shared_image_video_frame_pool_cc patch-media_video_renderable_mappable_shared_image_video_frame_pool_cc patch-media_video_video_encode_accelerator_adapter_cc patch-media_webrtc_audio_processor_cc patch-media_webrtc_helpers_cc patch-mojo_public_tools_bindings_mojom_gni patch-net_BUILD_gn patch-net_base_features_cc patch-net_dns_BUILD_gn patch-net_dns_dns_util_cc patch-net_dns_public_BUILD_gn patch-net_socket_tcp_socket_posix_cc patch-net_url_request_url_request_context_builder_cc patch-net_url_request_url_request_context_h patch-net_websockets_websocket_basic_stream_adapters_test_cc patch-remoting_host_base_switches_cc patch-remoting_host_base_switches_h patch-remoting_host_chromoting_host_cc patch-remoting_host_chromoting_host_h patch-remoting_host_chromoting_host_services_client_cc patch-remoting_host_desktop_process_main_cc patch-remoting_host_host_main_cc patch-remoting_host_ipc_constants_cc patch-remoting_host_ipc_constants_h patch-remoting_host_ipc_desktop_environment_h patch-remoting_host_mojo_caller_security_checker_cc patch-remoting_host_remoting_me2me_host_cc patch-remoting_host_setup_start_host_main_cc patch-remoting_host_webauthn_remote_webauthn_extension_notifier_cc patch-sandbox_policy_features_cc patch-sandbox_policy_openbsd_sandbox_openbsd_cc patch-sandbox_policy_sandbox_type_cc patch-services_device_time_zone_monitor_time_zone_monitor_linux_cc patch-services_network_BUILD_gn patch-services_network_network_context_cc patch-services_network_network_context_h patch-services_network_network_sandbox_hook_linux_cc patch-services_network_network_service_cc patch-services_network_public_cpp_BUILD_gn patch-services_network_public_mojom_BUILD_gn patch-services_screen_ai_sandbox_screen_ai_sandbox_hook_linux_cc patch-services_shape_detection_shape_detection_sandbox_hook_cc patch-services_tracing_public_cpp_system_metrics_sampler_cc patch-services_viz_public_mojom_BUILD_gn patch-services_webnn_features_gni patch-sql_database_cc patch-third_party_angle_BUILD_gn patch-third_party_angle_src_libANGLE_renderer_gl_glx_FunctionsGLX_cpp patch-third_party_blink_common_features_cc patch-third_party_blink_public_platform_platform_h patch-third_party_blink_renderer_controller_memory_usage_monitor_posix_cc patch-third_party_blink_renderer_core_exported_web_view_impl_cc patch-third_party_blink_renderer_core_frame_web_frame_test_cc patch-third_party_blink_renderer_core_page_context_menu_controller_cc patch-third_party_blink_renderer_modules_webaudio_audio_worklet_thread_test_cc patch-third_party_blink_renderer_modules_webgl_webgl_rendering_context_base_cc patch-third_party_blink_renderer_modules_webgpu_gpu_canvas_context_cc patch-third_party_blink_renderer_modules_webgpu_gpu_queue_cc patch-third_party_blink_renderer_platform_BUILD_gn patch-third_party_blink_renderer_platform_graphics_canvas_resource_provider_cc patch-third_party_blink_renderer_platform_graphics_video_frame_submitter_cc patch-third_party_blink_renderer_platform_runtime_enabled_features_json5 patch-third_party_ffmpeg_configure patch-third_party_pdfium_core_fxge_cfx_fontmapper_cpp patch-third_party_perfetto_src_base_unix_socket_cc patch-third_party_speech-dispatcher_libspeechd_version_h patch-third_party_sqlite_src_amalgamation_dev_sqlite3_c patch-third_party_sqlite_src_amalgamation_sqlite3_c patch-third_party_webrtc_modules_audio_device_BUILD_gn patch-tools_gn_build_gen_py patch-ui_accessibility_accessibility_features_cc patch-ui_accessibility_accessibility_features_h patch-ui_accessibility_ax_node_cc patch-ui_accessibility_ax_node_h patch-ui_accessibility_ax_tree_cc patch-ui_base_clipboard_clipboard_cc patch-ui_base_ui_base_features_cc patch-ui_base_x_x11_drag_context_cc patch-ui_compositor_compositor_h patch-ui_events_event_cc patch-ui_gfx_native_ui_types_h patch-ui_gtk_select_file_dialog_linux_gtk_cc patch-ui_ozone_platform_wayland_host_wayland_clipboard_cc patch-ui_ozone_platform_wayland_host_wayland_data_drag_controller_cc patch-ui_ozone_platform_wayland_host_wayland_exchange_data_provider_cc patch-ui_ozone_platform_wayland_host_wayland_frame_manager_cc patch-ui_ozone_platform_x11_x11_clipboard_ozone_cc patch-ui_views_BUILD_gn patch-ui_views_controls_textfield_textfield_cc patch-ui_views_controls_textfield_textfield_h patch-ui_views_widget_widget_cc patch-ui_views_widget_widget_h patch-ui_views_window_dialog_delegate_cc patch-v8_BUILD_gn patch-v8_src_api_api_cc patch-v8_src_execution_isolate_cc patch-v8_src_flags_flags_cc Added files: www/ungoogled-chromium/patches: patch-base_threading_hang_watcher_cc patch-chrome_browser_enterprise_connectors_reporting_crash_reporting_context_h patch-chrome_browser_extensions_api_api_browser_context_keyed_service_factories_cc patch-chrome_browser_extensions_api_web_authentication_proxy_web_authentication_proxy_api_h patch-chrome_browser_feedback_show_feedback_page_cc patch-chrome_browser_glic_public_features_cc patch-chrome_browser_ui_views_tabs_hovercard_tab_hover_card_bubble_view_cc patch-chrome_browser_ui_views_tabs_shared_drop_arrow_cc patch-chrome_browser_ui_webui_sanitized_image_sanitized_image_source_cc patch-chrome_browser_ui_webui_sanitized_image_sanitized_image_source_h patch-chrome_browser_ui_webui_search_engine_choice_search_engine_choice_ui_cc patch-chrome_browser_ui_webui_signin_sync_confirmation_ui_cc patch-chrome_browser_webauthn_chrome_web_authentication_delegate_cc patch-components_autofill_core_browser_suggestions_payments_credit_card_suggestion_generator_cc patch-components_signin_internal_identity_manager_account_capabilities_list_h patch-components_signin_public_identity_manager_account_capabilities_cc patch-components_signin_public_identity_manager_account_capabilities_h patch-components_sync_service_device_statistics_tracker_cc patch-components_wallet_core_browser_network_wallet_request_cc patch-components_webapps_browser_web_app_url_config_cc patch-gpu_command_buffer_service_shared_image_dawn_ozone_image_representation_cc patch-remoting_base_crash_crashpad_database_manager_cc patch-remoting_base_remoting_export_h patch-remoting_base_security_key_socket_name_cc patch-remoting_host_chromoting_host_services_server_cc patch-remoting_host_desktop_session_proxy_cc patch-remoting_host_desktop_session_proxy_h patch-remoting_host_host_attributes_cc patch-remoting_host_ipc_desktop_environment_cc patch-third_party_cpuinfo_BUILD_gn patch-third_party_libsync_src_include_ndk_sync_h patch-third_party_libsync_src_sync_c patch-third_party_litert_features_gni patch-ui_base_x_selection_owner_cc patch-ui_base_x_selection_owner_h patch-ui_base_x_x11_drag_context_h patch-ui_ozone_platform_x11_x11_clipboard_ozone_h patch-v8_src_base_macros_h Removed files: www/ungoogled-chromium/patches: patch-chrome_app_settings_strings_grdp patch-chrome_browser_ui_url_identity_cc patch-chrome_browser_ui_views_tabs_tab_hover_card_bubble_view_cc patch-chrome_browser_web_applications_web_app_helpers_cc patch-extensions_browser_api_management_management_api_cc patch-third_party_blink_renderer_core_origin_trials_origin_trial_context_cc patch-third_party_libunwind_src_src_Registers_hpp patch-ui_base_x_selection_utils_cc patch-ui_base_x_x11_os_exchange_data_provider_cc patch-ui_gfx_gpu_fence_cc patch-ui_views_widget_root_view_cc Log message: update to 148.0.7778.96 CVSROOT: /cvs Module name: www Changes by: tj@cvs.openbsd.org 2026/05/08 09:59:12 Modified files: faq/pf : tagging.html Log message: fix subject-verb agreement CVSROOT: /cvs Module name: ports Changes by: bluhm@cvs.openbsd.org 2026/05/08 10:56:28 Modified files: textproc/p5-Text-CSV_XS: Makefile distinfo Log message: update p5-Text-CSV_XS to 1.62 CVE-2026-7111 OK afresh1@ CVSROOT: /cvs Module name: ports Changes by: pascal@cvs.openbsd.org 2026/05/08 10:57:18 Modified files: net/tor : Makefile distinfo Log message: SECURITY update to tor 0.4.9.8. CVSROOT: /cvs Module name: ports Changes by: bluhm@cvs.openbsd.org 2026/05/08 10:59:17 Modified files: security/p5-CryptX: Makefile distinfo Log message: update p5-CryptX to 0.088 CVE-2026-41564 CVSROOT: /cvs Module name: ports Changes by: volker@cvs.openbsd.org 2026/05/08 11:04:54 Modified files: net/haproxy : Makefile distinfo Log message: net/haproxy: Update to 3.2.18 From Mark Patruck, thanks ok tb@ CVSROOT: /cvs Module name: ports Changes by: kirill@cvs.openbsd.org 2026/05/08 11:07:01 Modified files: www/hugo : Makefile distinfo modules.inc Log message: www/hugo: update to 0.161.1 Changes: - https://github.com/gohugoio/hugo/releases/tag/v0.161.0 - https://github.com/gohugoio/hugo/releases/tag/v0.161.1 CVSROOT: /cvs Module name: xenocara Changes by: matthieu@cvs.openbsd.org 2026/05/08 11:28:15 Added files: xserver : SECURITY.md Log message: Add missed file in update to 21.1.22 CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/08 12:24:40 Modified files: www/firefox-esr: Makefile distinfo Log message: www/firefox-esr: drop now unneeded distpatch for ffmpeg8 seems #2036244 adds support for ffmpeg8 in the esr140 branch, i've been able to play video from various streaming sites without issues. patch failure reported by ajacoutot@ CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/08 12:32:11 Modified files: mail/mozilla-thunderbird: Makefile distinfo mail/thunderbird-i18n: Makefile.inc distinfo Log message: mail/mozilla-thunderbird: update to 140.10.2. see https://www.thunderbird.net/en-US/thunderbird/140.10.2esr/releasenotes/ fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-44/ CVSROOT: /cvs Module name: ports Changes by: volker@cvs.openbsd.org 2026/05/08 12:33:29 Modified files: sysutils/moor : Makefile distinfo Log message: sysutils/moor: Update to 2.12.3 From Maintainer Lydia Sobot, thanks CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/08 13:08:33 Modified files: geo/gdal : Makefile distinfo geo/gdal/pkg : PLIST-main PLIST-python Log message: geo/gdal: update to 3.13.0. see https://github.com/OSGeo/gdal/blob/v3.13.0/NEWS.md CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2026/05/08 13:10:45 Modified files: devel/nspr : Makefile distinfo devel/nspr/patches: patch-nspr_pr_include_md__openbsd_cfg patch-nspr_pr_include_md__openbsd_h patch-nspr_pr_src_linking_prlink_c patch-nspr_pr_src_misc_prdtoa_c patch-nspr_pr_src_misc_prinit_c patch-nspr_pr_src_misc_prnetdb_c patch-nspr_pr_tests_nameshm1_c patch-nspr_pr_tests_socket_c Log message: devel/nspr: update to 4.39 CVSROOT: /cvs Module name: ports Changes by: bluhm@cvs.openbsd.org 2026/05/08 13:12:06 Modified files: net/ipv6-toolkit: Makefile distinfo net/ipv6-toolkit/pkg: PLIST Added files: net/ipv6-toolkit/patches: patch-tools_icmp6_c patch-tools_mldq6_c patch-tools_na6_c patch-tools_ni6_c patch-tools_ns6_c patch-tools_path6_c patch-tools_ra6_c patch-tools_rs6_c patch-tools_tcp6_c patch-tools_udp6_c Removed files: net/ipv6-toolkit/patches: patch-tools_flow6_c patch-tools_libipv6_c patch-tools_scan6_c Log message: update ipv6toolkit to version 2.2 switch upstream to github CVSROOT: /cvs Module name: www Changes by: tj@cvs.openbsd.org 2026/05/08 13:38:55 Modified files: . : ECL.html alpha.html books.html events.html loongson.html socppc.html solbourne.html sparc64.html sun3.html openiked : security.html openssh : agent-restrict.html history.html releasenotes.html Log message: various spelling and grammar fixes and duplicate word removals CVSROOT: /cvs Module name: xenocara Changes by: matthieu@cvs.openbsd.org 2026/05/08 13:57:29 Modified files: . : MODULES 3RDPARTY Log message: update CVSROOT: /cvs Module name: ports Changes by: bluhm@cvs.openbsd.org 2026/05/08 14:06:21 ports/net/p5-Net-DHCP/patches Update of /cvs/ports/net/p5-Net-DHCP/patches In directory cvs.openbsd.org:/tmp/cvs-serv30377/patches Log Message: Directory /cvs/ports/net/p5-Net-DHCP/patches added to the repository CVSROOT: /cvs Module name: ports Changes by: volker@cvs.openbsd.org 2026/05/08 14:29:56 Modified files: lang/deno : Makefile Log message: lang/deno: Add LIB_DEPENDS / WANTLIB for textproc/oniguruma With 2.7.x the onig crates slipped back into deno. pointed out by tb@, thanks CVSROOT: /cvs Module name: ports Changes by: bluhm@cvs.openbsd.org 2026/05/08 15:21:31 Modified files: net/p5-Net-DHCP: Makefile distinfo net/p5-Net-DHCP/pkg: PLIST Added files: net/p5-Net-DHCP/patches: patch-t_102-discover-offer-request-ack_t patch-t_103-real-nak_t patch-t_104-offer-o90-o120_t patch-t_105-discover-offer-o122-o82_t patch-t_106-discover-offer-o60-o43-o82_t patch-t_107-query-active-qry-unass-qry-unk_t Log message: update p5-Net-DHCP to 0.700 disable test that require a huge dependency tree take maintainer CVSROOT: /cvs Module name: ports Changes by: bluhm@cvs.openbsd.org 2026/05/08 16:04:11 ports/security/p5-Crypt-PasswdMD5/patches Update of /cvs/ports/security/p5-Crypt-PasswdMD5/patches In directory cvs.openbsd.org:/tmp/cvs-serv60570/patches Log Message: Directory /cvs/ports/security/p5-Crypt-PasswdMD5/patches added to the repository CVSROOT: /cvs Module name: ports Changes by: bluhm@cvs.openbsd.org 2026/05/08 16:06:57 Modified files: security/p5-Crypt-PasswdMD5: Makefile distinfo security/p5-Crypt-PasswdMD5/pkg: DESCR Added files: security/p5-Crypt-PasswdMD5/patches: patch-lib_Crypt_PasswdMD5_pm Log message: update p5-Crypt-PasswdMD5 to 1.42 add patch to fix CVE-2026-6659 CVSROOT: /cvs Module name: ports Changes by: bluhm@cvs.openbsd.org 2026/05/08 16:59:00 Modified files: devel/p5-Devel-Leak: Makefile distinfo devel/p5-Devel-Leak/pkg: PLIST Log message: update p5-Devel-Leak to 0.04 CVSROOT: /cvs Module name: ports Changes by: bluhm@cvs.openbsd.org 2026/05/08 17:21:04 Modified files: net/p5-NetPacket: Makefile distinfo net/p5-NetPacket/patches: patch-MANIFEST net/p5-NetPacket/pkg: PLIST Log message: update p5-NetPacket to 1.8.0 CVSROOT: /cvs Module name: ports Changes by: afresh1@cvs.openbsd.org 2026/05/08 18:22:20 Modified files: www/p5-Starman : Makefile distinfo Log message: Update p5-Starman to 0.4018 ok bluhm@ ok Abel Abraham Camarillo Ojeda (MAINTAINER) CVSROOT: /cvs Module name: src Changes by: dlg@cvs.openbsd.org 2026/05/08 18:37:45 Modified files: sys/net : bpf_filter.c Log message: detect out of bound reads from an int overflow in the bpf_mem backends. frank denis reported a problem in bpf_mem_ldw where a large indirect load offset could have the end of buffer calculation land at UINT_MAX and wrap, allowing a read of memory outside the buffer. this change tweaks the buffer checks by checking if the load offset is in range, taking that away from the buffer length, and then checking if the size of the load is in the remaining buffer length. this is the pattern that the bpf_mbuf_ops backend uses. this problem also exists in bpf_mem_ldh, so this code is factored out and used in all the bpf_mem_ops load backends. note that this issue is specific to the bpf_mem_ops backend used for running bpf filters against a vanilla memory buffer. this backend is largely unused in the kernel, which almost always uses the bpf_mbuf_ops backend to run filters against network packets in mbufs. the bpf_mem_ops are only used by ppp(4) for the "active-filter" and "pass-filter" config described in pppd(8). more generally, bpf is only really usable by root. in userland, bpf_filter is used by libpcap, and programs in base that use it are wary of it anyway and avoid running it in a privileged context. tcpdump is the most prominent example of this. discussed with djm@ claudio@ deraadt@ CVSROOT: /cvs Module name: ports Changes by: kirill@cvs.openbsd.org 2026/05/08 19:20:27 Modified files: devel/codex : Makefile crates.inc distinfo devel/codex/patches: patch-codex-rs_Cargo_toml patch-codex-rs_core_src_config_mod_rs patch-codex-rs_realtime-webrtc_Cargo_toml Log message: devel/codex: update to 0.130.0 CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/05/08 19:22:32 Modified files: usr.sbin/rpki-client: main.c Log message: rpki-client: fix shortlist and skiplist checks Ensure that each le->fqdn is fully matched. If the the host in the SIA is short and matches a prefix of an FQDN in the shortlist or skiplist, the current checks in queue_add_from_cert() will incorrectly trigger. Compute the host length once and by checking it against the length of each le->fqdn ensure that it is an exact case sensitive match, rather than only a prefix. Found by Frank Denis ok claudio job CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/05/08 19:42:30 Modified files: usr.sbin/rpki-client: ip.c Log message: rpki-client: fix ip_addr_check_overlap() There is an off-by-one in the ip_addr_check_overlap() logic which allows a newly added interval to overlap in a common end point with an interval already in the list. Disallow equality in the two memcmp to avoid this. This bug dates back to the initial import of rpki-client where malformed certificates would be accepted. In modern rpki-client, the impact of this has been minimal ever since we started requiring that libcrypto support the RFC 3779 extensions in early 2022 by disallowing unknown critical extensions (rpki-client 7.6): For certificates this duplicates a check in the X.509 verifier (where it is correct). For TA constraints we have a canonicalization procedure that ensures the absence of overlaps. For ROAs no such check can be made since standards historically haven't required that addresses are canonical and still don't. The only remaining use of this API is from rsc.c where the overlap condition is indeed a small problem. Found by Frank Denis ok job CVSROOT: /cvs Module name: src Changes by: dlg@cvs.openbsd.org 2026/05/08 19:47:12 Modified files: sys/net : if_tun.c Log message: avoid leaking memory when mbuf chain allocations fail in tun_dev_write() the mbufs built by tun_dev_write used to be limited to a single mbuf and cluster, but has grown in complexity now that it supports tun_hdr and tso, which required building mbuf chains. some of the error handling when allocating mbuf bits wasnt adapted to free the preceding chain when later allocaitons failed, resulting in a memory leak. reported by frank denis CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2026/05/08 19:54:51 Modified files: lib/libc/asr : getrrsetbyname_async.c Log message: Avoid recursive cleanup in getrrsetbyname() Instead of freeing struct dns_query and struct dns_rr by walking the linked lists recursively, use a simple loop. This avoids a possible stack exhaustion unlikely to be reachable with the limits modern resolvers impose. From Dhiraj Mishra ok djm CVSROOT: /cvs Module name: src Changes by: millert@cvs.openbsd.org 2026/05/08 20:13:21 Modified files: usr.bin/awk : run.c Log message: split: allocate space for NUL terminator in CSV mode Found by Frank Denis CVSROOT: /cvs Module name: ports Changes by: bket@cvs.openbsd.org 2026/05/08 21:51:01 Modified files: sysutils/rclone: Makefile distinfo Log message: Update to rclone-1.74.1 Changes: https://rclone.org/changelog/#v1-74-1-2026-05-08 CVSROOT: /cvs Module name: src Changes by: kevlo@cvs.openbsd.org 2026/05/08 23:50:33 Modified files: sys/dev/pci : if_mwxreg.h Log message: MT_DMASHDL_SW_CONTROL is accessed via remapping. Define it with the explicit address 0x7c026004 as Linux does to avoid confusion. While here, remove duplicate definitions of MT_PCIE_MAC_BASE and MT_PCIE_MAC_INT_ENABLE. ok claudio@ CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2026/05/09 00:36:06 Modified files: sys/net : if_tun.c if_rport.c Log message: remove unneeded mpls.h includes CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/09 00:41:02 Modified files: devel/py-gobject3: Makefile distinfo Log message: Update to py3-gobject3-3.56.3. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/09 00:44:53 Modified files: print/cups-pdf : Makefile distinfo print/cups-pdf/patches: patch-extra_cups-pdf_conf patch-src_cups-pdf_h Log message: Update to cups-pdf-3.0.3. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/09 00:49:24 Modified files: net/py-botocore: Makefile distinfo net/py-botocore/pkg: PLIST Log message: Update to py3-botocore-1.43.6. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/09 00:49:33 Modified files: net/py-s3transfer: Makefile distinfo Log message: Update to py3-s3transfer-0.17.0. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/09 00:49:47 Modified files: net/py-boto3 : Makefile distinfo Log message: Update to py3-boto3-1.43.6. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2026/05/09 00:50:11 Modified files: sysutils/awscli/v1: Makefile distinfo sysutils/awscli/v1/pkg: PLIST Log message: Update to awscli-1.45.6. CVSROOT: /cvs Module name: ports Changes by: rsadowski@cvs.openbsd.org 2026/05/09 00:59:41 Modified files: devel/kf6/kcmutils: Makefile Log message: Add new dependency on devel/kf6/kirigami CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2026/05/09 01:02:29 Modified files: lib/libcrypto/sha: sha1_aarch64_ce.S sha1_amd64_shani.S Log message: Correct argument type in comments. CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2026/05/09 01:03:49 Modified files: lib/libcrypto/sha: sha1_aarch64.c Log message: Correct argument type for SHA context. These are SHA_CTX not SHA256_CTX.