OpenBSD/ports Fz9nHUzgraphics/rawtherapee distinfo Makefile, graphics/rawtherapee/patches patch-rtgui_options_cc patch-rtgui_cacheimagedata_cc

   update to rawtherapee-5.13
VersionDeltaFile
1.21+2-4graphics/rawtherapee/pkg/PLIST
1.48+4-2graphics/rawtherapee/Makefile
1.4+2-2graphics/rawtherapee/patches/patch-rtgui_multilangmgr_cc
1.17+2-2graphics/rawtherapee/distinfo
1.5+1-1graphics/rawtherapee/patches/patch-rtgui_options_cc
1.4+1-1graphics/rawtherapee/patches/patch-rtgui_cacheimagedata_cc
+12-123 files not shown
+15-159 files

OpenBSD/ports 1gF0NM2security/p5-Crypt-SaltedHash distinfo Makefile, security/p5-Crypt-SaltedHash/pkg PLIST

   update p5-Crypt-SaltedHash to 0.12
   CVE-2026-47372 CVE-2026-47373
VersionDeltaFile
1.15+9-8security/p5-Crypt-SaltedHash/Makefile
1.4+2-2security/p5-Crypt-SaltedHash/distinfo
1.3+0-1security/p5-Crypt-SaltedHash/pkg/PLIST
+11-113 files

OpenBSD/ports HUvrwTudevel/got Makefile distinfo

   update to got 0.128

   - switch from imsg_get(), removed in OpenBSD-current, to imsgbuf_get()
   - fix tp_urlescape() escaping in template tool for gotwebd
   - fix off-by-one in pack index verification: check up to fanout_table[0xff]
   - fix ignore pattern matching when a file path is given to 'got status'
   - plug several memory leaks reachable via 'got histedit' and other commands
   - fix bogus "bad object" errors from 'got merge -a' when merging a tag
   - fix segfault in error handling path of gotsys-apply-conf
   - fix bogus "no such file or directory" errors seen during histedit
VersionDeltaFile
1.129+2-2devel/got/distinfo
1.148+1-1devel/got/Makefile
+3-32 files

OpenBSD/ports iUdTMkTmail/p5-Mail-AuthenticationResults Makefile distinfo

   update p5-Mail-AuthenticationResults to 2.20260216
VersionDeltaFile
1.9+2-2mail/p5-Mail-AuthenticationResults/distinfo
1.12+2-1mail/p5-Mail-AuthenticationResults/Makefile
+4-32 files

OpenBSD/ports RRvbsGsgames/cataclysm-dda Makefile, games/cataclysm-dda/patches patch-tests_new_character_test_cpp patch-src_third-party_flatbuffers_int_util_h

   Unbreak libcxx22 build and tweak Makefile

   Maintainer timeout, ccache feedback by sthen@
VersionDeltaFile
1.38+12-11games/cataclysm-dda/Makefile
1.1+15-0games/cataclysm-dda/patches/patch-src_third-party_flatbuffers_int_util_h
1.1+13-0games/cataclysm-dda/patches/patch-tests_new_character_test_cpp
+40-113 files

OpenBSD/ports V6sv3LWlang/rust rust.port.mk Makefile, lang/rust/patches patch-library_std_src_sys_paths_unix_rs

   lang/rust: update to 1.98.1

   use getexecpath() (from kirill@)
VersionDeltaFile
1.2+29-13lang/rust/patches/patch-library_std_src_sys_paths_unix_rs
1.169+2-2lang/rust/distinfo
1.26+1-1lang/rust/rust.port.mk
1.253+1-1lang/rust/Makefile
+33-174 files

OpenBSD/ports u0GfPEJmisc/p5-User-Identity distinfo Makefile

   update p5-User-Identity to 3.00
   no functional change
   version 4.00 is incompatible with our p5-Mail-Box 2.118
VersionDeltaFile
1.17+3-2misc/p5-User-Identity/Makefile
1.9+2-2misc/p5-User-Identity/distinfo
+5-42 files

OpenBSD/src BXKjEEtsys/dev/ic ufshci.c

   Move the "unhandled interrupt" printf to DPRINTF to avoid a red herring,
   as seen during the arm64 hibernate resume.
VersionDeltaFile
1.48+2-2sys/dev/ic/ufshci.c
+2-21 files

OpenBSD/ports Imclci6x11/contour Makefile

   do not pick up ccache (USE_CCACHE keeps working); OK rsadowski
VersionDeltaFile
1.2+1-0x11/contour/Makefile
+1-01 files

OpenBSD/src 3KACo7Ddistrib/sets/lists/base mi

   sync, libutil major bump
VersionDeltaFile
1.1198+1-1distrib/sets/lists/base/mi
+1-11 files

OpenBSD/ports 03lTxxqwww/p5-LWP-MediaTypes Makefile distinfo

   update p5-LWP-MediaTypes to 6.05
   no functional change
VersionDeltaFile
1.7+1-3www/p5-LWP-MediaTypes/Makefile
1.3+2-2www/p5-LWP-MediaTypes/distinfo
+3-52 files

OpenBSD/src DpT6BZIlib/libutil Symbols.map imsg-buffer.c

   Remove imsg_get() and imsg_compose_ibuf() from the imsg API.

   While doing so add the following functions:
   - imsg_add_strbuf
     a wrapper for ibuf_add_strbuf similar to imsg_add it uses the
     imsg namespace. It feels more natural to use imsg_add and
     imsg_add_strbuf to construct messages (mixing imsg_add and ibuf_add_xyz
     seems strange).

   - imsgbuf_get_userdata & imsgbuf_set_userdata
   - imsgbuf_set_close_callback
     These three functions are used to replace the bad imsgev wrappers in
     various deamons. It actually allows one to use the imsg API directly
     in libevent code.

   - msgbuf_readlen
     return how many messages are ready to be processed on a msgbuf.
     This can be used to implement a back pressure mechanism for individual
     msgbuf sockets.

    [2 lines not shown]
VersionDeltaFile
1.44+42-55lib/libutil/imsg.c
1.48+50-23lib/libutil/imsg_init.3
1.25+9-4lib/libutil/imsg.h
1.13+10-2lib/libutil/ibuf_add.3
1.42+7-1lib/libutil/imsg-buffer.c
1.18+5-2lib/libutil/Symbols.map
+123-871 files not shown
+124-887 files

OpenBSD/src tsMnyxAregress/sys/net/pf_state LICENSE README

   Add regression test that uses a crafted TCP reset packet with
   acknowledgment number 0.  pf must not drop the state.
VersionDeltaFile
1.1+84-0regress/sys/net/pf_state/fakeack_rst.py
1.16+6-4regress/sys/net/pf_state/Makefile
1.3+3-0regress/sys/net/pf_state/README
1.3+1-1regress/sys/net/pf_state/LICENSE
+94-54 files

OpenBSD/src JGRxduPsys/dev/fdt qcgpio_fdt.c

   Improve suspend/resume support such that it restores the configuration
   of pins used as interrupts.  Needed for hibernate support on arm64.

   ok deraadt@, jca@, mglocker@
VersionDeltaFile
1.9+20-11sys/dev/fdt/qcgpio_fdt.c
+20-111 files

OpenBSD/src 9uJduVvsys/arch/arm64/stand/efiboot disk.h Makefile

   Add hibernate support for efiboot on arm64.

   ok kettenis@, deraadt@
VersionDeltaFile
1.14+42-1sys/arch/arm64/stand/efiboot/efidev.c
1.5+3-1sys/arch/arm64/stand/efiboot/efidev.h
1.72+3-1sys/arch/arm64/stand/efiboot/efiboot.c
1.4+2-1sys/arch/arm64/stand/efiboot/disk.h
1.24+2-1sys/arch/arm64/stand/efiboot/Makefile
+52-55 files

OpenBSD/src zA5y1Fpdistrib/sets/lists/base mi

   sync
VersionDeltaFile
1.1197+1-1distrib/sets/lists/base/mi
+1-11 files

OpenBSD/ports vXFEjpjcad/kicad distinfo, cad/kicad-share/packages3D/pkg PLIST

   Update kicad to 10.0.6
VersionDeltaFile
1.9+4-4cad/kicad/patches/patch-eeschema_eeschema_jobs_handler_cpp
1.25+6-0cad/kicad-share/packages3D/pkg/PLIST
1.10+2-2cad/kicad/patches/patch-kicad_kicad_manager_frame_cpp
1.30+2-2cad/kicad/distinfo
1.24+2-2cad/kicad-share/templates/distinfo
1.24+2-2cad/kicad-share/symbols/distinfo
+18-129 files not shown
+31-2215 files

OpenBSD/src RrHkARuregress/lib/libcrypto/free freenull.awk

   freenull.awk: remove special casing of a few functions we removed
VersionDeltaFile
1.5+2-20regress/lib/libcrypto/free/freenull.awk
+2-201 files

OpenBSD/src ovTz3n4lib/libfido2/man fido_cbor_info_new.3, lib/libfido2/src es384.c assert.c

   libfido2: update to 1.17.0

   OK: djm@, deraadt@
VersionDeltaFile
1.6+291-135lib/libfido2/src/cbor.c
1.6+378-19lib/libfido2/src/info.c
1.6+299-67lib/libfido2/src/cred.c
1.7+304-9lib/libfido2/man/fido_cbor_info_new.3
1.6+232-72lib/libfido2/src/assert.c
1.1+296-0lib/libfido2/src/es384.c
+1,800-30283 files not shown
+4,753-95989 files

OpenBSD/ports g06cdHNsecurity/gnupg Makefile distinfo

   Update to gnupg-2.5.22

   Changes: https://dev.gnupg.org/T8320.html
VersionDeltaFile
1.55+2-2security/gnupg/distinfo
1.151+1-1security/gnupg/Makefile
+3-32 files

OpenBSD/ports Z97ycfenet/openvpn Makefile distinfo, net/openvpn/patches patch-src_openvpn_crypto_openssl_c patch-sample_sample-config-files_server_conf

   SECURITY update to openvpn-2.7.7

   https://github.com/OpenVPN/openvpn/blob/v2.7.7/Changes.rst
   Likely relevant for us:
   reliability layer: Avoid unbounded reliable TLS timeout (CVE-2026-84732)
   reliability layer: Ignore acks for packets that cannot be outstanding (CVE-2026-84732)
VersionDeltaFile
1.78+2-2net/openvpn/distinfo
1.3+1-1net/openvpn/patches/patch-src_openvpn_crypto_openssl_c
1.10+1-1net/openvpn/patches/patch-sample_sample-config-files_server_conf
1.5+1-1net/openvpn/patches/patch-sample_sample-config-files_client_conf
1.151+1-1net/openvpn/Makefile
+6-65 files

OpenBSD/ports 7KaT7zlnet/openvpn Makefile distinfo, net/openvpn/patches patch-src_openvpn_crypto_openssl_c patch-sample_sample-config-files_server_conf

   SECURITY update to openvpn-2.7.7

   https://github.com/OpenVPN/openvpn/blob/v2.7.7/Changes.rst
   Likely relevant for us:
   reliability layer: Avoid unbounded reliable TLS timeout (CVE-2026-84732)
   reliability layer: Ignore acks for packets that cannot be outstanding (CVE-2026-84732)
VersionDeltaFile
1.74.2.3+2-2net/openvpn/distinfo
1.2.2.2+1-1net/openvpn/patches/patch-src_openvpn_crypto_openssl_c
1.9.2.1+1-1net/openvpn/patches/patch-sample_sample-config-files_server_conf
1.4.2.1+1-1net/openvpn/patches/patch-sample_sample-config-files_client_conf
1.146.2.4+1-1net/openvpn/Makefile
+6-65 files

OpenBSD/ports P2PsTFadevel/p5-Locale-Codes Makefile distinfo

   update p5-Locale-Codes to 3.91
VersionDeltaFile
1.19+2-2devel/p5-Locale-Codes/distinfo
1.21+1-1devel/p5-Locale-Codes/Makefile
+3-32 files

OpenBSD/ports TshWfEDconverters/p5-Cpanel-JSON-XS Makefile distinfo

   update p5-Cpanel-JSON-XS to 4.44
VersionDeltaFile
1.47+2-2converters/p5-Cpanel-JSON-XS/distinfo
1.51+1-1converters/p5-Cpanel-JSON-XS/Makefile
+3-32 files

OpenBSD/ports stt3Ve8www/mozilla-firefox Makefile distinfo

   www/mozilla-firefox: MFC update to 155.0.1.

   see https://www.firefox.com/en-US/firefox/155.0.1/releasenotes/
VersionDeltaFile
1.397.2.19+2-2www/mozilla-firefox/distinfo
1.680.2.21+1-1www/mozilla-firefox/Makefile
+3-32 files

OpenBSD/ports oFquceawww/firefox-i18n Makefile.inc distinfo, www/mozilla-firefox Makefile distinfo

   www/mozilla-firefox: update to 155.0.1.

   see https://www.firefox.com/en-US/firefox/155.0.1/releasenotes/
VersionDeltaFile
1.406+164-164www/firefox-i18n/distinfo
1.420+4-4www/mozilla-firefox/distinfo
1.707+2-2www/mozilla-firefox/Makefile
1.361+1-1www/firefox-i18n/Makefile.inc
+171-1714 files

OpenBSD/ports sBk4hR5www/p5-HTML-FormHandler distinfo Makefile

   update p5-HTML-FormHandler to 0.410001
   CVE-2026-19872 CVE-2022-4993
VersionDeltaFile
1.3+2-2www/p5-HTML-FormHandler/distinfo
1.4+3-1www/p5-HTML-FormHandler/Makefile
+5-32 files

OpenBSD/ports WWguhJrgeo/qgis Makefile

   do not pick up ccache (USE_CCACHE keeps working); OK landry
VersionDeltaFile
1.238+1-0geo/qgis/Makefile
+1-01 files

OpenBSD/src GW3gdp2gnu/llvm/clang/lib/Sema SemaRISCV.cpp, gnu/llvm/llvm/lib/Target/Mips MipsInstrInfo.cpp

   llvm: backport RISC-V and MIPS fixes

   The bit for riscv64 apparently fixes devel/highway and is this:
   https://github.com/llvm/llvm-project/commit/fd6d7a608909dc4ecea57e0155042d16f7b4e61a

   The bit for mips64 apparently fixes MariaDB and GnuAstro:
   https://github.com/llvm/llvm-project/commit/a97f512d71574c0b9adc9bc6216909387499e0e8

   From Brad Smith

   OK: robert@, kettenis@
VersionDeltaFile
1.2+505-112gnu/llvm/clang/lib/Sema/SemaRISCV.cpp
1.2+197-8gnu/llvm/llvm/lib/Target/Mips/MipsInstrInfo.cpp
+702-1202 files

OpenBSD/ports OQllyBsdevel/llvm/22 Makefile, devel/llvm/22/patches patch-llvm_lib_Target_Mips_MipsInstrInfo_cpp patch-clang_lib_Sema_SemaRISCV_cpp

   devel/llvm/22: backport RISC-V and MIPS fixes

   The bit for riscv64 apparently fixes devel/highway and is this:
   https://github.com/llvm/llvm-project/commit/fd6d7a608909dc4ecea57e0155042d16f7b4e61a

   The bit for mips64 apparently fixes MariaDB and GnuAstro:
   https://github.com/llvm/llvm-project/commit/a97f512d71574c0b9adc9bc6216909387499e0e8

   From Brad Smith

   OK: robert@, kettenis@
VersionDeltaFile
1.1+33-0devel/llvm/22/patches/patch-clang_lib_Sema_SemaRISCV_cpp
1.1+17-0devel/llvm/22/patches/patch-llvm_lib_Target_Mips_MipsInstrInfo_cpp
1.27+1-1devel/llvm/22/Makefile
+51-13 files