OpenBSD/ports JM9Nx4iwww/mozilla-firefox Makefile distinfo

   www/mozilla-firefox: update to 154.0.1.

   see https://www.firefox.com/en-US/firefox/154.0.1/releasenotes/
VersionDeltaFile
1.397.2.17+2-2www/mozilla-firefox/distinfo
1.680.2.19+1-1www/mozilla-firefox/Makefile
+3-32 files

OpenBSD/ports bDyaIfAwww/firefox-i18n Makefile.inc distinfo, www/mozilla-firefox Makefile distinfo

   www/mozilla-firefox: update to 154.0.1.

   see https://www.firefox.com/en-US/firefox/154.0.1/releasenotes/
VersionDeltaFile
1.404+164-164www/firefox-i18n/distinfo
1.418+4-4www/mozilla-firefox/distinfo
1.705+2-4www/mozilla-firefox/Makefile
1.359+1-1www/firefox-i18n/Makefile.inc
+171-1734 files

OpenBSD/src Es8PlLVshare/man/man5 port-modules.5

   fix alphabetical order of module names, no text change:
   cabal and cargo before cmake and wayland before www
VersionDeltaFile
1.288+24-24share/man/man5/port-modules.5
+24-241 files

OpenBSD/src BFZE8Lushare/man/man8 release.8

   Most dictionaries list the noun "firmware" as uncountable,
   so avoid the plural form.
   OK jsg@ ian@  and also agrees with jmc@'s past practice.
   Minor issue found by jsg@.
VersionDeltaFile
1.102+3-3share/man/man8/release.8
+3-31 files

OpenBSD/ports ODOQnOumail/postfix/stable Makefile, security/sslscan Makefile

   stable: bump openssl consumers with static link
VersionDeltaFile
1.56.2.2+1-1sysutils/borgbackup/2.0/Makefile
1.86.2.2+1-1security/sslscan/Makefile
1.281.2.6+1-0mail/postfix/stable/Makefile
+3-23 files

OpenBSD/ports lqmNWo8security/openssl/3.5 Makefile distinfo, security/openssl/3.5/pkg PLIST

   Update to OpenSSL 3.5.8

   https://github.com/openssl/openssl/releases/tag/openssl-3.5.8
VersionDeltaFile
1.7.2.2+2-2security/openssl/3.5/distinfo
1.7.2.2+4-0security/openssl/3.5/pkg/PLIST
1.16.2.2+1-1security/openssl/3.5/Makefile
+7-33 files

OpenBSD/ports CeTry7csecurity/openssl/4.0 Makefile distinfo, security/openssl/4.0/pkg PLIST

   MFC: Update to OpenSSL 4.0.2

   https://github.com/openssl/openssl/releases/tag/openssl-4.0.2
VersionDeltaFile
1.2.2.2+2-2security/openssl/4.0/distinfo
1.2.2.2+4-0security/openssl/4.0/pkg/PLIST
1.4.2.2+1-1security/openssl/4.0/Makefile
+7-33 files

OpenBSD/src mP2Jd1Olib/libc/arch/aarch64/hash sha512_aarch64.c sha256_aarch64.c

   Consistently test against zero.
VersionDeltaFile
1.2+2-2lib/libc/arch/aarch64/hash/sha512_aarch64.c
1.2+2-2lib/libc/arch/aarch64/hash/sha256_aarch64.c
+4-42 files

OpenBSD/ports TlwBLynmail/postfix/stable Makefile, security/sslscan Makefile

   bump openssl consumers with static link
VersionDeltaFile
1.88+1-1security/sslscan/Makefile
1.62+2-0sysutils/borgbackup/2.0/Makefile
1.287+1-0mail/postfix/stable/Makefile
+4-13 files

OpenBSD/src z7aAOYVlib/libc/arch/aarch64/hash Makefile.inc sha1_aarch64.c, lib/libc/hash sha1.c

   Provide assembly implementation of SHA-1 for aarch64 in libc

   Provide a CE assembly implementation that can be used on hardware that
   has the CE SHA-1 instructions. This is considerably faster than the
   generic C implementation.

   Largely borrowed from libcrypto.

   With input from naddy@

   ok naddy@ tb@
VersionDeltaFile
1.1+219-0lib/libc/arch/aarch64/hash/sha1_aarch64_ce.S
1.1+34-0lib/libc/arch/aarch64/hash/sha1_aarch64.c
1.32+4-2lib/libc/hash/sha1.c
1.5+5-1lib/libc/hidden/sha1.h
1.3+3-1lib/libc/arch/aarch64/hash/Makefile.inc
+265-45 files

OpenBSD/ports S2pPny5security/openssl/3.5 Makefile distinfo, security/openssl/3.5/pkg PLIST

   Update to OpenSSL 3.5.8

   https://github.com/openssl/openssl/releases/tag/openssl-3.5.8
VersionDeltaFile
1.9+2-2security/openssl/3.5/distinfo
1.9+4-0security/openssl/3.5/pkg/PLIST
1.18+1-1security/openssl/3.5/Makefile
+7-33 files

OpenBSD/ports 1OavAERsecurity/openssl/4.0 Makefile distinfo, security/openssl/4.0/patches patch-crypto_x509_x509_vfy_c

   Update to OpenSSL 4.0.2

   https://github.com/openssl/openssl/releases/tag/openssl-4.0.2
VersionDeltaFile
1.7+1-3security/openssl/4.0/Makefile
1.4+2-2security/openssl/4.0/distinfo
1.4+4-0security/openssl/4.0/pkg/PLIST
1.2+0-0security/openssl/4.0/patches/patch-crypto_x509_x509_vfy_c
+7-54 files

OpenBSD/src UHV71jjsbin/dhcpleased engine.c

   Validate the IP address the dhcp server acks.

   acts1631 at proton.me points out that a rogue dhcp server can trick
   dhcpleased into holding on to a lease indefinitely since it looses
   track which IP is actually configured.

   Diff provided by acts1631 as well, thanks!

   While here, remove checking for yiaddr being absent (i.e. INADDR_ANY)
   because that check is now redundant.
VersionDeltaFile
1.69+9-5sbin/dhcpleased/engine.c
+9-51 files

OpenBSD/ports 0TUhXdzmeta/gnome Makefile, meta/gnome/pkg README-main

   Add a Audio/Video capture section.
VersionDeltaFile
1.55+16-0meta/gnome/pkg/README-main
1.306+1-1meta/gnome/Makefile
+17-12 files

OpenBSD/ports ntnESSKtextproc/p5-Text-CSV-Hashify distinfo Makefile

   update p5-Text-CSV-Hashify to 0.11
VersionDeltaFile
1.6+7-5textproc/p5-Text-CSV-Hashify/Makefile
1.3+2-2textproc/p5-Text-CSV-Hashify/distinfo
+9-72 files

OpenBSD/ports BJNsmWomultimedia/pipewire/pipewire Makefile

   Bump after libcamera subpackage.
VersionDeltaFile
1.60+1-1multimedia/pipewire/pipewire/Makefile
+1-11 files

OpenBSD/ports SoN5Sgemultimedia/libcamera Makefile, multimedia/libcamera/patches patch-src_apps_cam_meson_build patch-src_libcamera_mapped_framebuffer_cpp

   Enable the cam helper and move tools into their own subpackage.
VersionDeltaFile
1.1+44-0multimedia/libcamera/pkg/PLIST-main
1.2+26-11multimedia/libcamera/Makefile
1.1+28-0multimedia/libcamera/patches/patch-src_libcamera_mapped_framebuffer_cpp
1.1+28-0multimedia/libcamera/patches/patch-src_apps_common_image_cpp
1.1+17-0multimedia/libcamera/patches/patch-src_apps_cam_meson_build
1.1+13-0multimedia/libcamera/pkg/DESCR-main
+156-115 files not shown
+171-1111 files

OpenBSD/ports 5d7Dnwgnet/p5-Net-OAuth Makefile distinfo, net/p5-Net-OAuth/pkg PLIST

   update p5-Net-OAuth to 0.33
   CVE-2026-72889 CVE-2026-75589
VersionDeltaFile
1.8+2-2net/p5-Net-OAuth/distinfo
1.17+1-1net/p5-Net-OAuth/Makefile
1.6+2-0net/p5-Net-OAuth/pkg/PLIST
+5-33 files

OpenBSD/ports NEoU1E1audio/rhythmbox Makefile distinfo

   Update to rhythmbox-3.5.1.
VersionDeltaFile
1.49+2-2audio/rhythmbox/distinfo
1.203+1-1audio/rhythmbox/Makefile
+3-32 files

OpenBSD/ports GN76Gdynet/neighbot Makefile distinfo

   Update to 0.5.16

   OK tb@
VersionDeltaFile
1.2+2-2net/neighbot/distinfo
1.3+1-1net/neighbot/Makefile
+3-32 files

OpenBSD/src 6VF3vM3usr.sbin/rpki-client ccr.c extern.h

   Make ASN.1 helper function to copy strings available to other compilation units

   OK tb@
VersionDeltaFile
1.291+4-1usr.sbin/rpki-client/extern.h
1.44+2-2usr.sbin/rpki-client/ccr.c
+6-32 files

OpenBSD/ports l2yRN3Inet/sniproxy Makefile distinfo

   Update to 0.14.0

   OK tb@
VersionDeltaFile
1.15+2-2net/sniproxy/distinfo
1.20+1-1net/sniproxy/Makefile
+3-32 files

OpenBSD/src afMXv9musr.bin/tmux tty-term.c tmux.h

   Add a clear-on-attach option which when turned off scrolls away the
   existing terminal state instead of entering the alternate screen. This
   is useful in environments where tmux is started as a login shell but it
   is important that any pre-tmux messages are still visible. GitHub issue
   5508 from Josef Řídký.
VersionDeltaFile
1.480+22-6usr.bin/tmux/tty.c
1.1159+11-2usr.bin/tmux/tmux.1
1.243+11-1usr.bin/tmux/options-table.c
1.109+2-1usr.bin/tmux/tty-term.c
1.1431+2-1usr.bin/tmux/tmux.h
+48-115 files

OpenBSD/ports BKK9Dhanet/synapse Makefile modules.inc, net/synapse/pkg PLIST

   Update to 1.159.0

   OK tb@
VersionDeltaFile
1.93+66-48net/synapse/distinfo
1.56+32-23net/synapse/modules.inc
1.79+22-9net/synapse/pkg/PLIST
1.122+1-1net/synapse/Makefile
+121-814 files

OpenBSD/ports QiVINafgraphics/ffmpeg Makefile, graphics/ffmpeg/patches patch-libavcodec_aarch64_h26x_sao_neon_S patch-libavcodec_aarch64_vc1dsp_neon_S

   graphics/ffmpeg: add missed patches

   noticed by tb@
VersionDeltaFile
1.1+121-0graphics/ffmpeg/patches/patch-libavcodec_aarch64_vc1dsp_neon_S
1.1+55-0graphics/ffmpeg/patches/patch-libavcodec_aarch64_h26x_sao_neon_S
1.262+1-0graphics/ffmpeg/Makefile
+177-03 files

OpenBSD/src uOEESSSusr.bin/tmux sort.c window-switch.c

   Do not pass NULL to qsort, and add checks for invalid session or window
   after swap.
VersionDeltaFile
1.96+5-1usr.bin/tmux/window-tree.c
1.3+3-2usr.bin/tmux/window-switch.c
1.10+2-2usr.bin/tmux/sort.c
+10-53 files

OpenBSD/ports Lbq2M7qgraphics/ffmpeg Makefile, graphics/ffmpeg/patches patch-libavutil_aarch64_tx_float_neon_S patch-configure

   graphics/ffmpeg: update to 9.0.1

   mips64 patch from Brad Smith, arm64 patch from tb@

   OK: tb@
VersionDeltaFile
1.1+89-0graphics/ffmpeg/patches/patch-libavcodec_mips_cabac_h
1.5+17-18graphics/ffmpeg/patches/patch-libavformat_tls_openssl_c
1.1+35-0graphics/ffmpeg/patches/patch-libswscale_x86_hscale_fast_bilinear_simd_c
1.81+9-19graphics/ffmpeg/patches/patch-configure
1.1+24-0graphics/ffmpeg/patches/patch-libavutil_aarch64_tx_float_neon_S
1.261+8-8graphics/ffmpeg/Makefile
+182-457 files not shown
+189-5113 files

OpenBSD/src gsM99Zjusr.bin/tmux server-client.c

   Do not leak exit message on client free, from Jeong, Heon.
VersionDeltaFile
1.508+3-3usr.bin/tmux/server-client.c
+3-31 files

OpenBSD/src knzAexCusr.bin/tmux window-panes.c cmd-run-shell.c

   Tidy up args_make_commands reference counting to fix a memory leak, from
   Jeong, Heon.
VersionDeltaFile
1.67+4-4usr.bin/tmux/arguments.c
1.87+4-1usr.bin/tmux/cmd-if-shell.c
1.94+3-1usr.bin/tmux/cmd-run-shell.c
1.76+3-1usr.bin/tmux/cmd-command-prompt.c
1.5+2-1usr.bin/tmux/window-panes.c
+16-85 files

OpenBSD/src EeBwOyzlib/libc/stdlib icdb_new.3

   ICBB -> ICDB
VersionDeltaFile
1.3+2-2lib/libc/stdlib/icdb_new.3
+2-21 files