OpenBSD/ports cowOuMgarchivers/xz distinfo Makefile

   archivers/xz: update to 5.8.3

   Includes a fix for
   CVE-2026-34743: Buffer overflow in lzma_index_append()
VersionDeltaFile
1.29+2-2archivers/xz/distinfo
1.57+2-2archivers/xz/Makefile
+4-42 files

OpenBSD/ports E5LKwPddevel/py-python-discovery distinfo Makefile

   Update py-python-discovery 1.1.2 -> 1.2.1
   Changelogs: https://github.com/tox-dev/python-discovery/releases
VersionDeltaFile
1.2+2-2devel/py-python-discovery/distinfo
1.2+2-1devel/py-python-discovery/Makefile
+4-32 files

OpenBSD/ports nGW20VTsysutils/ansible distinfo Makefile, sysutils/ansible/pkg PLIST

   Update ansible 13.4.0 -> 13.5.0
   Changelog: https://github.com/ansible-community/ansible-build-data/blob/13.5.0/13/CHANGELOG-v13.md#v13-5-0
VersionDeltaFile
1.104+596-3sysutils/ansible/pkg/PLIST
1.162+2-2sysutils/ansible/distinfo
1.219+1-1sysutils/ansible/Makefile
+599-63 files

OpenBSD/ports C6pEzQ2sysutils/ansible-core distinfo Makefile, sysutils/ansible-core/patches patch-pyproject_toml

   Update ansible-core -> 2.20.3 -> 2.20.4
   Changelog: https://github.com/ansible/ansible/blob/stable-2.20/changelogs/CHANGELOG-v2.20.rst#v2-20-4
VersionDeltaFile
1.23+6-0sysutils/ansible-core/pkg/PLIST
1.57+2-2sysutils/ansible-core/distinfo
1.7+2-2sysutils/ansible-core/patches/patch-pyproject_toml
1.64+1-1sysutils/ansible-core/Makefile
+11-54 files

OpenBSD/ports llBX5Codevel/py-identify distinfo Makefile

   Update py-identify 2.6.17 -> 2.6.18
VersionDeltaFile
1.27+2-2devel/py-identify/distinfo
1.30+1-1devel/py-identify/Makefile
+3-32 files

OpenBSD/ports lj7qnaHsecurity/p5-Crypt-LE Makefile, security/p5-Crypt-LE/patches patch-lib_Crypt_LE_pm

   p5-Crypt-OpenSSL-RSA no longer supports PKCS #1 v1.5 padding.
   p5-Crypt-LE has to replace it with PSS padding.
VersionDeltaFile
1.1+15-0security/p5-Crypt-LE/patches/patch-lib_Crypt_LE_pm
1.8+1-0security/p5-Crypt-LE/Makefile
+16-02 files

OpenBSD/src 7bqriJKusr.bin/newsyslog newsyslog.c

   Fix leap year detection.

   Found and initial diff from Alvar Penning, shorter diff from me (I
   guess it's a matter of taste).

   ok jca@, who would do it the same way.
VersionDeltaFile
1.120+3-3usr.bin/newsyslog/newsyslog.c
+3-31 files

OpenBSD/ports H37Yw7mdevel/p5-IO-Tty Makefile distinfo, devel/p5-IO-Tty/patches patch-Makefile_PL patch-Tty_xs

   update p5-IO-Tty to 1.25
   fixes tests of devel/p5-IPC-Run
   improve detection of openpty and strlcpy with gcc
   take maintainer
VersionDeltaFile
1.6+33-8devel/p5-IO-Tty/patches/patch-Makefile_PL
1.35+4-4devel/p5-IO-Tty/Makefile
1.15+2-2devel/p5-IO-Tty/distinfo
1.8+0-0devel/p5-IO-Tty/patches/patch-Tty_xs
+39-144 files

OpenBSD/src G568vBQlibexec/spamd spamd.c

   If a fd satisfies both POLLIN and POLLOUT in the same cycle, but the
   POLLIN resulted in a file close, the POLLOUT runs incorrectly which
   matters in the TLS context which attempts to read after free.
   from James J. Lippard
   ok millert
VersionDeltaFile
1.164+4-2libexec/spamd/spamd.c
+4-21 files

OpenBSD/ports LSuYmFsmail/rspamd Makefile distinfo, mail/rspamd/patches patch-CMakeLists_txt

   backout to rspamd 3.14.3 for now, I'm hitting some fairly heavy FD leak
   on the milter socket on my postfix+rspamd setup (noticed when it hit 4k
   FDs and bumped into limits) and not in a good position to attempt debug
   atm.
VersionDeltaFile
1.68+0-17mail/rspamd/pkg/PLIST
1.158+3-1mail/rspamd/Makefile
1.87+2-2mail/rspamd/distinfo
1.42+2-2mail/rspamd/patches/patch-CMakeLists_txt
+7-224 files

OpenBSD/src Kbl4sKGusr.bin/awk b.c

   Prevent integer overflow in regex repetition count

   Limit the repetition count to 255 like POSIX does.  Also avoid a
   crash when the repetition is the first atom parsed.

   From Renaud Allard.
VersionDeltaFile
1.56+7-1usr.bin/awk/b.c
+7-11 files

OpenBSD/ports fY1p8uysysutils/moor distinfo modules.inc

   sysutils/moor: Update to 2.12.0

   From Maintainer Lydia Sobot, thanks
VersionDeltaFile
1.4+6-4sysutils/moor/distinfo
1.3+2-1sysutils/moor/modules.inc
1.4+1-1sysutils/moor/Makefile
+9-63 files

OpenBSD/src VG7zBlxusr.sbin/relayd relay.c

   relay_tls_ctx_create: plug tls_cfg leak

   If the second tls_cfg_new() call fails, the tls_cfg is leaked.

   From Jan Schreiber
VersionDeltaFile
1.263+2-2usr.sbin/relayd/relay.c
+2-21 files

OpenBSD/ports ksKaBpPmail/roundcubemail distinfo

   sync distinfo
VersionDeltaFile
1.95.2.5+2-0mail/roundcubemail/distinfo
+2-01 files

OpenBSD/src OI12oM5usr.sbin/relayd relay_http.c

   relayd: error check bsearch in relay_httperror_byid()

   If relay_httperror_byid() is passed a HTTP error code not in the table
   this would result in a NULL deref. The intent is that the code fall back
   to "Unknown error" on NULL return.

   From Jan Schreiber
VersionDeltaFile
1.96+5-4usr.sbin/relayd/relay_http.c
+5-41 files

OpenBSD/src YsYulcsusr.sbin/relayd relay_http.c

   relayd: fix NULL check for strdup()

   Due to a copy-paste error, relay_lookup_query() would check the wrong kv
   member for NULL.

   From Jan Schreiber
VersionDeltaFile
1.95+2-2usr.sbin/relayd/relay_http.c
+2-21 files

OpenBSD/src VLtXNF5regress/sys/netinet/tcpstate tcp_sack.py Makefile

   Add regress test for TCP Selective ACK packets.
VersionDeltaFile
1.1+125-0regress/sys/netinet/tcpstate/tcp_sack.py
1.7+2-2regress/sys/netinet/tcpstate/Makefile
1.2+3-1regress/sys/netinet/tcpstate/pf.conf
1.7+1-1regress/sys/netinet/tcpstate/tcp_established.py
+131-44 files

OpenBSD/src NUWbVRPsys/dev/pci if_iwx.c

   sys/iwx: align antenna patterns and STBC with iwlwifi

   Follow iwlwifi for antenna pattern and STBC advertisement. Advertise RX
   antenna pattern only when RX is effectively 1x1; advertise HT and VHT
   STBC unconditionally, and VHT TX antenna pattern only when TX is
   effectively 1x1, and program the firmware TLC STBC flag when the peer
   advertises RX STBC and the device has more than one valid TX antenna.

   OK: stsp@
VersionDeltaFile
1.228+53-3sys/dev/pci/if_iwx.c
+53-31 files

OpenBSD/ports gRCYK26textproc/p5-XML-Parser distinfo Makefile

   update p5-XML-Parser to 2.55
VersionDeltaFile
1.16+2-2textproc/p5-XML-Parser/distinfo
1.41+1-1textproc/p5-XML-Parser/Makefile
+3-32 files

OpenBSD/ports DnGYeAxnet/tdesktop distinfo Makefile

   update to tdesktop 6.7.1
VersionDeltaFile
1.159+2-2net/tdesktop/distinfo
1.214+1-2net/tdesktop/Makefile
+3-42 files

OpenBSD/src cD2xxpausr.bin/tmux cmd-list-keys.c

   Do not leak command in list-keys, reported by tb@. Also tidy up some
   function names while here.
VersionDeltaFile
1.74+15-13usr.bin/tmux/cmd-list-keys.c
+15-131 files

OpenBSD/ports aXHRrBmsysutils/just distinfo crates.inc

   sysutils/just: upgrade to v1.48.1.
VersionDeltaFile
1.5+194-144sysutils/just/distinfo
1.5+96-71sysutils/just/crates.inc
1.6+1-1sysutils/just/Makefile
+291-2163 files

OpenBSD/src ZCRa9RAusr.bin/tmux format-draw.c format.c

   Do not leak trimmed string when expanding, found by ossfuzz.
VersionDeltaFile
1.31+2-2usr.bin/tmux/format-draw.c
1.352+3-1usr.bin/tmux/format.c
+5-32 files

OpenBSD/src IgMOGzcusr.bin/tmux format.c

   Use INT_MIN + 1 as strtonum lower limits in formats so -ve works, found
   by ossfuzz.
VersionDeltaFile
1.351+8-6usr.bin/tmux/format.c
+8-61 files

OpenBSD/ports AbYb6YInet/isc-bind distinfo Makefile

   update to isc-bind-9.20.22
VersionDeltaFile
1.138.2.8+2-2net/isc-bind/distinfo
1.207.2.8+1-1net/isc-bind/Makefile
+3-32 files

OpenBSD/ports iKJZeV4net/isc-bind distinfo Makefile

   update to isc-bind-9.20.22
VersionDeltaFile
1.146+2-2net/isc-bind/distinfo
1.217+1-1net/isc-bind/Makefile
+3-32 files

OpenBSD/ports jrqmgpJdevel/llvm/22 distinfo Makefile, devel/llvm/22/patches patch-llvm_lib_Target_AArch64_AArch64FrameLowering_cpp patch-lld_ELF_Driver_cpp

   update to 22.1.2
VersionDeltaFile
1.2+2-2devel/llvm/22/patches/patch-llvm_lib_Target_AArch64_AArch64FrameLowering_cpp
1.3+2-2devel/llvm/22/distinfo
1.4+1-1devel/llvm/22/Makefile
1.2+1-1devel/llvm/22/patches/patch-lld_ELF_Driver_cpp
+6-64 files

OpenBSD/src 5ZOKRPKusr.bin/tmux cmd.c

   Limit argc to between 0 and 1000 to prevent fatal from MSG_COMMAND, from
   Michal Majchrowicz.
VersionDeltaFile
1.182+3-1usr.bin/tmux/cmd.c
+3-11 files

OpenBSD/src 5YTIMBpusr.bin/tmux regsub.c

   Handle empty regular expression in substitution, found by ossfuzz.
VersionDeltaFile
1.7+3-1usr.bin/tmux/regsub.c
+3-11 files

OpenBSD/src t9nStaHusr.bin/tmux window-copy.c format.c

   Check for \0 after skipping # not before in format_expand1, from ossfuzz.
VersionDeltaFile
1.393+6-5usr.bin/tmux/window-copy.c
1.350+2-2usr.bin/tmux/format.c
+8-72 files