BSD Commit Log Search

   update xmlwf to expat 2.7.5

   the "@pkgpath textproc/libxml,-python" marker by itself isn't enough to merge
   any (now removed) py3-libxml-* packages into libxml, so python 3.12 -> 3.13
   updates (i.e. openbsd 7.8 -> -current) were still failing. Add an @conflict
   as well to force the old package to be removed.

   print/ghostscript/gnu: Update to 10.07.0

   ok (with tweaks) sthen@

   cc1: error: unrecognized command line option "-Wvla"

   base-gcc doesn't have -Wvla. Move to ports-gcc to fix build on sparc64

   missed to include vulkan-tools in the vulkan update, spotted by volker@

   devel/intellij: update to 2025.3.4

   remove extra spaces in logs, ok claudio

   update to roundcubemail-1.6.14
   various security fixes, https://github.com/roundcube/roundcubemail/releases/tag/1.6.14

   update to roundcubemail-1.6.14
   various security fixes, https://github.com/roundcube/roundcubemail/releases/tag/1.6.14

   py-omemo-dr was not linked to the build properly

   py-omemo-dr: bump after HOMEPAGE change for pypi

   typo: Extended Nexhop Encoding (Nexthop)

   /dev/null is no longer implicitly permitted by some pledges, so explicitly
   unveil it. fixes calendar -a. ok deraadt
   calendar also needs to unveil cpp / sendmail, I forgot to make install
   when I was testing :(  from James J. Lippard
   sendmail/cpp only need "x" no "rx" unveil; ok deraadt
   from sthen@

   this is errata/7.7/029_calendar.patch.sig

   /dev/null is no longer implicitly permitted by some pledges, so explicitly
   unveil it. fixes calendar -a. ok deraadt
   calendar also needs to unveil cpp / sendmail, I forgot to make install
   when I was testing :(  from James J. Lippard
   sendmail/cpp only need "x" no "rx" unveil; ok deraadt
   from sthen@

   this is errata/7.8/023_calendar.patch.sig

   update to nghttp2-1.68.1
   https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6

   update to nghttp2-1.68.1
   https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6

   update to stayrtr-0.6.4

   Oof, JLS 25 is latest.

   Update JLS to JDK24.

   Minor bump asciidoctor 2.0.23 -> 2.0.26

   Update libexpat to version 2.7.5.

   Relevant for OpenBSD are security fixes #1158 #1161 #1162 #1163,
   other changes #1156 #1153.  Library bump is not necessary.
   CVE-2026-32776 CVE-2026-32777 CVE-2026-32778

   tested and OK tb@

   update to python-3.12.13 and patch for recent security fixes.
   backports from tb, .ok tb@ kmos@

   https://mail.python.org/archives/list/security-announce@python.org/thread/H6CADMBCDRFGWCMOXWUIHFJNV43GABJ7/
   Reject control characters in 'http.cookies.Morsel.update' (CVE-2026-3644)

   https://mail.python.org/archives/list/security-announce@python.org/thread/5M7CGUW3XBRY7II4DK43KF7NQQ3TPZ6R/
   Fix C stack overflow (CVE-2026-4224) when an Expat parser with a registered
   'ElementDeclHandler' parses inline DTD containing deeply nested content model.

   update to python-3.13.12 and patch for recent security fixes. ok tb@ kmos@

   https://mail.python.org/archives/list/security-announce@python.org/thread/H6CADMBCDRFGWCMOXWUIHFJNV43GABJ7/
   Reject control characters in 'http.cookies.Morsel.update' (CVE-2026-3644)

   https://mail.python.org/archives/list/security-announce@python.org/thread/5M7CGUW3XBRY7II4DK43KF7NQQ3TPZ6R/
   Fix C stack overflow (CVE-2026-4224) when an Expat parser with a registered
   'ElementDeclHandler' parses inline DTD containing deeply nested content model.

   Copy hyperlinks when redrawing popup so they do not vanish, from Antoine
   Gaudreau Simard in GitHub issue 4925.

   Fix buffer to both for get-clipboard, from Seth Girvan.

   Allow codepoint-widths to accept ranges, from san65384 at gmail dot com
   in GitHub issue 4930.

   Update to google-cloud-sdk-561.0.0.

   Update to icu4c-78.3.

   Update to zenity-4.2.2.

   libcrypto: prefix EC_KEY methods with ec_key_

   We received reports that the too generic internal ecdsa_{sign,verify}()
   symbol names clash in some static links. The naming here is annoying
   because the EC_KEY_METHOD amalgamated the no longer existing ECDH and
   ECDSA methods which themselves had poorly chosen method names, still
   reflected in public API.

   There are various messes here. The ECDSA verify methods are declared
   in ec_local.h, whereas the ECDSA sign methods are in ecdsa_local.h
   (which is itself pretty useless and really only about EC_KEY_METHOD).
   I therefore merged the ECDSA method declarations into ec_local.h and
   deleted ecdsa_local.h since I see no real benefit to the latter.
   ecdsa.c needs ec_local.h anyway. Having the method declarations next
   to EC_KEY_METHOD seems sensible. I left the order as it was, matching
   ecdsa.c. The eckey_compute_pubkey() prototype should probably be moved
   down.

   With one exception I just added an ec_key_ prefix. This leads to a

    [10 lines not shown]