OpenBSD/src Dn4sRXkusr.sbin/rpki-client rfc3779.c extern.h

   rpki-client: do not provide IPAddrBlocks_{new,free}() unconditionally

   After sitting on the issue for over four years, a last-minute addition to
   OpenSSL 4.1 provided a somewhat incorrect version of IPAddrBlocks_new(),
   and versions of IPAddrBlocks_free() ith i2d and d2i and the ASN.1 item.
   Until LibreSSL provides the corresponding functions, we need this compat
   code in base. After that the rfc3779.c file can move to portable where it
   really belongs.

   With this the rpki-client code is ready for OpenSSL 4.1, provided it uses
   a fixed version of lib(re)tls.

   ok claudio
VersionDeltaFile
1.295+5-5usr.sbin/rpki-client/extern.h
1.3+5-1usr.sbin/rpki-client/rfc3779.c
+10-62 files

OpenBSD/src NmIEjfmusr.sbin/rpki-client validate.c

   rpki-client: fix valid_uri() to work with non-strings

   valid_uri() takes a length parameter and should honor that. Most uris
   passed are NUL terminated, but the ones coming from an ASN1_STRING are
   not guaranteed to be. Calling strstr() on a non-terminated string with
   no match is a buffer overread. So use memmem() instead.

   This is needed for rpki-client to work with OpenSSL 4.1, who, in their
   infinite disregard for downstreams chose to stop NUL-terminating ASN.1
   strings. A massive breaking change in a minor release that will surely
   cause lots of buffer overreads. It's also not mentioned in CHANGES.md,
   only in their terrible migration guide. Of course it's been documented
   since forever, but who reads OpenSSL's crappy documentation anyway?

   ok claudio
VersionDeltaFile
1.86+2-2usr.sbin/rpki-client/validate.c
+2-21 files

OpenBSD/ports NC6I3nmdevel/arm-compute-library distinfo Makefile, devel/arm-compute-library/patches patch-SConstruct

   Update arm-compute-library to 53.3.0
VersionDeltaFile
1.21+2-2devel/arm-compute-library/distinfo
1.27+2-2devel/arm-compute-library/Makefile
1.18+1-1devel/arm-compute-library/patches/patch-SConstruct
+5-53 files

OpenBSD/ports kkVQIWLcad/prusaslicer/patches patch-src_slic3r_GUI_UserAccountCommunication_cpp patch-src_slic3r_GUI_GUI_Factories_cpp

   Fix cad/prusaslicer segfault on startup

   while here update-patches churn

   reported and tested by "louigi 600"
   reviewed by Renato Aguiar (maintainer)
VersionDeltaFile
1.3+14-8cad/prusaslicer/patches/patch-src_slic3r_GUI_GUI_App_cpp
1.10+4-4cad/prusaslicer/patches/patch-src_slic3r_CMakeLists_txt
1.5+1-1cad/prusaslicer/patches/patch-src_slic3r_GUI_UserAccountCommunication_cpp
1.6+1-1cad/prusaslicer/patches/patch-src_slic3r_GUI_GUI_Factories_cpp
1.9+1-1cad/prusaslicer/patches/patch-src_libslic3r_CMakeLists_txt
1.8+1-1cad/prusaslicer/patches/patch-src_CMakeLists_txt
+22-162 files not shown
+24-178 files

OpenBSD/src oey29I7distrib/sets/lists/comp mi

   sync
VersionDeltaFile
1.1769+1-0distrib/sets/lists/comp/mi
+1-01 files

OpenBSD/src haH4S9Jregress/libexec/ld.so/subst/prog1 Makefile

   Add a test, disabled for now, that tests $ORIGIN works when a program
   is executed by a search of the PATH. Additional tests are needed for
   other cases. okay deraadt@
VersionDeltaFile
1.4+20-6regress/libexec/ld.so/subst/prog1/Makefile
+20-61 files

OpenBSD/ports DBLj3dSarchivers/xz distinfo Makefile

   archivers/xz: update to 5.8.4

   Includes a fix for
   GHSA-5qpq-xqfv-j9pg: Invalid write after reinitialization
VersionDeltaFile
1.30+2-2archivers/xz/distinfo
1.58+2-2archivers/xz/Makefile
+4-42 files

OpenBSD/ports q7fiolYwww/p5-HTML-FormFu Makefile, www/p5-HTML-FormFu/patches patch-lib_HTML_FormFu_Element_Repeatable_pm

   apply security patch for p5-HTML-FormFu 2.07
   CVE-2026-19873
VersionDeltaFile
1.1+75-0www/p5-HTML-FormFu/patches/patch-lib_HTML_FormFu_Element_Repeatable_pm
1.14+9-7www/p5-HTML-FormFu/Makefile
+84-72 files

OpenBSD/ports YqiK7I1www/p5-HTML-FormHandler Makefile distinfo

   update p5-HTML-FormHandler to 0.410002
   CVE-2026-85484 CVE-2026-85485 CVE-2026-85630
VersionDeltaFile
1.4+2-2www/p5-HTML-FormHandler/distinfo
1.5+1-1www/p5-HTML-FormHandler/Makefile
+3-32 files

OpenBSD/ports 4jSIBdVsecurity/p5-Authen-SASL Makefile distinfo

   update p5-Authen-SASL to 2.2100
   CVE-2026-86219
VersionDeltaFile
1.10+2-2security/p5-Authen-SASL/distinfo
1.21+1-1security/p5-Authen-SASL/Makefile
+3-32 files

OpenBSD/ports NbeSjRTdevel/p5-Module-Install distinfo Makefile, devel/p5-Module-Install/patches patch-lib_Module_Install_Admin_Include_pm

   update p5-Module-Install to 1.21
VersionDeltaFile
1.33+25-25devel/p5-Module-Install/Makefile
1.8+0-4devel/p5-Module-Install/pkg/PLIST
1.10+2-2devel/p5-Module-Install/distinfo
1.6+1-0devel/p5-Module-Install/patches/patch-lib_Module_Install_Admin_Include_pm
+28-314 files

OpenBSD/ports T0PSVqhnet/syncthing Makefile distinfo

   update to syncthing 2.1.5
VersionDeltaFile
1.56+2-2net/syncthing/distinfo
1.81+1-1net/syncthing/Makefile
+3-32 files

OpenBSD/ports FYo5Gm7textproc/goldendict-ng distinfo Makefile, textproc/goldendict-ng/pkg PLIST

   update to goldendict-ng 26.8.0
VersionDeltaFile
1.4+37-36textproc/goldendict-ng/pkg/PLIST
1.9+7-13textproc/goldendict-ng/Makefile
1.6+2-2textproc/goldendict-ng/distinfo
+46-513 files

OpenBSD/ports ssjJC5dnet/libktorrent/pkg PLIST, x11/kde-applications/kalzium/pkg PLIST

   Update KDE Gear to 26.08.1

   https://kde.org/announcements/gear/26.08.0/
VersionDeltaFile
1.20+606-606x11/kde-applications/ktuberling/pkg/PLIST
1.12+198-198net/libktorrent/pkg/PLIST
1.18+71-39x11/kde-applications/kalzium/pkg/PLIST
1.48+50-4x11/kde-applications/kate/pkg/PLIST
1.39+49-3x11/kde-applications/kdenlive/pkg/PLIST
1.27+46-1x11/kde-applications/step/pkg/PLIST
+1,020-851367 files not shown
+2,161-1,700373 files

OpenBSD/ports HSx9WzZdevel/kf6 Makefile

   Enable KDE KF6 kmime
VersionDeltaFile
1.3+1-0devel/kf6/Makefile
+1-01 files

OpenBSD/ports nmrtMYcx11/kde-applications Makefile

   Disable KDE Gear kmime
VersionDeltaFile
1.110+1-1x11/kde-applications/Makefile
+1-11 files

OpenBSD/ports E0iBixMdevel/qt-creator Makefile

   Cleanup extra LIB_DEPENDS entries
VersionDeltaFile
1.124+2-2devel/qt-creator/Makefile
+2-21 files

OpenBSD/ports o2MhUvJx11/copyq Makefile

   Cleanup LIB_DEPENDS
VersionDeltaFile
1.8+1-1x11/copyq/Makefile
+1-11 files

OpenBSD/ports ipeIlTjx11/qt6/qtmultimedia Makefile, x11/qt6/qtspeech Makefile

   Cleanup LIB_DEPENDS
VersionDeltaFile
1.29+2-1x11/qt6/qtmultimedia/Makefile
1.6+1-1x11/qt6/qtspeech/Makefile
+3-22 files

OpenBSD/ports sgtD5z7x11/qt6/qtbase Makefile, x11/qt6/qtbase/patches patch-src_corelib_io_qfilesystemengine_unix_cpp

   x11/qt6/qtbase: Treat realpath(3) handling like macos/android

   All components of pathname must exist when realpath() is called,
   so make sure "entry" (*pathname) exists before we call realpath.
VersionDeltaFile
1.1+13-0x11/qt6/qtbase/patches/patch-src_corelib_io_qfilesystemengine_unix_cpp
1.57+1-1x11/qt6/qtbase/Makefile
+14-12 files

OpenBSD/src PEry8mXregress/sys/kern/signal/siginfo-fault siginfo-fault.c

   Fix test expectations on luna88k.
VersionDeltaFile
1.3+5-2regress/sys/kern/signal/siginfo-fault/siginfo-fault.c
+5-21 files

OpenBSD/ports NY4618rdevel/quirks Makefile, devel/quirks/files Quirks.pm

   oops, missed half of ntopng removal quirk
VersionDeltaFile
1.1827+2-1devel/quirks/files/Quirks.pm
1.1813+1-1devel/quirks/Makefile
+3-22 files

OpenBSD/src DGkB9Sclibexec/ld.so/sparc64 ldasm.S

   fix comment.  the minimum for dl_data[] is 10*wordsize, the 10 being
   1+AUX_entry
VersionDeltaFile
1.48+2-2libexec/ld.so/sparc64/ldasm.S
+2-21 files

OpenBSD/ports f1pdXt7multimedia/mpv Makefile, multimedia/mpv/patches patch-player_lua_ytdl_hook_lua

   mpv: don't force a dep on yt-dlp, it is perfectly usable as a player
   for local files without this (which pulls in restricted-arch packages
   for solving javascript challenges). update the error message when
   this is not found to mention yt-dlp as well as youtube-dl to give a
   better clue to users. ok tb@, other feedback lraab
VersionDeltaFile
1.3+9-11multimedia/mpv/patches/patch-player_lua_ytdl_hook_lua
1.111+1-2multimedia/mpv/Makefile
+10-132 files

OpenBSD/ports ZlVX7Preditors/neovim/patches patch-cmake_Deps_cmake, games/commandergenius/patches patch-CMakeLists_txt

   don't pick up ccache/sccache
VersionDeltaFile
1.7+8-19games/returntotheroots/patches/patch-CMakeLists_txt
1.10+13-9games/devilutionx/patches/patch-CMakeLists_txt
1.1+20-0editors/neovim/patches/patch-cmake_Deps_cmake
1.2+15-1games/commandergenius/patches/patch-CMakeLists_txt
1.22+3-2games/devilutionx/Makefile
1.8+2-1geo/sfcgal/Makefile
+61-321 files not shown
+63-337 files

OpenBSD/src opQ98plshare/man/man4/man4.octeon ogx.4, sys/arch/octeon/dev ogxreg.h if_ogx.c

   Enable jumbo frames in ogx(4)

   ogx(4) already handles buffer chaining. Raise the MTU limit to enable
   the use of jumbo frames.

   Use the same maximum MTU as cnmac(4). The limit 12288 (0x3000) is
   somewhat arbitrary. It could be even higher, but it is already
   higher than what many other network devices are capable of.
VersionDeltaFile
1.9+11-1sys/arch/octeon/dev/if_ogx.c
1.3+3-2share/man/man4/man4.octeon/ogx.4
1.4+4-1sys/arch/octeon/dev/ogxreg.h
+18-43 files

OpenBSD/ports MmDk21Nlang/janet distinfo Makefile, lang/janet/patches patch-src_include_janet_h

   lang/janet: Update to 1.42.1

   ok abieber@
VersionDeltaFile
1.74+2-3lang/janet/Makefile
1.68+2-2lang/janet/distinfo
1.8+1-1lang/janet/patches/patch-src_include_janet_h
+5-63 files

OpenBSD/ports 29FhmIaprint/py-pypdf Makefile distinfo

   Update to py3-pypdf-6.18.1.
VersionDeltaFile
1.81+2-2print/py-pypdf/distinfo
1.87+1-1print/py-pypdf/Makefile
+3-32 files

OpenBSD/ports 37s4p2Hsysutils/plakar Makefile distinfo

   Update to plakar-1.1.6.
VersionDeltaFile
1.17.2.2+2-2sysutils/plakar/distinfo
1.20.2.2+1-1sysutils/plakar/Makefile
+3-32 files

OpenBSD/ports Td7nXV3sysutils/plakar Makefile distinfo

   Update to plakar-1.1.6.
VersionDeltaFile
1.23+2-2sysutils/plakar/distinfo
1.26+1-1sysutils/plakar/Makefile
+3-32 files