OpenBSD/src 7weuwOw — usr.sbin/rpki-client main.c nca.c

   Rename variable names for consistency

   mechnical changes: ncas to ca_tree, ncas_hist to nca_hist_tree, tree to
   ca_tree, and needle to nca_hist_needle.

   OK tb@
VersionDeltaFile
1.16+24-21usr.sbin/rpki-client/nca.c
1.320+3-3usr.sbin/rpki-client/main.c
+27-242 files

OpenBSD/ports Ff7Nu6W — audio/libxmp Makefile distinfo

   Update libxmp to 4.7.4.
VersionDeltaFile
1.24+2-2audio/libxmp/distinfo
1.31+1-1audio/libxmp/Makefile
+3-32 files

OpenBSD/ports c8GOuyf — net/mtr Makefile, net/mtr/patches patch-packet_packet_c

   add _permit_setugid symbols
VersionDeltaFile
1.7+13-3net/mtr/patches/patch-packet_packet_c
1.78+3-1net/mtr/Makefile
+16-42 files

OpenBSD/ports tGYELjv — net/scamper Makefile, net/scamper/patches patch-scamper_scamper_c

   add _permit_setugid symbols
VersionDeltaFile
1.1+13-0net/scamper/patches/patch-scamper_scamper_c
1.91+1-0net/scamper/Makefile
+14-02 files

OpenBSD/ports 4UGGxGr — net/fping Makefile, net/fping/patches patch-src_fping_c

   add _permit_setugid symbols
VersionDeltaFile
1.4+18-10x11/rxvt-unicode/patches/patch-src_rxvtd_C
1.17+21-4net/fping/patches/patch-src_fping_c
1.1+15-0x11/rxvt-unicode/patches/patch-src_rxvt_C
1.63+1-1x11/rxvt-unicode/Makefile
1.59+1-0net/fping/Makefile
+56-155 files

OpenBSD/ports mTR5VLX — graphics Makefile

   hook up openjfx
VersionDeltaFile
1.664+1-0graphics/Makefile
+1-01 files

OpenBSD/ports cbEpldg — graphics/openjfx/21 distinfo Makefile, graphics/openjfx/21/files openbsd.gradle

   Initial revision
VersionDeltaFile
1.1+297-0graphics/openjfx/21/files/openbsd.gradle
1.1+268-0graphics/openjfx/21/patches/patch-build_gradle
1.1+174-0graphics/openjfx/21/Makefile
1.1+105-0graphics/openjfx/21/patches/patch-modules_javafx_web_src_main_native_Source_JavaScriptCore_runtime_MachineContext_h
1.1+100-0graphics/openjfx/21/distinfo
1.1+59-0graphics/openjfx/21/patches/patch-modules_javafx_graphics_src_main_native-font_freetype_c
+1,003-064 files not shown
+1,580-070 files

OpenBSD/ports HtU3Hoo — graphics/p5-Imager-QRCode Makefile, graphics/p5-Imager-QRCode/pkg PLIST

   bump p5-Imager-QRCode revision after p5-Imager API change
VersionDeltaFile
1.12+12-11graphics/p5-Imager-QRCode/Makefile
1.5+1-1graphics/p5-Imager-QRCode/pkg/PLIST
+13-122 files

OpenBSD/ports Y7VNTe4 — graphics/p5-Imager Makefile distinfo, graphics/p5-Imager/pkg PLIST

   update p5-Imager to 1.038
   CVE-2026-102504 CVE-2026-102505
VersionDeltaFile
1.25+2-2graphics/p5-Imager/distinfo
1.62+1-1graphics/p5-Imager/Makefile
1.21+1-0graphics/p5-Imager/pkg/PLIST
+4-33 files

OpenBSD/ports RmNJtCj — converters/p5-Cpanel-JSON-XS Makefile distinfo

   update p5-Cpanel-JSON-XS to 4.53
VersionDeltaFile
1.50+2-2converters/p5-Cpanel-JSON-XS/distinfo
1.54+1-1converters/p5-Cpanel-JSON-XS/Makefile
+3-32 files

OpenBSD/src FKJGQUp — regress/usr.sbin/relayd Remote.pm

   Execute remote relayd test with CERTBASE environment.
VersionDeltaFile
1.8+3-2regress/usr.sbin/relayd/Remote.pm
+3-21 files

OpenBSD/ports 6aXlnFu — x11/xfce4/xfce4-screensaver Makefile, x11/xfce4/xfce4-screensaver/files ask-pass.c

   x11/xfce4-screensaver: set _permit_setugid to S_ISGID in ask-pass.c

   matches setgid auth mode set by pkg/PLIST, and should account for future
   restrictions on setgid/setuid usage. Totally untested for now.
VersionDeltaFile
1.28+1-1x11/xfce4/xfce4-screensaver/Makefile
1.4+2-0x11/xfce4/xfce4-screensaver/files/ask-pass.c
+3-12 files

OpenBSD/ports nqq015F — math/p5-Statistics-CaseResampling Makefile distinfo

   update p5-Statistics-CaseResampling to 0.18
VersionDeltaFile
1.4+2-2math/p5-Statistics-CaseResampling/distinfo
1.7+2-1math/p5-Statistics-CaseResampling/Makefile
+4-32 files

OpenBSD/ports O1j5dPz — www/py-aioquic distinfo Makefile, www/py-aioquic/patches patch-setup_py patch-tests_test_asyncio_py

   update to py3-aioquic-1.6.1
VersionDeltaFile
1.5+4-4www/py-aioquic/Makefile
1.5+3-3www/py-aioquic/pkg/PLIST
1.3+2-2www/py-aioquic/distinfo
1.3+1-1www/py-aioquic/patches/patch-tests_test_asyncio_py
1.3+1-1www/py-aioquic/patches/patch-src_aioquic_asyncio_client_py
1.2+0-0www/py-aioquic/patches/patch-setup_py
+11-116 files

OpenBSD/src 6rWErD3 — lib/libc/dlfcn init.c

   For any binary linked against libc, compare the file setuid/setgid bits
   against the internal global variable _permit_setugid.
   If either bit is set in the file mode, but the same bit is not set in
   the variable, generate a syslog message, output the same to stderr.
   It looks like this:  /usr/bin/x: not supposed to be setuid, aborting
   It does not abort yet because some packages need the correct variable
   to be added.  Soon, soon, soon...
VersionDeltaFile
1.31+26-1lib/libc/dlfcn/init.c
+26-11 files

OpenBSD/ports H9Cuylk — www/firefox-esr Makefile distinfo

   www/firefox-esr: MFC update to 153.5.0.

   see https://www.firefox.com/en-US/firefox/153.5.0/releasenotes/
   fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/
VersionDeltaFile
1.190.2.1+4-4www/firefox-esr/distinfo
1.282.2.1+1-1www/firefox-esr/Makefile
+5-52 files

OpenBSD/ports l4wzf3e — www/firefox-esr Makefile distinfo, www/firefox-esr-i18n Makefile.inc distinfo

   www/firefox-esr: update to 153.5.0.

   see https://www.firefox.com/en-US/firefox/153.5.0/releasenotes/
   fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/
VersionDeltaFile
1.186+162-162www/firefox-esr-i18n/distinfo
1.191+4-4www/firefox-esr/distinfo
1.284+2-2www/firefox-esr/Makefile
1.198+1-1www/firefox-esr-i18n/Makefile.inc
+169-1694 files

OpenBSD/ports uKygyoU — www/mozilla-firefox Makefile distinfo, www/mozilla-firefox/patches patch-third_party_llama_cpp_moz_build patch-config_makefiles_rust_mk

   www/mozilla-firefox: MFC update to 158.0.

   see https://www.firefox.com/en-US/firefox/158.0/releasenotes/
   fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/
VersionDeltaFile
1.17.2.1+7-7www/mozilla-firefox/patches/patch-config_makefiles_rust_mk
1.423.2.2+4-4www/mozilla-firefox/distinfo
1.712.2.2+2-2www/mozilla-firefox/Makefile
1.1.2.1+1-1www/mozilla-firefox/patches/patch-third_party_llama_cpp_moz_build
+14-144 files

OpenBSD/ports r7hBoc0 — www/firefox-i18n Makefile.inc distinfo, www/mozilla-firefox Makefile distinfo

   www/mozilla-firefox: update to 158.0.

   see https://www.firefox.com/en-US/firefox/158.0/releasenotes/
   fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/
VersionDeltaFile
1.411+164-164www/firefox-i18n/distinfo
1.18+7-7www/mozilla-firefox/patches/patch-config_makefiles_rust_mk
1.425+4-4www/mozilla-firefox/distinfo
1.715+3-3www/mozilla-firefox/Makefile
1.2+1-1www/mozilla-firefox/patches/patch-third_party_llama_cpp_moz_build
1.366+1-1www/firefox-i18n/Makefile.inc
+180-1806 files

OpenBSD/src N9BuAag — sys/arch/arm64/dev aplsmc.c

   Improve apm info for machines without a battery.

   ok deraadt@, jca@
VersionDeltaFile
1.34+14-3sys/arch/arm64/dev/aplsmc.c
+14-31 files

OpenBSD/src H4sCw2w — sys/kern exec_elf.c

   AuxInfo[ELF_AUX_ENTRIES] is filled based upon a collection of MI and
   MD enums.  Addition of a new auxval without increasing ELF_AUX_ENTRIES
   happened twice to me, and the failure mode is way too subtle.  Add
   KASSERT() for every enum storage into the array, which the compiler
   completely eliminates if it notices the number of array stores is
   <= the array size.
   ok kettenis
VersionDeltaFile
1.208+65-53sys/kern/exec_elf.c
+65-531 files

OpenBSD/ports 0wg4jnb — x11/freerdp Makefile distinfo, x11/freerdp/patches patch-channels_rdpsnd_client_rdpsnd_main_c patch-libfreerdp_crypto_tls_c

   update to freerdp-3.32.2
VersionDeltaFile
1.12.2.1+3-3x11/freerdp/patches/patch-libfreerdp_crypto_tls_c
1.34.2.2+2-2x11/freerdp/distinfo
1.4.2.2+1-1x11/freerdp/patches/patch-channels_rdpsnd_client_rdpsnd_main_c
1.85.2.2+1-1x11/freerdp/Makefile
+7-74 files

OpenBSD/ports tYkYnnN — x11/freerdp Makefile distinfo, x11/freerdp/patches patch-channels_rdpsnd_client_rdpsnd_main_c patch-libfreerdp_crypto_tls_c

   update to freerdp-3.32.2

   upstream says "Regression, bugfix and security release. We've been
   under close scrutiny by various security researchers. Addressing their
   findings we've hardened the code base considerably against malicious
   client and/or server messages"
VersionDeltaFile
1.13+3-3x11/freerdp/patches/patch-libfreerdp_crypto_tls_c
1.36+2-2x11/freerdp/distinfo
1.6+1-1x11/freerdp/patches/patch-channels_rdpsnd_client_rdpsnd_main_c
1.87+1-1x11/freerdp/Makefile
+7-74 files

OpenBSD/src 2OCeEFw — sys/msdosfs msdosfsmount.h

   Fix calculation of i/o size needed to read FSInfo struct.

   From Acts1631.

   ok jsg@
VersionDeltaFile
1.24+2-2sys/msdosfs/msdosfsmount.h
+2-21 files

OpenBSD/src voFOvIl — sys/arch/amd64/include vmparam.h

   bump MAXTSIZ to 512M due to piggy browsers, ok deraadt
VersionDeltaFile
1.27+2-2sys/arch/amd64/include/vmparam.h
+2-21 files

OpenBSD/ports yicL6X3 — devel/py-test-benchmark Makefile

   drop py-elasticsearch TDEP, it doesn't really add much
VersionDeltaFile
1.25+1-2devel/py-test-benchmark/Makefile
+1-21 files

OpenBSD/ports XjRbviT — multimedia/streamlink distinfo Makefile, multimedia/streamlink/patches patch-setup_py

   update to streamlink-8.6.2, dep moves from urllib3<2 to urllib3>=2
VersionDeltaFile
1.29+24-12multimedia/streamlink/pkg/PLIST
1.45+3-5multimedia/streamlink/Makefile
1.25+2-2multimedia/streamlink/distinfo
1.11+1-1multimedia/streamlink/patches/patch-setup_py
+30-204 files

OpenBSD/ports ENT5vlH — www/py-urllib3 distinfo Makefile, www/py-urllib3/patches patch-test_test_response_py patch-src_urllib3_response_py

   update to py3-urllib3-2.8.0
VersionDeltaFile
1.18+39-49www/py-urllib3/pkg/PLIST
1.45+10-9www/py-urllib3/Makefile
1.1+19-0www/py-urllib3/patches/patch-src_urllib3___init___py
1.28+2-2www/py-urllib3/distinfo
1.2+0-0www/py-urllib3/patches/patch-test_test_response_py
1.2+0-0www/py-urllib3/patches/patch-src_urllib3_response_py
+70-606 files

OpenBSD/ports FbjEOvn — sysutils/awscli Makefile, sysutils/awscli/patches patch-pyproject_toml

   relax urllib3 dep from <=2.6.3 to <3 in prep for updating urllib3
VersionDeltaFile
1.3+3-2sysutils/awscli/patches/patch-pyproject_toml
1.862+1-0sysutils/awscli/Makefile
+4-22 files

OpenBSD/ports tmOcmm4 — devel/py-awscrt/patches patch-setup_py

   regen patches
VersionDeltaFile
1.2+1-1devel/py-awscrt/patches/patch-setup_py
+1-11 files