OpenBSD/src HkDVjsJusr.sbin/smtpd smtp_session.c

   EHLO must reset the transaction

   RFC5321 §4.1.4 states that an EHLO command MAY be issued by a client
   later in the session and, if it's acceptable, it MUST clear all buffers
   and reset the state exactly as if a RSET command was issued.

   discussed with / okay martijn@
VersionDeltaFile
1.448+8-8usr.sbin/smtpd/smtp_session.c
+8-81 files

OpenBSD/src fKFn7bBlib/libc/sys open.2

   mention O_CREAT and O_DIRECTORY error
VersionDeltaFile
1.57+4-2lib/libc/sys/open.2
+4-21 files

OpenBSD/src ok7Kn9jsys/kern vfs_vnops.c

   error with EINVAL if open(2) is called with both O_CREAT and O_DIRECTORY

   Before this change:

   If no file or directory matching the last component of a path existed.
   A regular file was created, an error was returned and errno set to ENOTDIR.

   If a regular file matching the last component of a path existed,
   an error was returned and errno set to ENOTDIR.

   If a directory matching the last component of a path existed,
   it was opened without error.

   One possible reading of POSIX is that O_CREAT | O_DIRECTORY is a valid way
   to get a file descriptor for an existing directory.  In practice it isn't
   used and the combination of O_CREAT and O_DIRECTORY has returned an error
   on NetBSD since 2010 and Linux since 2023.

   ok deraadt@ daniel@
VersionDeltaFile
1.126+3-1sys/kern/vfs_vnops.c
+3-11 files

OpenBSD/ports XMbVgn9devel Makefile

   +zizmor
VersionDeltaFile
1.2579+1-0devel/Makefile
+1-01 files

OpenBSD/ports D3TwO5Ldevel/zizmor distinfo crates.inc, devel/zizmor/patches patch-crates_zizmor_Cargo_toml patch-crates_zizmor_src_main_rs

   Initial revision
VersionDeltaFile
1.1+900-0devel/zizmor/distinfo
1.1+449-0devel/zizmor/crates.inc
1.1+47-0devel/zizmor/Makefile
1.1+14-0devel/zizmor/patches/patch-crates_zizmor_Cargo_toml
1.1+13-0devel/zizmor/patches/patch-crates_zizmor_src_main_rs
1.1+10-0devel/zizmor/pkg/DESCR
+1,433-08 files not shown
+1,443-014 files

OpenBSD/ports HfbI0jcmultimedia/gstreamer1/core Makefile, multimedia/gstreamer1/plugins-bad Makefile

   Update Gstreamer to 1.28.2.
VersionDeltaFile
1.142+19-19multimedia/gstreamer1/plugins-bad/Makefile
1.134+12-12multimedia/gstreamer1/plugins-base/Makefile
1.112+5-5multimedia/gstreamer1/core/Makefile
1.97+2-2multimedia/gstreamer1/plugins-good/distinfo
1.75+2-2multimedia/gstreamer1/py-gstreamer/distinfo
1.97+2-2multimedia/gstreamer1/plugins-ugly/distinfo
+42-4217 files not shown
+69-6423 files

OpenBSD/src ywO009Mshare/man/man4 dwmshc.4

   update the list of SoCs this driver works with
VersionDeltaFile
1.2+3-4share/man/man4/dwmshc.4
+3-41 files

OpenBSD/ports lVJgqnnemulators/mgba Makefile, mail/mblaze Makefile

   Add comments indicating pledge usage.

   ok op@
VersionDeltaFile
1.56+1-0emulators/mgba/Makefile
1.22+1-0mail/mblaze/Makefile
1.17+1-0mail/opensmtpd-filters/dkimsign/Makefile
1.61+1-0net/arping/Makefile
1.218+1-0net/isc-bind/Makefile
1.13+1-0net/ucspi-tools/Makefile
+6-05 files not shown
+11-011 files

OpenBSD/ports Di77Vfdx11/xfce4/xfce4-screensaver Makefile

   x11/xfce4/xfce4-screensaver: fix xscreensaver integration
VersionDeltaFile
1.27+2-0x11/xfce4/xfce4-screensaver/Makefile
+2-01 files

OpenBSD/ports N8JEhK8sysutils/google-cloud-sdk distinfo Makefile, sysutils/google-cloud-sdk/pkg PLIST

   Update to google-cloud-sdk-564.0.0.
VersionDeltaFile
1.417+467-285sysutils/google-cloud-sdk/pkg/PLIST
1.434+2-2sysutils/google-cloud-sdk/distinfo
1.454+1-1sysutils/google-cloud-sdk/Makefile
+470-2883 files

OpenBSD/ports 1NPcPcxsysutils/amazon-ssm-agent distinfo Makefile

   Update to amazon-ssm-agent-3.3.4177.0.
VersionDeltaFile
1.167+2-2sysutils/amazon-ssm-agent/distinfo
1.181+1-1sysutils/amazon-ssm-agent/Makefile
+3-32 files

OpenBSD/ports l5FR1fZsysutils/flatpak/xdg-dbus-proxy distinfo Makefile

   Update to xdg-dbus-proxy-0.1.7.
VersionDeltaFile
1.3+2-2sysutils/flatpak/xdg-dbus-proxy/distinfo
1.5+1-1sysutils/flatpak/xdg-dbus-proxy/Makefile
+3-32 files

OpenBSD/ports A04EdGmnet/synapse distinfo modules.inc, net/synapse/pkg PLIST

   net/synapse: update to 1.151.0, from MAINTAINER Renaud Allard
VersionDeltaFile
1.90+8-8net/synapse/distinfo
1.76+4-3net/synapse/pkg/PLIST
1.53+3-3net/synapse/modules.inc
1.119+2-1net/synapse/Makefile
+17-154 files

OpenBSD/ports auPN40dtelephony/baresip Makefile.inc, telephony/baresip/baresip distinfo

   telephony/baresip: update to 4.7.0
VersionDeltaFile
1.44+2-2telephony/baresip/baresip/distinfo
1.43+2-2telephony/baresip/re/distinfo
1.37+1-1telephony/baresip/Makefile.inc
+5-53 files

OpenBSD/ports e2v1Jzpmail/mozilla-thunderbird distinfo Makefile

   mail/mozilla-thunderbird: MFC update to 140.9.1.

   see https://www.thunderbird.net/en-US/thunderbird/140.9.1esr/releasenotes/
   fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-29/
VersionDeltaFile
1.301.2.10+2-2mail/mozilla-thunderbird/distinfo
1.513.2.11+1-1mail/mozilla-thunderbird/Makefile
+3-32 files

OpenBSD/ports 3LHsDJpmail/mozilla-thunderbird distinfo Makefile, mail/thunderbird-i18n distinfo Makefile.inc

   mail/mozilla-thunderbird: update to 140.9.1.

   see https://www.thunderbird.net/en-US/thunderbird/140.9.1esr/releasenotes/
   fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-29/
VersionDeltaFile
1.295+132-132mail/thunderbird-i18n/distinfo
1.311+2-2mail/mozilla-thunderbird/distinfo
1.524+1-1mail/mozilla-thunderbird/Makefile
1.269+1-1mail/thunderbird-i18n/Makefile.inc
+136-1364 files

OpenBSD/src dmfuV3Zlib/libcrypto opensslv.h

   Bump LibreSSL version for the release

   ok deraadt
VersionDeltaFile
1.82+3-3lib/libcrypto/opensslv.h
+3-31 files

OpenBSD/ports ekmxfyvnet/flare-messenger distinfo crates.inc, net/flare-messenger/patches patch-Cargo_toml patch-deps_libsignal-service-rs_Cargo_toml

   net/flare-messenger: update to 0.20.3

   ok rsadowski@ thanks!
VersionDeltaFile
1.2+522-468net/flare-messenger/distinfo
1.2+254-227net/flare-messenger/crates.inc
1.2+2-81net/flare-messenger/pkg/PLIST
1.2+18-18net/flare-messenger/patches/patch-Cargo_toml
1.2+12-6net/flare-messenger/patches/patch-deps_libsignal-service-rs_Cargo_toml
1.4+7-9net/flare-messenger/Makefile
+815-8093 files not shown
+831-8219 files

OpenBSD/src dZkpOR6sys/dev/fdt dwmshc.c

   Add support for the RK3528 variant.  To make things easier to follow,
   pull the hardware differences out into a per-variant structure containing
   the different parameters we have to program.

   tested on 3528 (radxa e20c), 3568 (nanopi r5s), 3588 (nanopi r6c)
   feedback from kettenis@
   ok kettenis@ dlg@
VersionDeltaFile
1.9+63-12sys/dev/fdt/dwmshc.c
+63-121 files

OpenBSD/src yTaEGUYsys/dev/fdt dwpcie.c

   Add SpacemiT K1 support.
VersionDeltaFile
1.59+158-2sys/dev/fdt/dwpcie.c
+158-21 files

OpenBSD/ports gIwB7Dmtextproc/lowdown Makefile distinfo, textproc/lowdown/pkg PLIST

   textproc/lowdown: Update to 3.0.1

   From Maintainer Bryan Vyhmeister
   ok tb@
VersionDeltaFile
1.18+3-3textproc/lowdown/pkg/PLIST
1.38+2-2textproc/lowdown/Makefile
1.33+2-2textproc/lowdown/distinfo
+7-73 files

OpenBSD/ports 7lNmdhlsysutils/conky Makefile

   sysutils/conky: set USE_CCACHE=OFF

   ... otherwise build fails with ccache installed
   ok tb@
VersionDeltaFile
1.76+2-1sysutils/conky/Makefile
+2-11 files

OpenBSD/ports FpExPeAmail/postfix/stable Makefile, security/sslscan Makefile

   bump stable openssl consumers with static link
VersionDeltaFile
1.273.2.2+1-1mail/postfix/stable/Makefile
1.81.2.2+1-1security/sslscan/Makefile
1.51.2.2+1-1sysutils/borgbackup/2.0/Makefile
+3-33 files

OpenBSD/ports 7jbPknwsecurity/openssl/3.5 Makefile distinfo, security/openssl/3.5/patches patch-Configurations_unix-Makefile_tmpl patch-crypto_aes_asm_aes-riscv64_pl

   MFC: Update to openssl 3.5.6

   Add eopenssl symlink and add aja's cmake fix as well.

   CVE-2026-28386 CVE-2026-28387 CVE-2026-28388 CVE-2026-28389 CVE-2026-28390
   CVE-2026-31789 CVE-2026-31790. It's all very boring.
VersionDeltaFile
1.11.2.2+5-1security/openssl/3.5/Makefile
1.5.2.2+2-2security/openssl/3.5/distinfo
1.2.2.1+2-2security/openssl/3.5/patches/patch-Configurations_unix-Makefile_tmpl
1.4.2.2+3-0security/openssl/3.5/pkg/PLIST
1.1.2.1+1-1security/openssl/3.5/patches/patch-crypto_aes_asm_aes-riscv64_pl
1.1.1.1.2.1+1-1security/openssl/3.5/patches/patch-exporters_pkg-config_libcrypto_pc_in
+14-74 files not shown
+17-1010 files

OpenBSD/ports 6Rmgosnsecurity/openssl/3.5/patches patch-Configurations_unix-Makefile_tmpl patch-exporters_cmake_OpenSSLConfig_cmake_in, security/openssl/3.6/patches patch-Configurations_unix-Makefile_tmpl

   openssl: regen patches
VersionDeltaFile
1.2+2-2security/openssl/3.6/patches/patch-Configurations_unix-Makefile_tmpl
1.3+2-2security/openssl/3.5/patches/patch-Configurations_unix-Makefile_tmpl
1.2+1-1security/openssl/3.5/patches/patch-exporters_cmake_OpenSSLConfig_cmake_in
1.2+1-1security/openssl/3.5/patches/patch-exporters_pkg-config_libcrypto_pc_in
1.2+1-1security/openssl/3.5/patches/patch-exporters_pkg-config_libssl_pc_in
1.2+1-1security/openssl/3.5/patches/patch-exporters_pkg-config_openssl_pc_in
+8-88 files not shown
+16-1614 files

OpenBSD/ports rUHpcbYlang/erlang/26 distinfo Makefile, lang/erlang/27 Makefile distinfo

   lang/erlang: Update to 26.2.5.19, 27.3.4.10, 28.4.2

   Fixes for
   CVE-2026-28810
   CVE-2026-32144
VersionDeltaFile
1.16+10-10lang/erlang/28/Makefile
1.28+9-9lang/erlang/27/Makefile
1.26+4-4lang/erlang/26/distinfo
1.23+4-4lang/erlang/27/distinfo
1.15+4-4lang/erlang/28/distinfo
1.31+3-3lang/erlang/26/Makefile
+34-346 files

OpenBSD/ports OSwviTUdevel/p5-Term-ReadLine-Gnu Makefile

   If ports privsep is set, test without X11 in non interactive mode.
VersionDeltaFile
1.39+19-10devel/p5-Term-ReadLine-Gnu/Makefile
+19-101 files

OpenBSD/src uEtH6bjgnu/usr.bin/perl Makefile.bsd-wrapper

   Respect DEBUG so we can build perl with debug symbols

   Adding -DEBUGGING in CONFIGURE_ARGS activates debug code,
   -DEBUGGING=-g passes -g in CFLAGS (only -g is supported),
   and -DEBUGGING=both does... both.  This is a bit confusing.
   IMO DEBUG=-g should only add -g and disable executable stripping, but
   not change the code that is built.  So use -Doptimize which lets us pass
   arbitrary compiler flags (eg -g3), just like DEBUG does in our system
   Makefiles.

   Hints and ok afresh1@
VersionDeltaFile
1.115+5-1gnu/usr.bin/perl/Makefile.bsd-wrapper
+5-11 files

OpenBSD/ports mYJYMlMsysutils/borgbackup/2.0 Makefile

   borgbackup/2.0: bump after openssl udpate (static link)
VersionDeltaFile
1.56+1-1sysutils/borgbackup/2.0/Makefile
+1-11 files

OpenBSD/ports 3C514KMmail/postfix/stable Makefile

   postfix-stable: bump after openssl update (static link)
VersionDeltaFile
1.281+1-1mail/postfix/stable/Makefile
+1-11 files