security/nss: update to 3.131, will be required for firefox 159.
bump minor for addition of CERT_GetDERCertTrust &
_PK11_DERPrivateKeyToPrivateKeyInfo symbols
see https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_131.html
net/ejabberd: update to 26.09
OpenBSD/ports 7m86vhT — devel/jdk/11/patches patch-make_lib_Lib-java_instrument_gmk patch-make_launcher_LauncherCommon_gmk, devel/jdk/17/patches patch-make_common_modules_LauncherCommon_gmk patch-make_modules_java_instrument_Lib_gmk
We support $ORIGIN fully now. Remove static linking work-arounds.
typo in dependency spec
OpenBSD/ports bhOLXUj — x11/freerdp distinfo Makefile, x11/freerdp/patches patch-winpr_CMakeLists_txt patch-channels_rdpsnd_client_rdpsnd_main_c
update to freerdp-3.32.1
OpenBSD/ports McWWQVJ — x11/freerdp distinfo Makefile, x11/freerdp/patches patch-winpr_CMakeLists_txt patch-channels_rdpsnd_client_rdpsnd_main_c
update to freerdp-3.32.1
update to rspamd-4.2.1
update to rspamd-4.2.1
update to fetchmail-6.6.9
update to fetchmail-6.6.9
update to py3-tzdata-2026.5
update to py3-tzdata-2026.5
update to py3-tz-2026.5
update to py3-tz-2026.5
SECURITY update to openvpn-2.7.8
Issues that affect us:
1. Check for NULL-Bytes in certificate subjects - refuse all such
certificates now as "invalid" (CVE-2026-84790).
2. options: fix unsigned underflow when clearing domain_search_list
(CVE-2026-88964)
Full ChangeLog:
https://github.com/OpenVPN/openvpn/blob/v2.7.8/Changes.rst
SECURITY update to openvpn-2.7.8
Issues that affect us:
1. Check for NULL-Bytes in certificate subjects - refuse all such
certificates now as "invalid" (CVE-2026-84790).
2. options: fix unsigned underflow when clearing domain_search_list
(CVE-2026-88964)
Full ChangeLog:
https://github.com/OpenVPN/openvpn/blob/v2.7.8/Changes.rst
OpenBSD/ports ll4S4UY — telephony/sngrep Makefile distinfo, telephony/sngrep/patches patch-src_capture_c
update to sngrep-1.9.0
MFC: iamb: set USE_NOEXECONLY to unbreak. Tested by Enzo Nicosia, ok sthen
iamb: set USE_NOEXECONLY to unbreak. Tested by Enzo Nicosia, ok sthen
build tigervnc against newer xserver
build tigervnc against newer xserver
set PORTROACH
link bochs,debug,no_x11 and bochs,no_x11
OpenBSD/ports aJIB4tI — emulators/bochs Makefile, emulators/bochs/patches patch-bochs_configure_ac
fix bochs deps for debug flavour
build ngrep,tcpkill
update to ngrep-1.49.0, add tcpkill flavour
update to py3-xmltodict-1.0.4, ok jung (dropping maintainer)
OpenBSD/ports 8j6MtSm — lang/python/3 Makefile distinfo, lang/python/3/patches patch-Modules__ssl_c patch-configure_ac
update to python-3.13.16, ok kmos
OpenBSD/ports jNd1dv7 — lang/python/3 Makefile distinfo, lang/python/3/patches patch-Modules__ssl_c patch-configure_ac
update to python-3.14.8, ok kmos
bump setuptools_scm version in MODPY_PYBUILD BDEP because some
plists with the newer version have changed