OpenBSD/src ZxBqRQPlibexec/ld.so library.c library_mquery.c

   While technically allowed, shared libraries without PT_LOAD segments
   don't really make any sense.  Bail out early to avoid the bits of code
   that assume that we have a PT_LOAD sagment.  This avoids a NULL pointer
   dereference on i386 (which uses library_mquery.c) or bogus mmap calls
   on other architectures (which use library.c).

   The potential NULL pointer dereference in library_mquery.c was found by
   Frank Denis.

   ok guenther@
VersionDeltaFile
1.99+15-1libexec/ld.so/library.c
1.78+14-1libexec/ld.so/library_mquery.c
+29-22 files

OpenBSD/src Ug4NGZxsys/arch/riscv64/dev pci_machdep.c

   Initialize ih_intrpin for regular (non-vector) MSI interrupts as well.
   Fixes regular MSIs on the SpacemiT K1 SoC.

   ok jsg@
VersionDeltaFile
1.3+2-1sys/arch/riscv64/dev/pci_machdep.c
+2-11 files

OpenBSD/ports Bpf3wrZdevel/jjui distinfo modules.inc

   Update to jjui 0.10.5

   https://github.com/idursun/jjui/releases/tag/v0.10.5
VersionDeltaFile
1.25+20-16devel/jjui/distinfo
1.13+8-6devel/jjui/modules.inc
1.26+1-1devel/jjui/Makefile
+29-233 files

OpenBSD/ports INkamuigeo/mdal/patches patch-mdal_frmts_mdal_gdal_cpp

   geo/mdal: fix build with gdal 3.13, from upstream PR

   build breakage reported by tb@, thanks !
VersionDeltaFile
1.1+17-0geo/mdal/patches/patch-mdal_frmts_mdal_gdal_cpp
+17-01 files

OpenBSD/ports wmG3eOTgames/freesynd Makefile, games/freesynd/pkg PLIST

   games/freesynd: don't leave an empty /usr/local/etc/freesynd dir behind
VersionDeltaFile
1.11+4-4games/freesynd/Makefile
1.4+0-2games/freesynd/pkg/PLIST
+4-62 files

OpenBSD/src cIKCHamusr.bin/openssl s_socket.c

   openssl s_socket: do not fail accept on reverse DNS lookup failure

   Found by Frank Denis
VersionDeltaFile
1.15+2-9usr.bin/openssl/s_socket.c
+2-91 files

OpenBSD/ports wS9Qgiadevel/ipython distinfo Makefile, devel/ipython/pkg PLIST

   update ipython to 9.13.0
VersionDeltaFile
1.58+2-2devel/ipython/distinfo
1.40+3-0devel/ipython/pkg/PLIST
1.104+2-1devel/ipython/Makefile
+7-33 files

OpenBSD/ports F8qeaFnlang/jruby Makefile distinfo, lang/jruby/patches patch-jruby-launcher_unixlauncher_c patch-bin_jruby_sh

   Update to JRuby 10.1.0.0

   This brings the Ruby version to 4.0. This updates the embedded jffi to
   from 1.3.10 to 1.3.15, and the embedded jruby-launcher from 1.1.19 to
   2.0.2.

   This disables AppCDS usage unless the user has configured a JRUBY_JSA
   environment variable, as the default location is not writable results
   in a warning.

   This ships more of the jruby bin files. There were some hidden files
   needed to avoid warnings, as well as some new programs that should be
   added. These go in /usr/local/jruby/bin, which is not in PATH, so
   conflicts aren't an issue.

   One issue with this version is it ships a version of minitest that
   doesn't work, as the version it ships depends on a prism library that
   it doesn't ship. This should be fixed in the next version, but in the
   meantime, comment out a couple minitest files in the PLIST. Users can

    [3 lines not shown]
VersionDeltaFile
1.84+1,037-891lang/jruby/pkg/PLIST
1.1+55-0lang/jruby/patches/patch-jruby-launcher_unixlauncher_c
1.3+17-16lang/jruby/patches/patch-bin_jruby_sh
1.131+8-8lang/jruby/Makefile
1.90+6-6lang/jruby/distinfo
1.3+6-5lang/jruby/patches/patch-jruby-launcher_jrubyexe_cpp
+1,129-9262 files not shown
+1,131-9288 files

OpenBSD/src bQgYvLmlib/libc/dlfcn init.c, lib/libc/gen elf_aux_info.c

   libc: declare _hwcap and related variables as hidden

   ok tb@ deraadt@
VersionDeltaFile
1.2+2-5lib/libc/gen/elf_aux_info.c
1.2+6-1lib/libc/hidden/sys/auxv.h
1.25+2-1lib/libc/dlfcn/init.c
+10-73 files

OpenBSD/src bAO6SNYusr.bin/mandoc main.c

   The regression fix in rev. 1.271 was still incomplete.

   While the fchdir(2) in main() is indeed needed such that the mparse_open()
   in process_onefile() finds local files, there is a second, smaller
   issue purely inside check_xr(): As the ultimate fallback, fs_search()
   looks for cross-referenced manual pages in the current directory,
   which is typically used for working on software under development
   that is not yet installed.  Consequently, a second fchdir(2) is needed
   inside check_xr() between mansearch(), which typically changes directory,
   and the subsequent fs_search().

   This makes sure that "mandoc -T lint" on a manual page that contains
   an .Xr link to another manual page that is not installed but present
   in the current directory does not complain about that link.
   Again reported by anton@.

   The fix is slightly awkward because the directory file descriptor
   needs to be passed down through multiple layer of subroutines, but i
   fear that cannot be helped because it is needed both in the main program
   and in the low-level function check_xr().
VersionDeltaFile
1.272+13-11usr.bin/mandoc/main.c
+13-111 files

OpenBSD/src k0zUXRPsys/arch/riscv64/include riscvreg.h, sys/arch/riscv64/riscv64 vector.c cpu.c

   Add kernel support for the vector extension on riscv64.

   The V extension (where supported) adds an additional 32 vector registers
   that are variable length (up to 65,536 bits, but more commonly 2048 bits).
   In order to support the use of the V extension (and additional vector
   extensions) we need to enable the vector extension and save/restore the
   vector registers.

   ok kettenis@
VersionDeltaFile
1.1+168-0sys/arch/riscv64/riscv64/vector.c
1.28+22-9sys/arch/riscv64/riscv64/cpu.c
1.13+22-4sys/arch/riscv64/riscv64/vm_machdep.c
1.43+15-8sys/arch/riscv64/riscv64/machdep.c
1.6+17-1sys/arch/riscv64/include/riscvreg.h
1.23+9-2sys/arch/riscv64/riscv64/trap.c
+253-246 files not shown
+284-3512 files

OpenBSD/src X8ai9I1usr.bin/openssl crl.c

   openssl crl: make verify failure result in "app" failure

   Found by Frank Denis
VersionDeltaFile
1.18+5-4usr.bin/openssl/crl.c
+5-41 files

OpenBSD/src t0p5oYKusr.bin/openssl ecparam.c

   openssl ecparam: make EC_GROUP_check() failure result in "app" failure

   Found by Frank Denis
VersionDeltaFile
1.26+4-3usr.bin/openssl/ecparam.c
+4-31 files

OpenBSD/src 0pZhiLGusr.bin/openssl s_client.c

   openssl s_client: avoid two out of bounds writes

   A NUL termination after an unchecked BIO_read() call in XMSS mode could
   lead to a write one byte before the start of sbuf or one past its end.
   Add an error check to avoid the former and read one byte less to avoid the
   latter.

   Found by Frank Denis
VersionDeltaFile
1.69+4-2usr.bin/openssl/s_client.c
+4-21 files

OpenBSD/ports gybe6hylang/node/patches patch-deps_v8_src_codegen_riscv_assembler-riscv_cc patch-deps_ada_ada_cpp, lang/node/pkg PLIST

   lang/node: Update to 24.15.0
VersionDeltaFile
1.71+209-538lang/node/pkg/PLIST
1.3+9-36lang/node/patches/patch-deps_v8_src_codegen_riscv_assembler-riscv_cc
1.5+19-19lang/node/patches/patch-deps_ada_ada_cpp
1.19+8-17lang/node/patches/patch-tools_v8_gypfiles_v8_gyp
1.2+11-11lang/node/patches/patch-deps_v8_src_wasm_baseline_ia32_liftoff-assembler-ia32-inl_h
1.8+6-15lang/node/patches/patch-deps_v8_src_base_platform-posix_cc
+262-63630 files not shown
+327-71336 files

OpenBSD/ports 90tuiJMmeta/tor-browser Makefile, www/tor-browser Makefile.inc

   Tor Browser: update to 15.0.13
VersionDeltaFile
1.121+4-4www/tor-browser/browser/distinfo
1.127+3-3meta/tor-browser/Makefile
1.69+2-2www/tor-browser/noscript/distinfo
1.76+1-1www/tor-browser/noscript/Makefile
1.124+1-1www/tor-browser/Makefile.inc
+11-115 files

OpenBSD/ports PkDp3t5graphics/babl/patches patch-babl_babl-cpuaccel_c

   don't bother with linux-specific armv7 cpu acceleration detection

   fixes build on armv7, doesn't affect other arches
VersionDeltaFile
1.1+23-0graphics/babl/patches/patch-babl_babl-cpuaccel_c
+23-01 files

OpenBSD/src FcPkcGesys/dev/pci if_mwx.c if_mwxreg.h

   Simplify previous by shifting the rcpi value first then use a common mask.
   Also set ic_max_rssi = 0 since this driver will uses DBm reporting.
VersionDeltaFile
1.9+6-6sys/dev/pci/if_mwx.c
1.6+3-6sys/dev/pci/if_mwxreg.h
+9-122 files

OpenBSD/src Ze9aPy3sys/dev/pci if_mwx.c if_mwxreg.h

   Implement RSSI reporting for mwx(4).

   Diff provided by Benjamin Lee McQueen (mcq at disroot.org)
VersionDeltaFile
1.8+48-10sys/dev/pci/if_mwx.c
1.5+12-1sys/dev/pci/if_mwxreg.h
+60-112 files

OpenBSD/ports 99fvuv0devel/meson distinfo Makefile, devel/meson/patches patch-mesonbuild_build_py

   Update to meson-1.11.1.
VersionDeltaFile
1.108+2-2devel/meson/distinfo
1.65+2-2devel/meson/patches/patch-mesonbuild_build_py
1.47+3-0devel/meson/pkg/PLIST
1.158+1-1devel/meson/Makefile
1.122+1-1devel/meson/meson.port.mk
+9-65 files

OpenBSD/src bEdSI2Xlib/libssl ssl_tlsext.c

   libssl: record extension lengths in ClientHello hashing

   The ClientHello hash is intended to ensure that the second CH after an HRR
   only makes the allowed changes to the TLS extensiosn by recording message
   type followed by the raw extension data if it must remain unchanged.
   This makes it possible (in principle) that part of free form extension
   data is confused with type (and length) information of a subsequent
   extension.

   Recording the length after the type prevents such a confusion and fixes
   the framing of the extensions.

   Found by Frank Denis

   ok jsing
VersionDeltaFile
1.160+4-1lib/libssl/ssl_tlsext.c
+4-11 files

OpenBSD/src ik8dUKalib/libssl ssl_lib.c

   ssl_lib: trade two extra empty lines for a missing one
VersionDeltaFile
1.334+2-4lib/libssl/ssl_lib.c
+2-41 files

OpenBSD/src aOOketJsys/dev/sun sunkbd.c

   unifdef call into removed sparc-only tctrl(4)
VersionDeltaFile
1.29+1-16sys/dev/sun/sunkbd.c
+1-161 files

OpenBSD/ports nl0ON0Inet/dnscontrol Makefile

   dnscontrol: move homepage after the GH org moved

   This port is also lagging behind quite a bit...
VersionDeltaFile
1.39+2-2net/dnscontrol/Makefile
+2-21 files

OpenBSD/src vf2g3TJlib/libcrypto/pkcs12 p12_npas.c

   PKCS#12: fix erroneous error check in PKCS12_newpass()

   This is an error I introduced in a refactoring two years ago in r1.20.
   This means that nothing uses this...

   From Frank Denis via logan
VersionDeltaFile
1.29+3-3lib/libcrypto/pkcs12/p12_npas.c
+3-31 files

OpenBSD/ports mhVf62qmail/offlineimap Makefile distinfo, mail/offlineimap/patches patch-setup_py

   update to offlineimap-8.0.2
VersionDeltaFile
1.77+11-10mail/offlineimap/Makefile
1.49+2-2mail/offlineimap/distinfo
1.3+0-0mail/offlineimap/patches/patch-setup_py
+13-123 files

OpenBSD/src 5uFYuYzsys/scsi cd.c sd.c

   remove unneeded ufs/ffs/fs.h includes

   added for BBSIZE and SBSIZE which are no longer used
VersionDeltaFile
1.268+1-4sys/scsi/cd.c
1.342+1-3sys/scsi/sd.c
+2-72 files

OpenBSD/ports f6T8dGGdevel/py-trove-classifiers distinfo Makefile

   update to py3-trove-classifiers-2026.5.7.17
VersionDeltaFile
1.34+2-2devel/py-trove-classifiers/distinfo
1.37+1-1devel/py-trove-classifiers/Makefile
+3-32 files

OpenBSD/ports gLSIKAfdevel/py-tz distinfo Makefile

   update to py3-tz-2026.2
VersionDeltaFile
1.54+2-2devel/py-tz/distinfo
1.86+1-1devel/py-tz/Makefile
+3-32 files

OpenBSD/src 151piwYlib/libcrypto/sha sha256.c

   Use uint32_t instead of SHA_LONG in the SHA-256 code.

   This is more readable and we already have a compile time assert that they
   are the same size.

   ok tb@
VersionDeltaFile
1.38+22-22lib/libcrypto/sha/sha256.c
+22-221 files