OpenBSD/ports qGyba9xsysutils/login_duo Makefile, sysutils/login_duo/patches patch-lib_https_c

   login_duo: add patch for upcoming removal of ASN1_STRING_data()

   ok jturner (maintainer)

   https://github.com/openssl/openssl/issues/29117
   https://github.com/openssl/openssl/pull/29149
VersionDeltaFile
1.9+19-0sysutils/login_duo/patches/patch-lib_https_c
1.44+1-0sysutils/login_duo/Makefile
+20-02 files

OpenBSD/ports Devh91Zdevel/fossil Makefile, devel/fossil/patches patch-src_http_ssl_c

   fossil: pull in upstreamed patch for opaque ASN1_STRING

   ok jturner (maintainer)

   https://github.com/openssl/openssl/issues/29117
   https://fossil-scm.org/home/info/0d239b52b0db10be
VersionDeltaFile
1.1+22-0devel/fossil/patches/patch-src_http_ssl_c
1.97+1-0devel/fossil/Makefile
+23-02 files

OpenBSD/ports wFsISIVaudio Makefile

   Link audio/siosw to the build.
VersionDeltaFile
1.519+1-0audio/Makefile
+1-01 files

OpenBSD/ports YCYGFUHaudio/siosw Makefile distinfo, audio/siosw/pkg PLIST DESCR

   Initial revision
VersionDeltaFile
1.1+17-0audio/siosw/Makefile
1.1+2-0audio/siosw/distinfo
1.1+1-0audio/siosw/pkg/PLIST
1.1+1-0audio/siosw/pkg/DESCR
1.1.1.1+0-0audio/siosw/pkg/DESCR
1.1.1.1+0-0audio/siosw/Makefile
+21-02 files not shown
+21-08 files

OpenBSD/src A4rWnFKusr.sbin/vmd vm.c

   Fix vmd reboots broken by my pause barrier changes.

   Reported by bluhm@.

   Long story is vmd has some complexity in how the decision to "reboot"
   a vm process is made. The pause barrier diff clobbered a return
   value that bubbled up to a value passed to exit(3) and picked up
   by the parent vmd process (the "vmm" process) that determines if a
   process exit should result in relaunching the vm process or not.

   For now, just stop clobbering the value and don't report the error
   returned by pthread_barrier_destroy(3).
VersionDeltaFile
1.122+3-4usr.sbin/vmd/vm.c
+3-41 files

OpenBSD/ports JG76jg6devel/kf5/khtml Makefile, devel/kf5/khtml/patches patch-src_html_kopenssl_cpp patch-src_html_kopenssl_h

   khtml: replace K_ASN1_STRING_data() with K_ASN1_STRING_get0_data()
VersionDeltaFile
1.5+32-9devel/kf5/khtml/patches/patch-src_html_kopenssl_cpp
1.1+15-0devel/kf5/khtml/patches/patch-src_html_kopenssl_h
1.20+1-0devel/kf5/khtml/Makefile
+48-93 files

OpenBSD/ports qhPjvq3audio/portmidi Makefile distinfo, audio/portmidi/patches patch-CMakeLists_txt patch-pm_common_CMakeLists_txt

   update to portmidi-2.0.8

   ok sthen@
VersionDeltaFile
1.10+1-3audio/portmidi/Makefile
1.4+2-2audio/portmidi/distinfo
1.5+2-2audio/portmidi/patches/patch-CMakeLists_txt
1.5+1-1audio/portmidi/patches/patch-pm_common_CMakeLists_txt
+6-84 files

OpenBSD/src UKaYGSOlib/libcrypto/asn1 a_type.c p8_pkey.c, lib/libcrypto/ts ts_rsp_verify.c ts_lib.c

   Replace trivial uses of ASN1_STRING_data()

   Almost entirely mechanical diff that ensures that for read-only accesses
   we use the const correct ASN1_STRING_get0_data(). Arguably, in most
   places the better fix would be to reach into ASN1_STRING but then we
   have to think and bikeshed...

   ok beck kenjiro
VersionDeltaFile
1.29+4-4lib/libcrypto/asn1/a_type.c
1.32+3-3lib/libcrypto/ts/ts_rsp_verify.c
1.26+2-2lib/libcrypto/asn1/p8_pkey.c
1.16+2-2lib/libcrypto/ts/ts_lib.c
1.16+2-2lib/libcrypto/ts/ts_verify_ctx.c
+13-135 files

OpenBSD/src XWcve9Klib/libcrypto/bn bn.h bn_local.h, lib/libcrypto/ec ec_internal.h

   libcrypto: make most of the BN_* macro pollution internal

   This is a first sweep of reducing the number of terribly named macros
   in bn.h More can go away. Those we need internally go to bn_local.h.
   Annoyingly bn_internal.h uses some of them, so it includes bn_local.h
   now. This can be cleaned up later.

   ok jsing kenjiro
VersionDeltaFile
1.84+1-26lib/libcrypto/bn/bn.h
1.61+15-1lib/libcrypto/bn/bn_local.h
1.25+9-1lib/libcrypto/bn/bn_convert.c
1.3+2-2lib/libcrypto/ec/ec_internal.h
1.21+2-1lib/libcrypto/bn/bn_internal.h
+29-315 files

OpenBSD/src JVuy1Uwregress/lib/libcrypto/bn bn_word.c

   bn_word.c: include bn_local.h in preparation for an upcoming change
VersionDeltaFile
1.3+3-1regress/lib/libcrypto/bn/bn_word.c
+3-11 files

OpenBSD/ports 1UXbgkesecurity/qca-qt6 Makefile

   qca-qt6: another REVISION bump that didn't want to be committed
VersionDeltaFile
1.6+1-0security/qca-qt6/Makefile
+1-01 files

OpenBSD/ports hOqNv4Rsecurity/qca-qt6/patches patch-plugins_qca-ossl_qca-ossl_cpp

   qca-qt6: convert to opaque ASN1_STRING

   prompted by https://github.com/openssl/openssl/issues/29117
VersionDeltaFile
1.3+78-2security/qca-qt6/patches/patch-plugins_qca-ossl_qca-ossl_cpp
+78-21 files

OpenBSD/ports lc5AtZ7security/qca-qt5 Makefile, security/qca-qt5/patches patch-plugins_qca-ossl_qca-ossl_cpp

   qca-qt5: convert to opaque ASN1_STRING

   prompted by https://github.com/openssl/openssl/issues/29117
VersionDeltaFile
1.12+78-2security/qca-qt5/patches/patch-plugins_qca-ossl_qca-ossl_cpp
1.22+1-0security/qca-qt5/Makefile
+79-22 files

OpenBSD/ports GBMHpmGdevel/kf5/kdelibs4support Makefile, devel/kf5/kdelibs4support/patches patch-src_kssl_kopenssl_cpp patch-src_kssl_ksslcertificate_cpp

   kdelibs4support: convert the K_ version of the q_ horror

   This again uses accessors and replaces K_ASN1_STRING_data() with
   K_ASN1_STRING_get0_data().
VersionDeltaFile
1.8+32-0devel/kf5/kdelibs4support/patches/patch-src_kssl_kopenssl_cpp
1.5+24-1devel/kf5/kdelibs4support/patches/patch-src_kssl_ksslcertificate_cpp
1.3+12-0devel/kf5/kdelibs4support/patches/patch-src_kssl_kopenssl_h
1.40+1-1devel/kf5/kdelibs4support/Makefile
+69-24 files

OpenBSD/ports swepIvMx11/qt6/qtbase Makefile

   qt6/qtbase: another missed bump
VersionDeltaFile
1.48+1-1x11/qt6/qtbase/Makefile
+1-11 files

OpenBSD/ports Q5tjWdJx11/qt6/qtbase/patches patch-src_plugins_tls_openssl_qx509_openssl_cpp

   qt6/qtbase: convert to opaque ASN1_STRING

   This is a bit simpler for qt6 than for qt5 since some code disappeared.
VersionDeltaFile
1.9+37-0x11/qt6/qtbase/patches/patch-src_plugins_tls_openssl_qx509_openssl_cpp
+37-01 files

OpenBSD/ports 8lcwcjJx11/qt5/qtbase Makefile, x11/qt5/qtbase/patches patch-src_network_ssl_qsslsocket_openssl_symbols_cpp patch-src_network_ssl_qsslcertificate_openssl_cpp

   qt5/qtbase: convert to opaque ASN1_STRING

   Similar to what was done to the bundled qt4 in wkhtmltopdf: const correct
   q_ASN1_STRING_length(), add _type() and use them where needed.

   Prompted by https://github.com/openssl/openssl/issues/29117
VersionDeltaFile
1.21+47-3x11/qt5/qtbase/patches/patch-src_network_ssl_qsslsocket_openssl_symbols_cpp
1.10+40-9x11/qt5/qtbase/patches/patch-src_network_ssl_qsslcertificate_openssl_cpp
1.18+11-1x11/qt5/qtbase/patches/patch-src_network_ssl_qsslsocket_openssl_symbols_p_h
1.80+2-0x11/qt5/qtbase/Makefile
+100-134 files

OpenBSD/ports 6Mz8gxPtextproc/wkhtmltopdf Makefile

   wkhtmltopdf: forgotten bump
VersionDeltaFile
1.36+1-1textproc/wkhtmltopdf/Makefile
+1-11 files

OpenBSD/ports HE6cDv6textproc/wkhtmltopdf/patches patch-qt_src_network_ssl_qsslsocket_openssl_symbols_cpp patch-qt_src_network_ssl_qsslcertificate_cpp

   wkhtmltopdf: convert to opaque ASN1_STRINGs

   This const corrects the q_ version of ASN1_STRING_length(), replaces
   q_ASN1_STRING_data() with the _get0_ version, adds q_ASN1_STRING_type()
   and uses those accessors instead of manual accesses.

   Prompted by https://github.com/openssl/openssl/issues/29117
VersionDeltaFile
1.10+57-11textproc/wkhtmltopdf/patches/patch-qt_src_network_ssl_qsslsocket_openssl_symbols_cpp
1.6+25-0textproc/wkhtmltopdf/patches/patch-qt_src_network_ssl_qsslcertificate_cpp
1.9+18-6textproc/wkhtmltopdf/patches/patch-qt_src_network_ssl_qsslsocket_openssl_symbols_p_h
+100-173 files

OpenBSD/ports dfScvLHx11/qt6/qtwebengine Makefile, x11/qt6/qtwebengine/pkg PLIST

   Use bundled icu to unbreak with upcoming ICU 78 update.
   (matches what the chromium ports do)
VersionDeltaFile
1.34+5-4x11/qt6/qtwebengine/Makefile
1.6+1-0x11/qt6/qtwebengine/pkg/PLIST
+6-42 files

OpenBSD/ports RsNlDr5net/dico/patches patch-modules_python_python_c

   Another fallout when using gcc15.

   net/dico uses the wrong initalisation function for the PyTypeObject.
   This diff is equal to the one debian uses.

   ok bentley@
VersionDeltaFile
1.1+23-0net/dico/patches/patch-modules_python_python_c
+23-01 files

OpenBSD/src ero4Ke4share/man/man5 pf.conf.5

   s/State Limiter/&s/ in .Ss (linked with the plural from other text, and
   matches "Source Limiters). From Atanas Vladimirov.
VersionDeltaFile
1.606+3-3share/man/man5/pf.conf.5
+3-31 files

OpenBSD/src DTHK919regress/usr.bin/ssh/unittests/test_helper test_helper.c test_helper.h

   ASSERT_DOUBLE_* test helpers
VersionDeltaFile
1.15+42-1regress/usr.bin/ssh/unittests/test_helper/test_helper.c
1.11+17-1regress/usr.bin/ssh/unittests/test_helper/test_helper.h
+59-22 files

OpenBSD/src vkAjhlZsys/dev/pci/drm/amd/display/amdgpu_dm amdgpu_dm.c

   disable Panel Self Refresh (PSR) in amdgpu

   PSR is a power saving feature, previously enabled for
   DCN >= 3.1.2 (YELLOW CARP / Rembrandt).

   Disabling PSR avoids a problem encountered by robert@ on a
   ThinkPad X13 Gen 6 (21RM) with GC 11.5.2, DCN 3.5.0.
   If a reboot was attempted after X started, the machine would hang.

   robert has patiently tried many PSR related patches, but nothing
   besides disabling PSR entirely has helped.
VersionDeltaFile
1.190+9-0sys/dev/pci/drm/amd/display/amdgpu_dm/amdgpu_dm.c
+9-01 files

OpenBSD/ports pgAl5Kkdatabases/pgbouncer distinfo Makefile

   databases/pgbouncer: security update to 1.25.1

   see https://www.pgbouncer.org/2025/12/pgbouncer-1.25-1
   fixes CVE-2025-12819 - needs a combination of non-default params, so not that risky.
VersionDeltaFile
1.24+2-2databases/pgbouncer/distinfo
1.47+1-1databases/pgbouncer/Makefile
+3-32 files

OpenBSD/src AaS357tusr.sbin/rpki-client filemode.c

   rpki-client: adjust doc comment of rtype_from_der() with reality
VersionDeltaFile
1.73+2-2usr.sbin/rpki-client/filemode.c
+2-21 files

OpenBSD/src CFW8bLHregress/usr.bin/ssh multiplex.sh

   Shell compatibility fix.
VersionDeltaFile
1.39+2-2regress/usr.bin/ssh/multiplex.sh
+2-21 files

OpenBSD/ports QFW297Adevel/cgdb/patches patch-config_readline_check_version_m4, devel/sdlmm/patches patch-configure

   Fix configure script to prevent -Wimplicit-int errors

   This replaces
        main(){return(0);}
   with the proper form of
        int main(void){return(0);}

   OK tb@
VersionDeltaFile
1.5+12-2devel/smpeg/patches/patch-configure
1.3+12-2devel/sdlmm/patches/patch-configure
1.3+9-0textproc/clo++/patches/patch-configure
1.3+9-0devel/cgdb/patches/patch-config_readline_check_version_m4
+42-44 files

OpenBSD/ports wH86kpHnet/transmission Makefile distinfo, net/transmission/pkg PLIST-main

   Update to transmission-4.1.0beta4.

   from Josh Grosse, maintainer
VersionDeltaFile
1.155+5-4net/transmission/Makefile
1.60+2-2net/transmission/distinfo
1.34+2-0net/transmission/pkg/PLIST-main
+9-63 files

OpenBSD/ports xyo0iwdx11/gnome/ghex Makefile, x11/gnome/msgraph Makefile

   Needs C11 to compile, switch to ports-gcc.
   OK aja
VersionDeltaFile
1.108+4-0x11/gnome/ghex/Makefile
1.6+4-0x11/gnome/msgraph/Makefile
+8-02 files