OpenBSD/src ADzWxhRusr.sbin/iscsid vscsi.c

   In the vscsi_callback() handle ISCSI_SCSI_STAT_CHCK_COND more carefully.

   Especially the embedded sense data needs to be extracted respecting the
   real buffer length. Make sure at least 2 bytes are availabe for the lenght
   and also check that the resulting len is not bigger then the buffer
   itself.

   Reported by Frank Denis
   OK deraadt@
VersionDeltaFile
1.19+6-3usr.sbin/iscsid/vscsi.c
+6-31 files

OpenBSD/ports wVPbrxPnet/upterm distinfo modules.inc

   Update to upterm 0.24.0.
VersionDeltaFile
1.4+266-170net/upterm/distinfo
1.4+100-53net/upterm/modules.inc
1.4+1-1net/upterm/Makefile
+367-2243 files

OpenBSD/ports dqG0qplsysutils/unbound_exporter distinfo modules.inc

   Update to unbound_exporter 0.6.0.
VersionDeltaFile
1.3+50-42sysutils/unbound_exporter/distinfo
1.3+15-13sysutils/unbound_exporter/modules.inc
1.3+1-1sysutils/unbound_exporter/Makefile
+66-563 files

OpenBSD/ports 2EZCqGXwww/ungoogled-chromium distinfo Makefile, www/ungoogled-chromium/patches patch-content_browser_renderer_host_render_process_host_impl_cc patch-content_public_common_content_features_cc

   update to 148.0.7778.178
VersionDeltaFile
1.149+6-6www/ungoogled-chromium/distinfo
1.47+3-3www/ungoogled-chromium/patches/patch-content_browser_renderer_host_render_process_host_impl_cc
1.44+2-2www/ungoogled-chromium/patches/patch-content_public_common_content_features_cc
1.231+1-2www/ungoogled-chromium/Makefile
+12-134 files

OpenBSD/ports lefVYCvnet/tor distinfo Makefile

   Update to tor 0.4.9.8

   ok sthen@
VersionDeltaFile
1.143.2.1+2-2net/tor/distinfo
1.178.2.1+1-1net/tor/Makefile
+3-32 files

OpenBSD/src JP4fusRusr.sbin/bgpd rde_rib.c

   Also copy aspa_state and aspa_generation in path_copy() this way
   the linked db copy of the path gets the right ASPA cache data.

   OK tb@
VersionDeltaFile
1.295+4-1usr.sbin/bgpd/rde_rib.c
+4-11 files

OpenBSD/ports cpZnoFCmultimedia/libheif Makefile distinfo, multimedia/libheif/pkg PLIST

   multimedia/libheif: Update to 1.22.0

   From Brad, thanks
VersionDeltaFile
1.24+3-3multimedia/libheif/Makefile
1.16+2-2multimedia/libheif/distinfo
1.11+2-0multimedia/libheif/pkg/PLIST
+7-53 files

OpenBSD/ports 0fMawaHwww/nextcloud/33 distinfo Makefile, www/nextcloud/33/pkg PLIST

   Update nextcloud to 33.0.3
VersionDeltaFile
1.3+755-1,093www/nextcloud/33/pkg/PLIST
1.3+2-2www/nextcloud/33/distinfo
1.3+1-1www/nextcloud/33/Makefile
+758-1,0963 files

OpenBSD/ports 7ISFpK5www/nextcloud/32 distinfo Makefile, www/nextcloud/32/pkg PLIST

   Update nextcloud to 32.0.9
VersionDeltaFile
1.8+517-1,050www/nextcloud/32/pkg/PLIST
1.8+2-2www/nextcloud/32/distinfo
1.10+1-1www/nextcloud/32/Makefile
+520-1,0533 files

OpenBSD/src 6Sx8ztqdistrib/sets/lists/man mi

   sync
VersionDeltaFile
1.1770+0-4distrib/sets/lists/man/mi
+0-41 files

OpenBSD/src VD3p1mQusr.sbin/bgpd rde_update.c rde.h

   Introduce a force_update flag to force pend_prefix_add() calls
   in adjout_prefix_update().

   peer_dump() can be called with a preloaded Adj-RIB-Out and in that case
   the code needs to force updates out. This is done instead of walking the
   table twice -- once with peer_dump() and then with peer_blast().
   Using the force_update flag there ensures that all entries are properly
   sent to the peer.

   OK tb@
VersionDeltaFile
1.196+17-12usr.sbin/bgpd/rde_update.c
1.350+10-11usr.sbin/bgpd/rde.h
1.73+10-9usr.sbin/bgpd/rde_peer.c
1.19+5-2usr.sbin/bgpd/rde_adjout.c
+42-344 files

OpenBSD/ports 1mLACfNdevel/codex distinfo Makefile, devel/codex/patches patch-codex-rs_Cargo_toml patch-codex-rs_core_src_config_mod_rs

   devel/codex: update to 0.132.0
VersionDeltaFile
1.18+3-3devel/codex/patches/patch-codex-rs_Cargo_toml
1.20+2-2devel/codex/distinfo
1.20+1-1devel/codex/Makefile
1.20+1-1devel/codex/patches/patch-codex-rs_core_src_config_mod_rs
+7-74 files

OpenBSD/ports WHaSRhTnet/rabbitmq Makefile distinfo, net/rabbitmq/pkg PLIST

   net/rabbitmq: Update to 4.3.1
VersionDeltaFile
1.88+5-5net/rabbitmq/Makefile
1.41+2-2net/rabbitmq/distinfo
1.43+1-1net/rabbitmq/pkg/PLIST
+8-83 files

OpenBSD/ports PzgM8jPsecurity/vaultwarden distinfo crates.inc, security/vaultwarden/patches patch-modcargo-crates_webauthn-attestation-ca-0_5_5_build_rs patch-modcargo-crates_webauthn-attestation-ca-0_5_4_build_rs

   Security update to vaultwarden-1.36.0

   Contains security fixes for:
   - SSO Login CSRF
   - User/Organization Enumeration
   - SSO existing-user binding
   - SSRF via Icon Endpoint
   - Some crate's updated and other minor security enhancements

   Changes:
   https://github.com/dani-garcia/vaultwarden/releases/tag/1.35.8
   https://github.com/dani-garcia/vaultwarden/releases/tag/1.36.0
VersionDeltaFile
1.35.2.1+162-122security/vaultwarden/distinfo
1.32.2.1+80-60security/vaultwarden/crates.inc
1.55.2.1+5-5security/vaultwarden/Makefile
1.1.2.1+0-0security/vaultwarden/patches/patch-modcargo-crates_webauthn-attestation-ca-0_5_5_build_rs
1.1.4.1+0-0security/vaultwarden/patches/patch-modcargo-crates_webauthn-attestation-ca-0_5_4_build_rs
1.1.4.1+0-0security/vaultwarden/patches/patch-modcargo-crates_webauthn-rs-core-0_5_4_build_rs
+247-1877 files not shown
+247-18713 files

OpenBSD/ports JqgDYeGwww/vaultwarden-web distinfo Makefile, www/vaultwarden-web/pkg PLIST

   Update to vaultwarden-web-2026.4.1

   Changes:
   https://github.com/dani-garcia/bw_web_builds/releases/tag/v2026.3.1
   https://github.com/dani-garcia/bw_web_builds/releases/tag/v2026.4.1
VersionDeltaFile
1.23.2.1+54-71www/vaultwarden-web/pkg/PLIST
1.23.2.1+2-2www/vaultwarden-web/distinfo
1.25.2.1+1-1www/vaultwarden-web/Makefile
+57-743 files

OpenBSD/ports YXM8Qunnet/samba Makefile distinfo

   Update to samba-4.24.2

   Changes: https://www.samba.org/samba/history/samba-4.24.2.html
VersionDeltaFile
1.372.2.1+3-3net/samba/Makefile
1.138.2.1+2-2net/samba/distinfo
+5-52 files

OpenBSD/ports Rd1x2wMwww/py-flask-caching Makefile

   add a note about long delays in some tests if redis is already running
VersionDeltaFile
1.8+1-0www/py-flask-caching/Makefile
+1-01 files

OpenBSD/ports cMoucY2mail/neomutt Makefile

   neomutt docs are generated with, in order of preference, w3m / lynx / elinks.
   change the BDEP to w3m so that builds are consistent.
VersionDeltaFile
1.112+4-3mail/neomutt/Makefile
+4-31 files

OpenBSD/ports dpnfUF6net/libunbound distinfo Makefile

   update to libunbound-1.25.1
VersionDeltaFile
1.35.2.1+2-2net/libunbound/distinfo
1.42.2.1+1-1net/libunbound/Makefile
+3-32 files

OpenBSD/ports wmhQrJ7net/libunbound distinfo Makefile

   update to libunbound-1.25.1
VersionDeltaFile
1.37+2-2net/libunbound/distinfo
1.44+1-1net/libunbound/Makefile
+3-32 files

OpenBSD/ports 0jYMEFGwww/py-flask-caching Makefile

   fix MODPY_PYBUILD, add missing tdeps
VersionDeltaFile
1.7+7-4www/py-flask-caching/Makefile
+7-41 files

OpenBSD/ports oapAdg0databases/py-redis Makefile

   add missing dep on py-jwt
VersionDeltaFile
1.50.2.1+2-0databases/py-redis/Makefile
+2-01 files

OpenBSD/ports Zd3gMLadatabases/py-redis Makefile

   add missing dep on py-jwt
VersionDeltaFile
1.51+2-0databases/py-redis/Makefile
+2-01 files

OpenBSD/ports eG47D1Qdevel/py-cachelib Makefile

   fix MODPY_PYBUILD
VersionDeltaFile
1.7+2-2devel/py-cachelib/Makefile
+2-21 files

OpenBSD/ports NSgR5aWx11/qt6/qtwebengine/patches patch-src_3rdparty_chromium_third_party_blink_renderer_platform_runtime_enabled_features_json5 patch-configure_cmake

   Update Qt6 to Qt6.11.1

   Feedback from jtt@ (pyside)
VersionDeltaFile
1.8+8-8x11/qt6/qtwebengine/patches/patch-src_3rdparty_chromium_third_party_blink_renderer_platform_runtime_enabled_features_json5
1.10+8-8x11/qt6/qtwebengine/patches/patch-configure_cmake
1.7+6-6x11/qt6/qtwebengine/patches/patch-src_3rdparty_chromium_net_BUILD_gn
1.3+5-5x11/qt6/qtwebengine/patches/patch-cmake_QtToolchainHelpers_cmake
1.8+5-5x11/qt6/qtwebengine/patches/patch-src_3rdparty_chromium_third_party_angle_src_libANGLE_Display_cpp
1.12+3-3x11/qt6/qtwebengine/patches/patch-cmake_Functions_cmake
+35-3570 files not shown
+163-15676 files

OpenBSD/ports wN3NB0Rmeta/tor-browser Makefile, www/tor-browser Makefile.inc

   Tor Browser: update to 15.0.14

   And MFC "add DormantCanceledByStartup 1 to torrc-defaults"
VersionDeltaFile
1.118.2.1+6-6www/tor-browser/browser/distinfo
1.67.2.1+2-2www/tor-browser/noscript/distinfo
1.124.2.1+2-2meta/tor-browser/Makefile
1.197.2.1+1-1www/tor-browser/browser/Makefile
1.74.2.1+1-1www/tor-browser/noscript/Makefile
1.121.2.1+1-1www/tor-browser/Makefile.inc
+13-131 files not shown
+14-137 files

OpenBSD/ports ej8Ycg5meta/tor-browser Makefile, www/tor-browser Makefile.inc

   Tor Browser: update to 15.0.14
VersionDeltaFile
1.122+6-6www/tor-browser/browser/distinfo
1.128+2-2meta/tor-browser/Makefile
1.202+1-2www/tor-browser/browser/Makefile
1.125+1-1www/tor-browser/Makefile.inc
+10-114 files

OpenBSD/src t46PReyusr.bin/sndiod dev.c

   sndiod: Allow control slots to have NULL opt pointer

   This case is not encoutered yet, but to control non-audio properties
   the control slots must work with no opt structure.
VersionDeltaFile
1.134+8-9usr.bin/sndiod/dev.c
+8-91 files

OpenBSD/ports XWhdhnsmisc/memcached distinfo Makefile, misc/memcached/patches patch-configure patch-doc_Makefile

   update to memcached-1.6.42
VersionDeltaFile
1.17.4.1+6-6misc/memcached/patches/patch-configure
1.3.10.1+2-2misc/memcached/patches/patch-doc_Makefile
1.35.2.1+2-2misc/memcached/distinfo
1.57.2.1+1-1misc/memcached/Makefile
1.21.4.1+1-1misc/memcached/patches/patch-memcached_c
+12-125 files

OpenBSD/ports ppFVgnbmisc/memcached distinfo Makefile, misc/memcached/patches patch-memcached_c patch-doc_Makefile

   update to memcached-1.6.42, ok giovanni

   various security related fixes in
   https://github.com/memcached/memcached/wiki/ReleaseNotes1642

   others:
   https://github.com/memcached/memcached/wiki/ReleaseNotes1641
   https://github.com/memcached/memcached/wiki/ReleaseNotes1640
VersionDeltaFile
1.36+2-2misc/memcached/distinfo
1.23+1-1misc/memcached/patches/patch-memcached_c
1.58+1-1misc/memcached/Makefile
1.5+1-1misc/memcached/patches/patch-doc_Makefile
+5-54 files