OpenBSD/ports 3PPWC4T — lang/php/8.5 Makefile distinfo

   update to php-8.5.12
VersionDeltaFile
1.5.2.7+2-2lang/php/8.5/distinfo
1.9.2.7+1-1lang/php/8.5/Makefile
+3-32 files

OpenBSD/ports 3DvS4Ib — lang/php/8.4 Makefile distinfo

   update to php-8.4.27
VersionDeltaFile
1.19.2.7+2-2lang/php/8.4/distinfo
1.36.2.7+1-1lang/php/8.4/Makefile
+3-32 files

OpenBSD/ports qOYG7Lz — lang/php/8.3 Makefile distinfo

   update to php-8.3.36
VersionDeltaFile
1.30.2.4+2-2lang/php/8.3/distinfo
1.56.2.4+1-1lang/php/8.3/Makefile
+3-32 files

OpenBSD/ports qSJ6fI7 — lang/php/8.2 Makefile distinfo

   update to php-8.2.35
VersionDeltaFile
1.31.2.3+2-2lang/php/8.2/distinfo
1.62.2.3+1-1lang/php/8.2/Makefile
+3-32 files

OpenBSD/ports xUgsxbw — lang/php/8.5 distinfo Makefile

   update to php-8.5.12
VersionDeltaFile
1.11.2.1+2-2lang/php/8.5/distinfo
1.19.2.2+2-2lang/php/8.5/Makefile
+4-42 files

OpenBSD/ports XtGWv6R — lang/php/8.4 distinfo Makefile

   update to php-8.4.27
VersionDeltaFile
1.25.2.1+2-2lang/php/8.4/distinfo
1.45.2.2+2-2lang/php/8.4/Makefile
+4-42 files

OpenBSD/ports eE1xWlQ — lang/php/8.3 distinfo Makefile

   update to php-8.3.36
VersionDeltaFile
1.33.2.1+2-2lang/php/8.3/distinfo
1.63.2.2+2-2lang/php/8.3/Makefile
+4-42 files

OpenBSD/ports wc798Yz — lang/php/8.5 distinfo Makefile

   update to php-8.5.12
VersionDeltaFile
1.12+2-2lang/php/8.5/distinfo
1.23+2-2lang/php/8.5/Makefile
+4-42 files

OpenBSD/ports 5bwRpwe — lang/php/8.4 Makefile distinfo

   update to php-8.4.27
VersionDeltaFile
1.26+2-2lang/php/8.4/distinfo
1.50+1-2lang/php/8.4/Makefile
+3-42 files

OpenBSD/ports iTphIza — lang/php/8.3 distinfo Makefile

   update to php-8.3.36
VersionDeltaFile
1.69+2-3lang/php/8.3/Makefile
1.34+2-2lang/php/8.3/distinfo
+4-52 files

OpenBSD/src U7QZ2Ne — usr.bin/tmux window.c window-copy.c

   Get the pane's bufferevent when needed for replies rather than caching
   it and end up using it after free. GitHub issue 5785 from Alejandro
   Pacheco.
VersionDeltaFile
1.280+20-9usr.bin/tmux/input.c
1.1467+2-3usr.bin/tmux/tmux.h
1.389+2-2usr.bin/tmux/window.c
1.442+2-2usr.bin/tmux/window-copy.c
+26-164 files

OpenBSD/src UD120AD — usr.sbin/unbound/services mesh.c outside_network.c, usr.sbin/unbound/util/data dname.c msgparse.c

   merge unbound 1.26.2
VersionDeltaFile
1.17+40-21usr.sbin/unbound/util/data/msgparse.c
1.35+35-21usr.sbin/unbound/services/authzone.c
1.11+55-0usr.sbin/unbound/util/data/dname.c
1.37+45-0usr.sbin/unbound/services/outside_network.c
1.37+30-10usr.sbin/unbound/services/mesh.c
1.32+16-12usr.sbin/unbound/validator/validator.c
+221-6415 files not shown
+299-9821 files

OpenBSD/ports NLrmkl0 — graphics/libansilove Makefile distinfo

   Update libansilove to 1.4.3.
VersionDeltaFile
1.25+2-2graphics/libansilove/distinfo
1.29+1-1graphics/libansilove/Makefile
+3-32 files

OpenBSD/src 9cOQzpy — usr.sbin/unbound/services mesh.c outside_network.c, usr.sbin/unbound/testcode unitdname.c

   import unbound 1.26.2, ok phessler

   CVE-2026-50106, Possible insecure NXDOMAIN for non-existing
   records under a configured island trust anchor underneath an
   insecure parent.

   CVE-2026-96405, Aggregate DNS name chained pointer decompression
   work leads to degradation of service.

   CVE-2026-109125, Possible cache poisoning vulnerability via
   a cache side-channel exposed by 'unwanted-reply-threshold'.

   CVE-2026-35501, Bypass of a configured island trust anchor
   underneath an insecure parent from an attacker-controlled NSEC
   record.
VersionDeltaFile
1.1.1.17+40-21usr.sbin/unbound/util/data/msgparse.c
1.1.1.29+35-21usr.sbin/unbound/services/authzone.c
1.1.1.12+55-0usr.sbin/unbound/util/data/dname.c
1.1.1.5+50-0usr.sbin/unbound/testcode/unitdname.c
1.1.1.35+45-0usr.sbin/unbound/services/outside_network.c
1.1.1.35+30-10usr.sbin/unbound/services/mesh.c
+255-5217 files not shown
+353-9823 files

OpenBSD/ports zDJy0AD — net/isc-bind Makefile distinfo, net/isc-bind/patches patch-bin_dig_host_c patch-bin_dig_nslookup_c

   update to isc-bind-9.20.30
VersionDeltaFile
1.28+2-2net/isc-bind/patches/patch-bin_dig_nslookup_c
1.45+2-2net/isc-bind/patches/patch-bin_dig_dig_c
1.152+2-2net/isc-bind/distinfo
1.226+1-2net/isc-bind/Makefile
1.27+1-1net/isc-bind/patches/patch-bin_dig_host_c
1.48+0-1net/isc-bind/pkg/PLIST
+8-101 files not shown
+8-107 files

OpenBSD/src 4gTq4FO — sys/dev/pci/drm/i915 i915_driver.c

   skip backlight init when there is no display controller

   Avoids a panic on discrete Intel graphics with no display, when
   iterating over connectors to attach a backlight property.
   Connector state is only initialised when there is a display controller.

   reported by obugs at usrx11
VersionDeltaFile
1.38+10-0sys/dev/pci/drm/i915/i915_driver.c
+10-01 files

OpenBSD/ports lfrTAJd — net/liboping Makefile, net/liboping/patches patch-src_oping_c

   net/liboping: declare that {n,}oping binaries are setuid via permit_setugid
VersionDeltaFile
1.3+18-3net/liboping/patches/patch-src_oping_c
1.13+1-1net/liboping/Makefile
+19-42 files

OpenBSD/ports okpqTtL — devel/py-pip Makefile distinfo, devel/py-pip/pkg PLIST

   update to py3-pip-26.2.2
VersionDeltaFile
1.42.2.1+8-0devel/py-pip/pkg/PLIST
1.51.2.1+2-2devel/py-pip/distinfo
1.85.2.1+1-1devel/py-pip/Makefile
+11-33 files

OpenBSD/ports 8u4w4Lp — devel/uv Makefile crates.inc

   update to uv-0.13.4, based on a 0.13.3 diff from maintainer

   this updates webpki-root-certs
VersionDeltaFile
1.42+66-94devel/uv/distinfo
1.41+32-46devel/uv/crates.inc
1.46+1-1devel/uv/Makefile
+99-1413 files

OpenBSD/ports ph8XZGx — www/py-multidict Makefile

   BDEP on cython, found by aja
VersionDeltaFile
1.32+1-0www/py-multidict/Makefile
+1-01 files

OpenBSD/ports 0dAd2Lh — net/monitoring-plugins/patches patch-plugins_check_snmp_c

   remove unused net-snmp #include, which has gone away in 5.10.x prereleases
VersionDeltaFile
1.3+11-3net/monitoring-plugins/patches/patch-plugins_check_snmp_c
+11-31 files

OpenBSD/ports DARuKAX — lang/gcc/16 Makefile

   lang/gcc/16: enforce use of /bin/sh as SHELL and CONFIG_SHELL
VersionDeltaFile
1.33+2-0lang/gcc/16/Makefile
+2-01 files

OpenBSD/ports l0Zxo6g — devel/py-pip Makefile distinfo, devel/py-pip/pkg PLIST

   update to py3-pip-26.2.2
   pip includes a vendored copy of certifi (which includes the roots
   directly, rather than referring to cert.pem), so needs patching for
   the "key=4" CA issue
VersionDeltaFile
1.43+8-0devel/py-pip/pkg/PLIST
1.52+2-2devel/py-pip/distinfo
1.86+1-1devel/py-pip/Makefile
+11-33 files

OpenBSD/ports VPCVxZu — sysutils/py-pipx Makefile distinfo

   update to py3-pipx-1.18.4
VersionDeltaFile
1.35+2-2sysutils/py-pipx/distinfo
1.43+1-1sysutils/py-pipx/Makefile
+3-32 files

OpenBSD/ports gEqjxTj — devel/py-certifi Makefile distinfo

   update to py3-certifi-2026.10.19

   (note that the certifi package on OpenBSD does *not* include its own
   certificate store, instead it redirects to /etc/ssl/cert.pem, still
   it seems likely some software may start pinning this)
VersionDeltaFile
1.32+2-2devel/py-certifi/distinfo
1.51+1-1devel/py-certifi/Makefile
+3-32 files

OpenBSD/ports ph61ehj — devel/py-setuptools Makefile distinfo

   update to py3-setuptools-84.2.1
VersionDeltaFile
1.27+2-2devel/py-setuptools/distinfo
1.66+1-1devel/py-setuptools/Makefile
+3-32 files

OpenBSD/src IxIKmLe — usr.bin/tmux tty.c

   Apply palette to underscore colour before checking for change, same as
   foreground and background.
VersionDeltaFile
1.495+4-1usr.bin/tmux/tty.c
+4-11 files

OpenBSD/ports p8LmGDc — devel/py-setuptools distinfo Makefile

   update to py3-setuptools-84.2.0
VersionDeltaFile
1.65+39-39devel/py-setuptools/Makefile
1.26+2-2devel/py-setuptools/distinfo
+41-412 files

OpenBSD/ports I9SOvBY — net/powerdns_recursor Makefile distinfo

   MFC update to powerdns-recursor-5.4.8
VersionDeltaFile
1.67.2.1+2-2net/powerdns_recursor/distinfo
1.79.2.1+1-1net/powerdns_recursor/Makefile
+3-32 files

OpenBSD/src HlUjgFD — usr.sbin/rpki-client parser.c

   rpki-client: use if (verbose) instead of if (verbose > 0) for consistency

   prompted by job
VersionDeltaFile
1.199+2-2usr.sbin/rpki-client/parser.c
+2-21 files