OpenBSD/src oTSICD8usr.sbin/vmd vm.c x86_mmio.c

   Clean up debug logging in vmd mmio code.

   Tuck stuff into DPRINTF macros that use log_debug.

   Discussed with mlarkin@
VersionDeltaFile
1.5+37-34usr.sbin/vmd/x86_mmio.c
1.132+1-3usr.sbin/vmd/vm.c
+38-372 files

OpenBSD/src BdeCNZuregress/lib/libcrypto/x509 name_constraints_test.c

   Add more name constraint tests.

   We have coverage already in the betterTLS stuff for much of the
   basics, but it does not cover email name constraints and some
   of the other corner cases.

   Cover a permitted subject email address, a hostname CN checked when
   the SAN carries only an email address, excluded DNS and email
   subtrees, and constraints carried by the trust anchor

   ok tb@ joshua@
VersionDeltaFile
1.3+176-3regress/lib/libcrypto/x509/name_constraints_test.c
+176-31 files

OpenBSD/src JYuuivGusr.sbin/acme-client parse.h parse.y

   Allow wildcards to be specified in alternate names in the configuration
   file.  This does not enable issuance of wildcard certificates except in
   limited circumstances where the ACME server does not require any challenges,
   such as when you've already validated control of the domain name with your
   CA and you're using an EAB key provided by the CA to link that to an
   ACME account.

   ok tb@, "fine by me" florian@
VersionDeltaFile
1.49+12-3usr.sbin/acme-client/parse.y
1.19+2-1usr.sbin/acme-client/parse.h
+14-42 files

OpenBSD/src yXWDUBrlib/libcrypto/x509 x509_constraints.c, regress/lib/libcrypto/x509 name_constraints_test.c

   Search the whole subject for email addresses and common names.

   The subject lookups started from the index left over from walking
   the subjectAltName, so a leaf without a SAN never had its first two
   subject entries examined and an emailAddress there escaped the
   name constraints check.

   Reported by Sina Gogani Khiabani.

   ok tb@ joshua@
VersionDeltaFile
1.2+98-17regress/lib/libcrypto/x509/name_constraints_test.c
1.36+10-7lib/libcrypto/x509/x509_constraints.c
+108-242 files

OpenBSD/ports pZALJevgames/vkquake distinfo Makefile, games/vkquake/patches patch-Quake_common_make

   Update to vkQuake 1.36.0. This switches to SDL3.

   Release Notes:
   https://github.com/Novum/vkQuake/releases/tag/1.36.0
VersionDeltaFile
1.8+8-7games/vkquake/patches/patch-Quake_common_make
1.22+3-3games/vkquake/Makefile
1.19+2-2games/vkquake/distinfo
+13-123 files

OpenBSD/ports 0dVNl85lang/hashlink Makefile, lang/hashlink/patches patch-src_std_socket_c patch-src_std_sys_c

   Use getexecpath in hl_sys_exe_path, a function which so far has been
   failing silently.

   Also remove the patch to rename pthread_setname_np to
   pthread_set_name_np as we have an alias defined for this.
VersionDeltaFile
1.9+11-11lang/hashlink/patches/patch-src_hl_h
1.13+6-15lang/hashlink/patches/patch-src_std_thread_c
1.1+15-0lang/hashlink/patches/patch-src_std_sys_c
1.6+2-4lang/hashlink/patches/patch-src_std_socket_c
1.26+2-1lang/hashlink/Makefile
+36-315 files

OpenBSD/ports VbnZfiOnet/gelatod Makefile distinfo, net/gelatod/patches patch-gelatod_c patch-frontend_c

   Update to gelatod 1.8 where florian merged the two patches, ok kn
VersionDeltaFile
1.7+2-2net/gelatod/distinfo
1.13+1-1net/gelatod/Makefile
1.2+0-0net/gelatod/patches/patch-gelatod_c
1.2+0-0net/gelatod/patches/patch-frontend_c
+3-34 files

OpenBSD/ports nPqbt2Mdevel/gn Makefile, devel/gn/patches patch-build_gen_py patch-src_util_exe_path_cc

   getexecpath instead of hardcoded binary path. ok rsadowski@
VersionDeltaFile
1.2+14-15devel/gn/patches/patch-src_util_exe_path_cc
1.3+2-2devel/gn/patches/patch-build_gen_py
1.8+2-2devel/gn/Makefile
+18-193 files

OpenBSD/ports 0tJVH9lgames/godot/pack3 Makefile, games/godot/pack3/patches patch-drivers_unix_os_unix_cpp

   getexecpath instead of previous workaround
VersionDeltaFile
1.3+14-53games/godot/pack3/patches/patch-drivers_unix_os_unix_cpp
1.8+1-0games/godot/pack3/Makefile
+15-532 files

OpenBSD/ports UN3cctvgames/returntotheroots Makefile, games/returntotheroots/patches patch-external_libutil_libs_common_src_getExecutablePath_cpp

   getexecpath instead of hardcoded binary path
VersionDeltaFile
1.2+8-5games/returntotheroots/patches/patch-external_libutil_libs_common_src_getExecutablePath_cpp
1.22+1-3games/returntotheroots/Makefile
+9-82 files

OpenBSD/ports xYzODAkx11/gnome/shell Makefile, x11/gnome/shell/patches patch-js_ui_components_keyring_js

   Revert; while it helped a bit, the race is still there.
VersionDeltaFile
1.309+1-1x11/gnome/shell/Makefile
1.2+0-0x11/gnome/shell/patches/patch-js_ui_components_keyring_js
+1-12 files

OpenBSD/ports j7DGdvCsysutils/amazon-ssm-agent Makefile distinfo

   Update to amazon-ssm-agent-3.3.5390.0.
VersionDeltaFile
1.176+2-2sysutils/amazon-ssm-agent/distinfo
1.190+1-1sysutils/amazon-ssm-agent/Makefile
+3-32 files

OpenBSD/ports YfazpTYx11/gnome/shell-extensions Makefile distinfo

   Update to gnome-shell-extensions-49.1.
VersionDeltaFile
1.67+2-2x11/gnome/shell-extensions/distinfo
1.91+1-1x11/gnome/shell-extensions/Makefile
+3-32 files

OpenBSD/ports M7TRVUEwayland/mango Makefile distinfo, wayland/mango/patches patch-src_dispatch_bind_c

   wayland/mango: Update to 0.17.2
VersionDeltaFile
1.3+8-32wayland/mango/patches/patch-src_dispatch_bind_c
1.19+2-2wayland/mango/distinfo
1.20+2-1wayland/mango/Makefile
+12-353 files

OpenBSD/src BkuLJVUsys/dev/pci if_bgereg.h if_bge.c

   Enable 64 bit DMA for bge(4) BCM5720.

   The DMA engines of various bge(4) hardware is full of bugs.  Only
   the latest revsion BCM5720 is common and it works with 64 bit DMA
   addresses.  Enable mbufs in the 64 bit address space only for that
   model.

   OK deraadt@ kettenis@ jmatthew@
VersionDeltaFile
1.409+14-6sys/dev/pci/if_bge.c
1.137+2-1sys/dev/pci/if_bgereg.h
+16-72 files

OpenBSD/ports kd6AiQTdevel/crush Makefile modules.inc

   devel/crush: update to 0.95.0
VersionDeltaFile
1.3+568-624devel/crush/distinfo
1.3+188-210devel/crush/modules.inc
1.4+1-2devel/crush/Makefile
+757-8363 files

OpenBSD/ports lF78DyUgraphics/p5-Imager Makefile distinfo

   update p5-Imager to 1.036
   CVE-2026-93019 CVE-2026-93018
VersionDeltaFile
1.24+2-2graphics/p5-Imager/distinfo
1.61+1-1graphics/p5-Imager/Makefile
+3-32 files

OpenBSD/ports 2jXX2KAx11/gnome/shell Makefile, x11/gnome/shell/patches patch-js_ui_components_keyring_js

   Workaround a race with gcr-prompter: goa-daemon asks for a secret early enough
   that the name is still unowned; dbus then activates gcr-prompter, which serves
   the prompt as a plain GTK dialog (instead of +gnome-shell dialog).
VersionDeltaFile
1.1+41-0x11/gnome/shell/patches/patch-js_ui_components_keyring_js
1.308+1-0x11/gnome/shell/Makefile
+42-02 files

OpenBSD/src D6uQwSYusr.sbin/rtrctl rtrctl.8 rtrctl.c

   Make rtrctl feel more like bgpctl

   While there, also add some visual feedback the program did something
   following a reload command.

   OK deraadt@
VersionDeltaFile
1.3+7-6usr.sbin/rtrctl/rtrctl.c
1.3+4-4usr.sbin/rtrctl/rtrctl.8
+11-102 files

OpenBSD/ports xSRjqg3devel/codex/patches patch-codex-rs_core_src_config_mod_rs patch-codex-rs_Cargo_toml

   Disable direct use of ccache/sccache.
VersionDeltaFile
1.2+17-2devel/codex/patches/patch-codex-rs_modcargo-crates_v8-150_4_0_build_rs
1.40+5-5devel/codex/patches/patch-codex-rs_Cargo_toml
1.42+1-1devel/codex/patches/patch-codex-rs_core_src_config_mod_rs
+23-83 files

OpenBSD/src 2Fz2DKeusr.sbin/bgpctl bgpctl.8, usr.sbin/bgpd bgpd.8 bgpd.conf.5

   Make man page cross references more consistent

   pointed out by claudio@ OK tb@
VersionDeltaFile
1.258+3-4usr.sbin/bgpd/bgpd.conf.5
1.114+3-4usr.sbin/bgpctl/bgpctl.8
1.89+3-2usr.sbin/bgpd/bgpd.8
+9-103 files

OpenBSD/ports 2z9GbcEdevel/uv Makefile crates.inc

   Update to uv 0.12.16, from maintainer

   https://github.com/astral-sh/uv/releases/tag/0.12.11
   https://github.com/astral-sh/uv/releases/tag/0.12.12
   https://github.com/astral-sh/uv/releases/tag/0.12.13
   https://github.com/astral-sh/uv/releases/tag/0.12.14
   https://github.com/astral-sh/uv/releases/tag/0.12.15
   https://github.com/astral-sh/uv/releases/tag/0.12.16
VersionDeltaFile
1.40+84-120devel/uv/distinfo
1.39+41-59devel/uv/crates.inc
1.44+1-1devel/uv/Makefile
+126-1803 files

OpenBSD/src taioD37lib/libcrypto/x509 x509_verify.c, regress/lib/libcrypto/x509 Makefile name_constraints_test.c

   Cache the leaf's extensions before adding it to the chain.

   A freshly parsed leaf has no cached subjectAltName when its names are
   collected for the name constraints check

   Fixes https://github.com/libressl/portable/issues/1299

   Change-Id: I0f155e08f5581ec1509138a96df34db29e9c46a1
VersionDeltaFile
1.1+160-0regress/lib/libcrypto/x509/name_constraints_test.c
1.30+7-2regress/lib/libcrypto/x509/Makefile
1.80+6-1lib/libcrypto/x509/x509_verify.c
+173-33 files

OpenBSD/ports NPUhNXHdevel/py-holidays distinfo Makefile, devel/py-holidays/pkg PLIST

   update to py3-holidays-0.104
VersionDeltaFile
1.9+106-1devel/py-holidays/pkg/PLIST
1.13+13-12devel/py-holidays/Makefile
1.11+2-2devel/py-holidays/distinfo
+121-153 files

OpenBSD/ports WO1x2nodevel/py-virtualenv Makefile distinfo

   update to py3-virtualenv-21.7.10
VersionDeltaFile
1.69+2-2devel/py-virtualenv/distinfo
1.103+1-1devel/py-virtualenv/Makefile
+3-32 files

OpenBSD/ports f6Fwdpldevel/py-wcmatch Makefile distinfo

   update to py3-wcmatch-11.0.1
VersionDeltaFile
1.10+2-2devel/py-wcmatch/distinfo
1.17+1-1devel/py-wcmatch/Makefile
+3-32 files

OpenBSD/ports Gh7uXA4devel/py-wcwidth Makefile distinfo, devel/py-wcwidth/pkg PLIST

   update to py3-wcwidth-0.8.3
VersionDeltaFile
1.22+2-2devel/py-wcwidth/distinfo
1.36+1-2devel/py-wcwidth/Makefile
1.15+1-0devel/py-wcwidth/pkg/PLIST
+4-43 files

OpenBSD/ports Q0n6iY1devel/py-xlsxwriter distinfo Makefile, devel/py-xlsxwriter/pkg PLIST

   update to py3-xlsxwriter-3.2.9, switch to gh distfile to enable tests
VersionDeltaFile
1.39+12-15devel/py-xlsxwriter/Makefile
1.17+27-0devel/py-xlsxwriter/pkg/PLIST
1.23+2-2devel/py-xlsxwriter/distinfo
+41-173 files

OpenBSD/ports wUgm4r3telephony/asterisk Makefile Makefile.inc, telephony/asterisk/20/pkg PLIST-tds PLIST-speex

   drop eol asterisk versions 16.x and 18.x, merge old installs into 20.x
VersionDeltaFile
1.28+2-4telephony/asterisk/Makefile.inc
1.3+3-0telephony/asterisk/20/pkg/PLIST-fax
1.360+0-2telephony/asterisk/Makefile
1.4+2-0telephony/asterisk/20/pkg/PLIST-tds
1.3+2-0telephony/asterisk/20/pkg/PLIST-speex
1.4+2-0telephony/asterisk/20/pkg/PLIST-snmp
+11-6140 files not shown
+32-8146 files

OpenBSD/ports F1COyRzlang/mono Makefile, lang/mono/patches patch-mono_metadata_w32process-unix-default_c patch-configure_ac

   Use getexecpath(3) in mono where it otherwise does readlink(2) on
   /proc/self/exe. This corrects code paths that previously failed
   silently or may not be commonly used.
   "go ahead" from robert@
VersionDeltaFile
1.1+18-0lang/mono/patches/patch-mono_metadata_assembly_c
1.16+13-4lang/mono/patches/patch-configure_ac
1.1+17-0lang/mono/patches/patch-mono_utils_mono-dl-posix_c
1.1+16-0lang/mono/patches/patch-mono_metadata_w32process-unix-default_c
1.163+1-0lang/mono/Makefile
+65-45 files