OpenBSD/src hsN7kQ6 — lib/libc/asr gethostnamadr_async.c

   when getnetby*(3) family were refactored by schwarze in 2018 as a
   wrapper on gethostby*(3), the ip address in the structure was
   mistakenly considered a pointer to an ip address, and a dereference
   was attempted.  The long survival of this bug tells us that
   getnetby*(3) is used extremely rarely.  In fact it was noticed by
   afresh1@ on a strict-alignment architecture which inspected a HOST
   with an odd ip address (byte order can also matter)
   ok millert
VersionDeltaFile
1.56+4-4lib/libc/asr/gethostnamadr_async.c
+4-41 files

OpenBSD/src E9MvQOr — regress/usr.bin/patch Makefile fetchname.c

   add some tests for fetchname()

   tests originally written by kirill@; the unholy parts are mine.
VersionDeltaFile
1.1+104-0regress/usr.bin/patch/fetchname.c
1.15+17-3regress/usr.bin/patch/Makefile
+121-32 files

OpenBSD/src YRrn6FP — libexec/ld.so/hppa rtld_machine.c

   ld.so/hppa: skip RELOC_NONE in the hppa fast path

   OK: deraadt@
VersionDeltaFile
1.46+6-2libexec/ld.so/hppa/rtld_machine.c
+6-21 files

OpenBSD/src 9Ji5UfF — sys/uvm uvm_vnode.c

   u_obj.uo_refs must be managed using atomic_inc_int_nv() and friends
   or the reference counting and inspection can evaluate incorrect.
   This affecs kbind.
   ok claudio, krw
   diff from openai
VersionDeltaFile
1.153+10-12sys/uvm/uvm_vnode.c
+10-121 files

OpenBSD/ports wXzzOxv — net Makefile

   +snmpd_extend
VersionDeltaFile
1.1487+1-0net/Makefile
+1-01 files

OpenBSD/src UkMcHjr — share/man/man7 securelevel.7

   securelevel 2 doesn't try to prevent pf ruleset changes any more
VersionDeltaFile
1.33+2-5share/man/man7/securelevel.7
+2-51 files

OpenBSD/src Fjol6Gn — sys/net pf_ioctl.c

   stop trying to refuse a whole bunch of ioctls when securelevel > 1, which
   was advertised as "pf filter and NAT rules may not be altered" - however,
   there are numerous other ways, like turning pf of per-interface using set
   skip, removing/adding interfaces from/to groups etc etc etc
   root is root, period. pf doesn't have anything securelevel-dependent now.
   "set skip" reported by acts1631kjv at proton
   support deraadt, ok sashan claudio sthen
VersionDeltaFile
1.437+1-57sys/net/pf_ioctl.c
+1-571 files

OpenBSD/ports VZpa6f7 — net/snmpd_extend distinfo Makefile, net/snmpd_extend/pkg snmpd_extend.rc PLIST

   Import snmpd_extend.

   A standalone daemon for NET-SNMP-EXTEND-MIB, exporting via AgentX.

   motivated by, and OK sthen@
VersionDeltaFile
1.1+21-0net/snmpd_extend/Makefile
1.1+10-0net/snmpd_extend/pkg/snmpd_extend.rc
1.1+5-0net/snmpd_extend/pkg/DESCR
1.1+4-0net/snmpd_extend/pkg/PLIST
1.1+2-0net/snmpd_extend/distinfo
1.1.1.1+0-0net/snmpd_extend/pkg/snmpd_extend.rc
+42-04 files not shown
+42-010 files

OpenBSD/src voqKlAs — usr.sbin/snmpd snmpd.h

   Remove sc_traphandler. It hasn't been in use for a long time.
VersionDeltaFile
1.130+1-2usr.sbin/snmpd/snmpd.h
+1-21 files

OpenBSD/src 1I2h3Wp — usr.sbin/snmpd snmpd.h snmpe.c

   Remove sm_transactionid. This was originally intended to hook messages to
   when sending requests to AgentX backends, but this functionality ended up
   fully in application.c.

   OK op@
VersionDeltaFile
1.100+1-19usr.sbin/snmpd/snmpe.c
1.129+1-9usr.sbin/snmpd/snmpd.h
+2-282 files

OpenBSD/src ca2bhxV — usr.sbin/snmpd snmpd.h application.c

   Cap getbulk max-repetitions to 50.

   Pointed out by acts1631
   OK sthen@
VersionDeltaFile
1.47+4-1usr.sbin/snmpd/application.c
1.128+2-1usr.sbin/snmpd/snmpd.h
+6-22 files

OpenBSD/src vRfvg8k — usr.sbin/snmpd snmpe.c

   Disallow noAuthPriv messages. This is an invalid flag combination.

   From acts1631
   OK sthen@
VersionDeltaFile
1.99+5-1usr.sbin/snmpd/snmpe.c
+5-11 files

OpenBSD/ports cpBSZPE — textproc/xmlwf Makefile distinfo

   update xmlwf to expat 2.10.0
VersionDeltaFile
1.21+4-4textproc/xmlwf/distinfo
1.29+1-1textproc/xmlwf/Makefile
+5-52 files

OpenBSD/src 1xlCGmg — share/man/man4 ure.4, sys/dev/usb if_urereg.h if_ure.c

   sys/ure: use and load firmware from rge

   both RTL8157 and RTL8159 can use the same firmware from RTL8126-2 and
   RTL8127 with some gule.

   OK: kevlo@
VersionDeltaFile
1.39+1,044-5sys/dev/usb/if_ure.c
1.16+38-1sys/dev/usb/if_urereg.h
1.13+11-7share/man/man4/ure.4
+1,093-133 files

OpenBSD/ports xlpZW0j — graphics/gthumb Makefile distinfo

   Update to gthumb-4.0.1.
VersionDeltaFile
1.62+2-2graphics/gthumb/distinfo
1.154+1-1graphics/gthumb/Makefile
+3-32 files

OpenBSD/ports Jzfx0GK — sysutils/opentofu Makefile distinfo

   Update to opentofu-1.13.7.
VersionDeltaFile
1.56+2-2sysutils/opentofu/distinfo
1.58+1-1sysutils/opentofu/Makefile
+3-32 files

OpenBSD/src Cmgumhv — regress/lib/libexpat/runtests Makefile

   libexpat 2.10.0 has new test files to build
VersionDeltaFile
1.7+2-1regress/lib/libexpat/runtests/Makefile
+2-11 files

OpenBSD/src HkPVvKO — lib/libexpat Changes, lib/libexpat/lib entities.h xmlparse.c

   Update libexpat to version 2.10.0

   Relevant for OpenBSD are security fixes #1431 #1433 #1436 #1438
   #1439 #1442 #1444 #1450, bug fixes #1452 #1458 #1461 #1467, other
   changes #1413 #1415 #1437 #1417 #1463 #1420 #1449 #1453 #1432.
   Library bump is not necessary.
   CVE-2026-113351 CVE-2026-115506 CVE-2026-117610 CVE-2026-118370

   OK tb@
VersionDeltaFile
1.56+732-139lib/libexpat/lib/xmlparse.c
1.1+250-0lib/libexpat/tests/entities_tests.c
1.18+180-1lib/libexpat/tests/misc_tests.c
1.1+99-0lib/libexpat/lib/entities.h
1.44+89-0lib/libexpat/Changes
1.18+49-14lib/libexpat/tests/basic_tests.c
+1,399-15419 files not shown
+1,605-16825 files

OpenBSD/ports 1soI09S — devel/ptlib Makefile distinfo

   Update to ptlib-2.10.9.8.
VersionDeltaFile
1.15+2-2devel/ptlib/distinfo
1.60+1-1devel/ptlib/Makefile
+3-32 files

OpenBSD/ports uwfRJPd — x11/gtk-vnc Makefile distinfo, x11/gtk-vnc/pkg PLIST

   Update to gtk-vnc-1.6.0.
VersionDeltaFile
1.19+41-0x11/gtk-vnc/pkg/PLIST
1.24+2-2x11/gtk-vnc/distinfo
1.79+1-1x11/gtk-vnc/Makefile
+44-33 files

OpenBSD/ports Aj6UZzK — lang/gcc/16 distinfo Makefile, lang/gcc/16/patches patch-gcc_config_arm_openbsd1_h

   lang/gcc/16: fix exception table encoding on OpenBSD/arm to fix build
VersionDeltaFile
1.17+2-2lang/gcc/16/distinfo
1.48+2-2lang/gcc/16/Makefile
1.2+3-1lang/gcc/16/patches/patch-gcc_config_arm_openbsd1_h
+7-53 files

OpenBSD/src HsLalsc — sys/dev/isa isadma.c

   Remove unused isa_dmamap_destroy().
VersionDeltaFile
1.40+1-26sys/dev/isa/isadma.c
+1-261 files

OpenBSD/ports fgonldQ — devel/lua-cjson Makefile

   update HOMEPAGE and SITES

   ok tb@
VersionDeltaFile
1.12+3-3devel/lua-cjson/Makefile
+3-31 files

OpenBSD/ports RVd4kmB — www/seamonkey Makefile

   www/seamonkey: add BDEP on m4, this one still checks for it

   while here update BROKEN-aarch64 reason, different error message nowadays
VersionDeltaFile
1.325+2-1www/seamonkey/Makefile
+2-11 files

OpenBSD/ports tx2YzvQ — www/mozilla mozilla.port.mk

   www/mozilla: drop BUILD_DEPENDS on m4, the bundled autoconf isnt run anymore
VersionDeltaFile
1.182+0-2www/mozilla/mozilla.port.mk
+0-21 files

OpenBSD/ports hBCorAp — devel/libnotify Makefile, devel/libnotify/patches patch-tools_notify-send_c

   devel/libnotify: check notify_get_server_info() return code and exit early if there's no notification daemon

   silences vfprintf NULL messages when notify-send is run without dbus running.

   ok ajacoutot@ (MAINTAINER)
VersionDeltaFile
1.1+21-0devel/libnotify/patches/patch-tools_notify-send_c
1.60+1-0devel/libnotify/Makefile
+22-02 files

OpenBSD/ports 4mT4ReB — geo/mapproxy Makefile distinfo

   geo/mapproxy: update to 8.1.0
VersionDeltaFile
1.40+2-2geo/mapproxy/distinfo
1.55+1-1geo/mapproxy/Makefile
+3-32 files

OpenBSD/src NPTmhw4 — sys/netinet6 ip6_mroute.c

   Remove mrt6_mrouter_ver since it is unused and will never be used.

   Our MRT6 code has no compat fallback for the old (> 25year) mrt6msg
   format. We only use the fixed version with the alignment fix.
   So there is no need to track mrt6_mrouter_ver since it is always MRT6_INIT
   and that will never change. So burn this bridge for good.

   OK bluhm@
VersionDeltaFile
1.160+5-16sys/netinet6/ip6_mroute.c
+5-161 files

OpenBSD/src xDHnRG0 — sys/arch/amd64/amd64 machdep.c, sys/arch/i386/i386 machdep.c

   fallback to PCI reset on x86

   Attempt system reset with writes to a memory region used for PCI.
   Both Intel and AMD document reset at the 0xcf9 address.

   Adapted from FreeBSD by Gert-Jan Vons to fix reset on a
   Fujitsu Futro S940.

   ok deraadt@
VersionDeltaFile
1.682+17-1sys/arch/i386/i386/machdep.c
1.315+17-1sys/arch/amd64/amd64/machdep.c
+34-22 files

OpenBSD/src yqAkRq0 — sys/dev/ic nvme.c

   Don't free the io queue memory when suspending, so it doesn't have to be
   reallocated on resume.  This removes a potential sleep point in the resume
   path.   The queue is still recreated on the controller, so its software state
   has to be reset instead.

   ok dlg@ deraadt@
VersionDeltaFile
1.132+4-10sys/dev/ic/nvme.c
+4-101 files