OpenBSD/src 0e90cuPsys/dev/ata wd.c, sys/kern kern_pledge.c

   More prep for 52 disk partitions.

   Remove O_disklabel and O_DIOCGDINFO now that the ABI
   crossover should be complete. Lest these XXX bits take
   root.
VersionDeltaFile
1.136+1-7sys/dev/ata/wd.c
1.343+1-7sys/scsi/sd.c
1.15+1-5sys/sys/dkio.h
1.359+1-2sys/kern/kern_pledge.c
+4-214 files

OpenBSD/ports QHhmzsalang/gcc/15 Makefile, lang/gcc/15/pkg PLIST-ada PFRAG.128BIT-ada

   lang/gcc/15: regenerate i386 PLIST

   OK: sthen@
VersionDeltaFile
1.3.2.1+0-149lang/gcc/15/pkg/PLIST-ada
1.2.2.1+149-0lang/gcc/15/pkg/PFRAG.128BIT-ada
1.1.1.1.4.1+34-0lang/gcc/15/pkg/PFRAG.X86-main
1.1.1.1.4.1+0-34lang/gcc/15/pkg/PFRAG.amd64-main
1.21.2.1+1-4lang/gcc/15/Makefile
+184-1875 files

OpenBSD/src qVqIGGgsys/netinet ip_divert.c, sys/netinet6 ip6_divert.c

   Make divert-packet / divert(4) properly rdomain aware.

   divert(4) only partially handled rtables / rdomains. While it was used
   outbound, inbound packets did not check the rdomain. This is confusing
   and incorrect.

   Now inbound packets need to match the rdomain of the listening socket
   so one needs to listen on the rdomain the packets come in.
   If packets from multiple rdomains match the rule then userland
   needs to listen on each rdomain. If not the packet will be dropped.

   Report by Y Yang, et al from Tsinghua University
   With and OK bluhm@ OK sashan@ mvs@
VersionDeltaFile
1.109+6-2sys/netinet6/ip6_divert.c
1.108+6-2sys/netinet/ip_divert.c
+12-42 files

OpenBSD/ports YWT2dRBwww/tomcat/v11 distinfo Makefile, www/tomcat/v11/pkg PLIST-main

   update to tomcat-11.0.23
VersionDeltaFile
1.19+4-4www/tomcat/v11/distinfo
1.11+1-1www/tomcat/v11/pkg/PLIST-main
1.19+1-1www/tomcat/v11/Makefile
+6-63 files

OpenBSD/ports aHn3upvwww/tomcat/v10 distinfo Makefile, www/tomcat/v10/pkg PLIST-main

   update to tomcat-10.1.56
VersionDeltaFile
1.43+4-4www/tomcat/v10/distinfo
1.50+1-1www/tomcat/v10/Makefile
1.13+1-1www/tomcat/v10/pkg/PLIST-main
+6-63 files

OpenBSD/ports IgLPMUbwww/tomcat/v9 distinfo Makefile

   update to tomcat-9.0.119
VersionDeltaFile
1.55+4-4www/tomcat/v9/distinfo
1.63+1-1www/tomcat/v9/Makefile
+5-52 files

OpenBSD/src 50sETm4lib/libsndio aucat.c amsg.h, usr.bin/sndiod sock.c

   sndiod: Refactor and simplify the hello message handling

   Use proper enums for the resource type (audio device, midithru port,
   etc) in place of magic numbers and factor duplicated code.

   No behavior change.
   CCVS: ----------------------------------------------------------------------
VersionDeltaFile
1.64+50-47usr.bin/sndiod/sock.c
1.83+5-5lib/libsndio/aucat.c
1.19+8-1lib/libsndio/amsg.h
+63-533 files

OpenBSD/src SUjNMzeusr.bin/sndiod opt.c dev.c

   sndiod: Don't use midi_send() to generate MIDI messages

   midi_in() is the right function to do so. It handles multiple sources
   and does flow control.
VersionDeltaFile
1.21+5-8usr.bin/sndiod/opt.c
1.141+2-2usr.bin/sndiod/dev.c
+7-102 files

OpenBSD/ports 2mihSzatextproc/py-dateparser Makefile distinfo

   update to py3-dateparser-1.4.1
VersionDeltaFile
1.14+5-5textproc/py-dateparser/Makefile
1.11+2-2textproc/py-dateparser/distinfo
+7-72 files

OpenBSD/ports bB7Dvm9net/nchat Makefile

   net/nchat: prevent pick unrequired php build dependency

   Diff from Nazarenko Mykyta (maintainer), reported by naddy@
VersionDeltaFile
1.2+1-0net/nchat/Makefile
+1-01 files

OpenBSD/src 3W8pzMtusr.bin/sndiod opt.c

   sndiod: Initialize the array of unused opt_app structures
VersionDeltaFile
1.20+2-1usr.bin/sndiod/opt.c
+2-11 files

OpenBSD/src 4vA2PpNsys/dev/ic ncr53c9x.c

   sc_imlen is allowed to be >= NCR_MAX_MSG_LEN.

   Fixes subtle ncr53c9x_msgin breakage in previous.

   Pointed out by, tweak & ok miod@
VersionDeltaFile
1.84+4-3sys/dev/ic/ncr53c9x.c
+4-31 files

OpenBSD/src c91v748sys/netinet ip_mroute.c ip_mroute.h, sys/netinet6 ip6_mroute.c ip6_mroute.h

   Extend multicast router counter.

   ip_mforward() contained a static variable that poorly implements a
   rate limited log message.  Replace the log with a counter, which
   is MP-safe.
   Also count drops due to time-to-live and hop-limit.  As the default
   ttl is 1, this is the most common pitfall when configuring a multicast
   router.  This counter helps debugging.

   OK claudio@ deraadt@
VersionDeltaFile
1.153+6-5sys/netinet/ip_mroute.c
1.35+5-1sys/netinet/ip_mroute.h
1.30+5-1usr.bin/netstat/mroute.c
1.158+4-1sys/netinet6/ip6_mroute.c
1.26+3-1sys/netinet6/ip6_mroute.h
1.28+3-1usr.bin/netstat/mroute6.c
+26-106 files

OpenBSD/src JQuQImlregress/lib/libc/illumos/oclo Makefile

   Test runs out of file descriptors.  Increase ulimit number to 256.
VersionDeltaFile
1.3+3-1regress/lib/libc/illumos/oclo/Makefile
+3-11 files

OpenBSD/ports fQw1WZhaudio/cantata Makefile, wayland/waybar Makefile

   bump font-awesome consumers after change to multi-package (PLIST change)
VersionDeltaFile
1.34+1-1audio/cantata/Makefile
1.6+1-1wayland/waybar/Makefile
+2-22 files

OpenBSD/src Okmvpyvusr.bin/ssh channels.c

   Avoid printf("%s", NULL) since it's not guaranteed to be safe and will
   segfault on some -portable platforms.
VersionDeltaFile
1.463+2-2usr.bin/ssh/channels.c
+2-21 files

OpenBSD/ports QsF2od6www/iridium distinfo Makefile, www/iridium/patches patch-gpu_command_buffer_service_gles2_cmd_decoder_cc

   update to 2026.06.149.4
VersionDeltaFile
1.124+2-2www/iridium/distinfo
1.289+1-1www/iridium/Makefile
1.28+1-1www/iridium/patches/patch-gpu_command_buffer_service_gles2_cmd_decoder_cc
+4-43 files

OpenBSD/src miC9sPQsys/dev/ic ncr53c9x.c

   Fix FIFO handling to avoid overflowing sc_imess.

   Original diff from Stanislav Fort.

   ok deraadt@ claudio@
VersionDeltaFile
1.83+10-11sys/dev/ic/ncr53c9x.c
+10-111 files

OpenBSD/ports kuOrDqwsysutils/google-cloud-sdk distinfo Makefile, sysutils/google-cloud-sdk/pkg PLIST

   Update to google-cloud-sdk-574.0.0.
VersionDeltaFile
1.426+256-151sysutils/google-cloud-sdk/pkg/PLIST
1.443+2-2sysutils/google-cloud-sdk/distinfo
1.463+1-1sysutils/google-cloud-sdk/Makefile
+259-1543 files

OpenBSD/src 64sXs8Lregress/usr.sbin/pkg_add Makefile

   pkg_add: add regression test reproducing the recent gcc15 issue

   from espie
VersionDeltaFile
1.91+15-5regress/usr.sbin/pkg_add/Makefile
+15-51 files

OpenBSD/src JZinTqqsys/kern sysv_shm.c

   For IPC_STAT (and KERN_SYSVIPC_SHM_INFO) the three fields
   __shm_atimensec/__shm_dtimensec/_shm_ctimensec fields leak kernel memory
   contents because we never initialize them, they should clearly be zero
   until such time as we add more precision.  The Tsinghua University group
   suggested clearing these at export time, but the real problem is the
   memory is being allocated without PR_ZERO.
   ok kettenis mvs
VersionDeltaFile
1.85+4-4sys/kern/sysv_shm.c
+4-41 files

OpenBSD/ports 0ajVO8Ymath/R Makefile distinfo

   Update to R 4.6.1

   Set MODTK_VERSION=9 as suggested by Stuart Cassoff.
VersionDeltaFile
1.140+3-1math/R/Makefile
1.65+2-2math/R/distinfo
+5-32 files

OpenBSD/src ZabBZMUusr.bin/tmux status.c tmux.h

   Replace two-value prompt_mode enum with a flag.
VersionDeltaFile
1.270+9-10usr.bin/tmux/status.c
1.1369+2-5usr.bin/tmux/tmux.h
+11-152 files

OpenBSD/src wgJ1RD8usr.bin/tmux status.c window-customize.c

   Add some enums for prompt return values to make them a bit less confusing.
VersionDeltaFile
1.269+41-34usr.bin/tmux/status.c
1.25+29-29usr.bin/tmux/window-customize.c
1.90+18-14usr.bin/tmux/mode-tree.c
1.83+15-15usr.bin/tmux/window-tree.c
1.1368+23-6usr.bin/tmux/tmux.h
1.74+11-11usr.bin/tmux/cmd-command-prompt.c
+137-1092 files not shown
+151-1178 files

OpenBSD/ports UnHxA04editors/emacs Makefile, editors/emacs/files default.el

   Move our auto-mode-alist tweak to default.el

   This is the Right Way to do it according to the emacs docs. Users can
   then ignore this custom file with emacs -q if it becomes an issue. Also
   using default.el avoids possible patch conflicts when upgrading to newer
   emacs releases.

   Initial version from Timo Myyra, thanks!
VersionDeltaFile
1.1+13-0editors/emacs/files/default.el
1.130+2-1editors/emacs/Makefile
1.34+1-0editors/emacs/pkg/PLIST
1.13+0-0editors/emacs/patches/patch-lisp_files_el
+16-14 files

OpenBSD/src kNaxhvdsys/arch/arm64/conf RAMDISK

   Attach aplmbox(4) early in RAMDISK kernels too.
VersionDeltaFile
1.242+2-2sys/arch/arm64/conf/RAMDISK
+2-21 files

OpenBSD/src ijVRlqrsbin/isakmpd ike_auth.c ipsec.c

   isakmpd: Clear sensitive data with freezero()

   ok markus@
VersionDeltaFile
1.119+20-6sbin/isakmpd/ike_auth.c
1.161+10-10sbin/isakmpd/ipsec.c
1.135+7-7sbin/isakmpd/message.c
1.145+6-5sbin/isakmpd/exchange.c
1.17+4-4sbin/isakmpd/prf.c
1.207+5-1sbin/isakmpd/pf_key_v2.c
+52-335 files not shown
+64-4211 files

OpenBSD/src DBnw6k9sbin/isakmpd ike_quick_mode.c ipsec.c

   isakmpd: Clear key material

   Track allocated sizes alongside the key pointers.
VersionDeltaFile
1.116+6-4sbin/isakmpd/ike_quick_mode.c
1.160+7-3sbin/isakmpd/ipsec.c
1.28+2-1sbin/isakmpd/ipsec.h
+15-83 files

OpenBSD/ports FEXmGN2www/chromium distinfo Makefile, www/chromium/patches patch-gpu_command_buffer_service_gles2_cmd_decoder_cc

   update to 149.0.7827.196
VersionDeltaFile
1.478+4-4www/chromium/distinfo
1.913+1-1www/chromium/Makefile
1.33+1-1www/chromium/patches/patch-gpu_command_buffer_service_gles2_cmd_decoder_cc
+6-63 files

OpenBSD/src LzFo4IJusr.sbin/rpki-client nca.c extern.h

   Add a backoff retry mechanism for non-functional CAs

   Many non-functional CAs never recover once they become non-functional
   causing inefficiency in the operation of relying party instances.

   The existing detection mechanism for non-functional CAs is changed into
   a stateful backoff retry mechanism, eventually settling on retrying
   broken CAs only once per day. Backoff helps reduce load on both the
   RP and publication point sides of the house, reduces log clutter, and
   improves RP run duration.

   The sync schedule is reset if a given non-functional CA is discovered to
   be in working order again (i.e., backoff is not applied to healthy CAs).
   A few new statistics are exposed in the json & metrics outputs.

   An interesting side-effect of this mechanism is that it appears to
   obviate some of the need for a manually curated (and therefore, easily
   outdated) skiplist.

   OK claudio@ tb@
VersionDeltaFile
1.2+467-7usr.sbin/rpki-client/nca.c
1.285+32-3usr.sbin/rpki-client/extern.h
1.309+21-14usr.sbin/rpki-client/main.c
1.141+9-3usr.sbin/rpki-client/rpki-client.8
1.46+5-4usr.sbin/rpki-client/output.c
1.60+8-1usr.sbin/rpki-client/output-json.c
+542-322 files not shown
+553-348 files