OpenBSD/src fqXf8z7lib/libssl dtls12_handshake_msg.c d1_both.c

   Introduce and use dtls12_handshake_msg.

   Add struct dtls12_handshake_msg and various related functions, which
   allow for the construction of DTLS handshake messages and associated
   fragments.

   Use this on the DTLS write path for sending handshake message fragments.
   This means that we no longer modify the init buffer, which also fixes a
   bug where the message callback is called with a corrupted handshake
   message when multiple fragments have been sent.

   We also now correctly track fragment offsets when sending a handshake
   message that results in multiple calls to dtls1_do_write_handshake_message().

   This is the first step towards further untangling of the write path in
   the legacy TLS stack.

   ok kenjiro@ tb@
VersionDeltaFile
1.1+231-0lib/libssl/dtls12_handshake_msg.c
1.94+74-74lib/libssl/d1_both.c
1.1+46-0lib/libssl/dtls12_internal.h
1.66+6-1lib/libssl/d1_lib.c
1.5+4-1lib/libssl/dtls_local.h
1.87+2-1lib/libssl/Makefile
+363-776 files

OpenBSD/ports L03RHttnet/lldpd distinfo Makefile

   update to lldpd-1.0.22
VersionDeltaFile
1.45+2-2net/lldpd/distinfo
1.70+1-2net/lldpd/Makefile
+3-42 files

OpenBSD/ports HbZfp1Xnet/zsync Makefile distinfo

   update to zsync-0.6.4
   specific gzip support is deprecated and will be removed in a future version
   (upstream suggest using gzip --rsyncable, if you have a version of gzip
   which supports it; openbsd's doesn't)
VersionDeltaFile
1.12+2-2net/zsync/Makefile
1.5+2-2net/zsync/distinfo
+4-42 files

OpenBSD/ports e2IWmLqarchivers/zziplib Makefile distinfo, archivers/zziplib/patches patch-zzip_CMakeLists_txt patch-zzipwrap_CMakeLists_txt

   Update zziplib to 0.13.80, fixes build with llvm 22.
   Tweaks and ok rsadowski@
VersionDeltaFile
1.2+45-2archivers/zziplib/patches/patch-zzip_CMakeLists_txt
1.10+11-25archivers/zziplib/pkg/PLIST
1.28+5-4archivers/zziplib/Makefile
1.9+2-2archivers/zziplib/distinfo
1.2+1-1archivers/zziplib/patches/patch-zzipwrap_CMakeLists_txt
1.2+0-0archivers/zziplib/patches/patch-zzip_mmapped_c
+64-346 files

OpenBSD/ports eMgbtjraudio/lame Makefile, audio/lame/patches patch-libmp3lame_id3tag_c

   audio/lame: Fix build with llvm 22. ok aja@
VersionDeltaFile
1.1+47-0audio/lame/patches/patch-libmp3lame_id3tag_c
1.69+1-0audio/lame/Makefile
+48-02 files

OpenBSD/src VgQRBlEusr.sbin/rpki-client validate.c extern.h

   Limit the length of filenames as they appear in various ASN.1 fields to 255

   OK tb@
VersionDeltaFile
1.83+7-2usr.sbin/rpki-client/validate.c
1.280+7-1usr.sbin/rpki-client/extern.h
1.138+4-2usr.sbin/rpki-client/mft.c
1.237+2-3usr.sbin/rpki-client/cert.c
1.44+2-2usr.sbin/rpki-client/rsc.c
+22-105 files

OpenBSD/ports dZWDLy0www/mozilla-firefox Makefile, www/mozilla-firefox/patches patch-third_party_libwebrtc_modules_desktop_capture_linux_x11_x_server_pixel_buffer_cc

   neuter shared memory (shm*) in webrtc to unbreak screen sharing while using pledge

   the same patch is used in chromium to take the XImage API codepath instead
   of using shared memory which cannot be used while pledged

   ok landry@
VersionDeltaFile
1.1+17-0www/mozilla-firefox/patches/patch-third_party_libwebrtc_modules_desktop_capture_linux_x11_x_server_pixel_buffer_cc
1.41+0-3www/mozilla-firefox/pkg/README
1.683+2-0www/mozilla-firefox/Makefile
+19-33 files

OpenBSD/src sLVTfBulib/libcrypto/x509 x509_prn.c

   x509_prn: zap more than useless comments
VersionDeltaFile
1.11+1-8lib/libcrypto/x509/x509_prn.c
+1-81 files

OpenBSD/src I6suLKolib/libcrypto/x509 x509_prn.c

   x509_prn: hoist unknown_ext_print() above its only caller; drop prototype
VersionDeltaFile
1.10+25-29lib/libcrypto/x509/x509_prn.c
+25-291 files

OpenBSD/src fdF6O8Blib/libcrypto/asn1 tasn_prn.c

   asn1_print_obstring_ctx: cast to const char * rather than char *

   Another call to BIO_dump_indent() that cast away const for no good reason.
VersionDeltaFile
1.30+2-2lib/libcrypto/asn1/tasn_prn.c
+2-21 files

OpenBSD/src lQ2dq2Zlib/libcrypto/x509 x509_prn.c

   unknown_ext_print: avoid casting away const

   The BIO_dump_indent() API masterpiece expects a const char pointer as
   input. Don't cast away const when suppressing pointer sign warnings.

   Prompted by a report by N. Dossche

   ok kenjiro
VersionDeltaFile
1.9+2-2lib/libcrypto/x509/x509_prn.c
+2-21 files

OpenBSD/ports 6E7Z9CEnet/gp-openconnect Makefile

   Rework autoconf/automake dependency installation

   Reported by naddy@
VersionDeltaFile
1.3+9-4net/gp-openconnect/Makefile
+9-41 files

OpenBSD/src QifK1j6lib/libcrypto/x509 x509_prn.c

   Ensure X509V3_EXT_print() only returns 0 and 1

   In a rare mistake by schwarze, X509V3_EXT_print() is documented to return
   0 and 1. This is also what most internal callers expect.

   However, if either X509V3_EXT_DUMP_UNKNOWN or X509V3_EXT_PARSE_UNKNOWN is
   set, the extension has an unknown NID or on failure to deserialize the
   extension value, the return values of BIO_dump_indent() (which is number
   of bytes written or -1 on error) and ASN1_parse_dump() (which is 0, 1, or
   2 on EOC) are propagated.

   Follow what OpenSSL did and translate to Boolean returns. Error indicators
   are rather useless here since most errors are ignored anyway. Most callers
   do if (!X509V3_EXT_print(...)) but they also pass a zero flag.

   Reported by N. Dossche

   ok kenjiro
VersionDeltaFile
1.8+3-3lib/libcrypto/x509/x509_prn.c
+3-31 files

OpenBSD/src yBd2bWelib/libcrypto/conf ssleay.cnf

   remove unused ssleay.cnf file; ok tb@
VersionDeltaFile
1.2+0-0lib/libcrypto/conf/ssleay.cnf
+0-01 files

OpenBSD/src GKO8Qkllib/libcrypto/man ASN1_parse_dump.3

   ASN1{,_parse}_dump: document return value 2 on EOC

   Prompted by a report by N. Dossche

   ok kenjiro
VersionDeltaFile
1.5+7-3lib/libcrypto/man/ASN1_parse_dump.3
+7-31 files

OpenBSD/src 12TXCaxlib/libcrypto/man BIO_dump.3

   BIO_dump: Xr BIO_printf rather than BIO_write/fwrite

   Prompted by a report by N. Dossche

   ok kenjiro
VersionDeltaFile
1.7+4-6lib/libcrypto/man/BIO_dump.3
+4-61 files

OpenBSD/ports YEzqmdJsysutils/awscli/v1 distinfo Makefile, sysutils/awscli/v1/pkg PLIST

   Update to awscli-1.45.9.
VersionDeltaFile
1.13+30-1sysutils/awscli/v1/pkg/PLIST
1.30+2-2sysutils/awscli/v1/distinfo
1.32+1-1sysutils/awscli/v1/Makefile
+33-43 files

OpenBSD/ports jysGLH5net/py-boto3 distinfo Makefile

   Update to py3-boto3-1.43.9.
VersionDeltaFile
1.648+2-2net/py-boto3/distinfo
1.660+1-1net/py-boto3/Makefile
+3-32 files

OpenBSD/ports NsTnpwvnet/py-botocore distinfo Makefile

   Update to py3-botocore-1.43.9.
VersionDeltaFile
1.865+2-2net/py-botocore/distinfo
1.875+1-1net/py-botocore/Makefile
+3-32 files

OpenBSD/ports xDRMpqcnews/sabnzbd distinfo Makefile

   Update to sabnzbd-5.0.3

   Changes: https://github.com/sabnzbd/sabnzbd/releases/tag/5.0.3
VersionDeltaFile
1.54+2-2news/sabnzbd/distinfo
1.79+1-1news/sabnzbd/Makefile
+3-32 files

OpenBSD/ports bFScnM6games/godot/pack1 Makefile, games/godot/pack1/patches patch-core_io_file_access_pack_cpp

   Downgrade mismatch when checking pack version minor from error to
   warning.

   With relative API stability in Godot 3.x, don't error when Godot bin
   minor is less than pack file minor, warn instead. This is stop refusing
   to run games that are built with HEAD and report higher minor version
   than latest release.

   ok op@
VersionDeltaFile
1.1+22-0games/godot/pack1/patches/patch-core_io_file_access_pack_cpp
1.4+1-1games/godot/pack1/Makefile
+23-12 files

OpenBSD/ports VYzDio7sysutils/docker-cli distinfo Makefile

   sysutils/docker-cli: update to 29.5.0
VersionDeltaFile
1.40+2-2sysutils/docker-cli/distinfo
1.45+1-1sysutils/docker-cli/Makefile
+3-32 files

OpenBSD/ports K5p4dxhdevel/pycharm distinfo Makefile, devel/pycharm/pkg PLIST

   devel/pycharm: update to 2026.1.2
VersionDeltaFile
1.55+72-19devel/pycharm/pkg/PLIST
1.58+2-2devel/pycharm/distinfo
1.71+2-2devel/pycharm/Makefile
+76-233 files

OpenBSD/ports wnbdHVWdevel/intellij Makefile distinfo

   devel/intellij: update to 2026.1.2
VersionDeltaFile
1.118+2-2devel/intellij/Makefile
1.84+2-2devel/intellij/distinfo
+4-42 files

OpenBSD/ports QlQA573games/flare distinfo Makefile, games/flare/pkg PLIST-data PLIST-main

   update to flare-1.15
VersionDeltaFile
1.8+410-59games/flare/pkg/PLIST-data
1.9+6-3games/flare/pkg/PLIST-main
1.11+4-4games/flare/distinfo
1.27+1-3games/flare/Makefile
+421-694 files

OpenBSD/src vKOYt2Lshare/man/man4 qwz.4

   ifconfig qwz0 down/up is now working.
VersionDeltaFile
1.2+1-6share/man/man4/qwz.4
+1-61 files

OpenBSD/ports o2hfpxUlang/node Makefile, lang/node/patches patch-tools_v8_gypfiles_v8_gyp patch-deps_v8_src_base_platform_memory_h

   lang/node: align patches with www/chromium
   This does *not* resolve the random build failures seen with chromium-based
   browsers recently
VersionDeltaFile
1.20+5-25lang/node/patches/patch-tools_v8_gypfiles_v8_gyp
1.3+11-9lang/node/patches/patch-deps_v8_src_base_platform_memory_h
1.1+12-0lang/node/patches/patch-deps_v8_src_base_macros_h
1.167+1-1lang/node/Makefile
+29-354 files

OpenBSD/src tEs1Icpdistrib/sets/lists/man mi

   sync
VersionDeltaFile
1.1768+1-0distrib/sets/lists/man/mi
+1-01 files

OpenBSD/src 1Q5RU6psys/dev/ic qwz.c qwzvar.h, sys/dev/pci if_qwz_pci.c

   After ifconfig qwz0 down followed by ifconfig qwz0 up, the second up
   would fail with SIOCSIFFLAGS: Resource temporarily unavailable, and
   after the first failure the device could not be brought up at all
   until reboot. The same symptom appeared when changing nwid while the
   interface was up (which internally does down+up).

   To fix this issue, we do following changes:

   1. Keep the firmware running for the lifetime of the device attachment,
   matching what Linux ath12k does. ifconfig down/up no longer power-cycles
   the chip; it only tears down and re-establishes the per-BSS association.

   2. Reset wmi.unified_ready before sending WMI_INIT so the host
   actually waits for the firmware's ready event instead of returning
   immediately from a stale flag.

   3. Transition firmware to MHI state M3 before resetting the device in
   power_down, so the chip starts from a clean slate on the next power-up.
VersionDeltaFile
1.10+46-15sys/dev/pci/if_qwz_pci.c
1.28+45-15sys/dev/ic/qwz.c
1.16+1-0sys/dev/ic/qwzvar.h
+92-303 files

OpenBSD/ports Xj4lcFkwww/ungoogled-chromium Makefile, www/ungoogled-chromium/pkg PLIST

   www/ungoogled-chromium: fix hyphenation

   "it is fine" robert@
VersionDeltaFile
1.13+54-0www/ungoogled-chromium/pkg/PLIST
1.230+5-0www/ungoogled-chromium/Makefile
+59-02 files