OpenBSD/src buXzONlusr.bin/mandoc mandocdb.c

   Use unveil(2) to restrict write access to mandoc.db(5) and /tmp/
   and read access to the selected manpath directory or directories,
   but leave global read access open in -t mode.
   Tweaks from and looks correct to deraadt@.
VersionDeltaFile
1.224+65-15usr.bin/mandoc/mandocdb.c
+65-151 files

OpenBSD/ports MmN5T2fx11/gnome/papers Makefile

   Lowercase COMMENT.
VersionDeltaFile
1.9+3-1x11/gnome/papers/Makefile
+3-11 files

OpenBSD/ports mG7doC9multimedia/libcamera Makefile

   Tweak comment, no pkg change.
VersionDeltaFile
1.5+1-1multimedia/libcamera/Makefile
+1-11 files

OpenBSD/src RXhxk2Nusr.bin/pkgconf/cli core.c, usr.bin/pkgconf/libpkgconf path.c libpkgconf.h

   Update to pkgconf 3.0.6

   This mostly adds OS/2 support. The only change relevant for OpenBSD is

     - --variable accepts multiple modules and prints the requested
       variable's value for each module, in argument order.  --path and
       --print-variables remain limited to a single module.

   Which is the diff in cli/core.c. Apart from that little to nothing
   changes for us (some #ifdefs cause line numbers to change).

   ok djm
VersionDeltaFile
1.4+16-8usr.bin/pkgconf/libpkgconf/stdinc.h
1.4+7-3usr.bin/pkgconf/libpkgconf/pkg.c
1.3+2-6usr.bin/pkgconf/cli/core.c
1.2+6-0usr.bin/pkgconf/libpkgconf/libpkgconf-api.h
1.3+2-2usr.bin/pkgconf/libpkgconf/path.c
1.3+2-2usr.bin/pkgconf/libpkgconf/libpkgconf.h
+35-212 files not shown
+38-248 files

OpenBSD/src 1KdLDI4usr.bin/pkgconf/cli tuple.c

   pkgconf: remove stale file

   This somewhat outdated file snuck in by mistake in the last update.
   It was not compiled into the binary because libpkgconf precedes cli
   in .PATH, so the up-to-date libpkgconf/tuple.c file was used.

   Found while working on hooking up upstream pkgconf regress where the
   .PATH order was inverted in my WIP.
VersionDeltaFile
1.2+0-0usr.bin/pkgconf/cli/tuple.c
+0-01 files

OpenBSD/ports R63KeROx11/gnome/autoar distinfo Makefile, x11/gnome/autoar/pkg DESCR PLIST

   Update to gnome-autoar-0.5.0.
VersionDeltaFile
1.24+4-6x11/gnome/autoar/Makefile
1.8+0-6x11/gnome/autoar/pkg/PLIST
1.2+2-3x11/gnome/autoar/pkg/DESCR
1.17+2-2x11/gnome/autoar/distinfo
+8-174 files

OpenBSD/ports C0rnQoKsysutils/cloud-sql-proxy Makefile distinfo

   Update to cloud-sql-proxy-2.25.4.
VersionDeltaFile
1.52+2-2sysutils/cloud-sql-proxy/distinfo
1.54+1-1sysutils/cloud-sql-proxy/Makefile
+3-32 files

OpenBSD/ports 4K3myRYprint/qpdf Makefile distinfo

   Update to qpdf-12.4.1.
VersionDeltaFile
1.65+2-2print/qpdf/distinfo
1.81+1-1print/qpdf/Makefile
+3-32 files

OpenBSD/ports 0XRQVzfaudio/rubberband/patches patch-src_common_mathmisc_h

   Unbreak libcxx22 build

   OK tb
VersionDeltaFile
1.1+12-0audio/rubberband/patches/patch-src_common_mathmisc_h
+12-01 files

OpenBSD/ports bb1AWr4audio/ncmpcpp/patches patch-src_screens_tag_editor_cpp patch-src_screens_sel_items_adder_cpp

   Unbreak libcxx22 build

   Tested and ok namn@
VersionDeltaFile
1.1+16-0audio/ncmpcpp/patches/patch-src_screens_tag_editor_cpp
1.1+16-0audio/ncmpcpp/patches/patch-src_screens_sel_items_adder_cpp
+32-02 files

OpenBSD/src 2GNd0bFusr.bin/tmux grid.c

   Do not walk off end of grid lines if last line is wrapped, reported by
   Moe Khalilov.
VersionDeltaFile
1.157+3-3usr.bin/tmux/grid.c
+3-31 files

OpenBSD/src p5R09jxusr.bin/tmux popup.c

   Do no free input context if it is NULL when popup create fails.
VersionDeltaFile
1.77+3-2usr.bin/tmux/popup.c
+3-21 files

OpenBSD/src rlkY7TWusr.bin/tmux server-client.c

   Ignore focus events earlier to avoid them interfering with prefix,
   GitHub issue 5539.
VersionDeltaFile
1.509+5-1usr.bin/tmux/server-client.c
+5-11 files

OpenBSD/ports vstBI4xsecurity/nss Makefile distinfo

   security/nss: update to 3.128. will be required for firefox 156.

   see https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_128.html
VersionDeltaFile
1.177+2-2security/nss/distinfo
1.218+1-1security/nss/Makefile
+3-32 files

OpenBSD/src mczaJosusr.sbin/fw_update patterns.c

   Drop rsu from fw_update patterns; it has been in base since 2021.

   ok afresh1@
VersionDeltaFile
1.21+1-2usr.sbin/fw_update/patterns.c
+1-21 files

OpenBSD/src DJ34HLfbin/ls print.c, usr.bin/find ls.c

   find,ls: Ensure -ls output matches ls -dils as documented; print the
   epoch if localtime() fails. Synchronize the code with ls, so it always
   checks localtime()'s return value.

   ok tb@
VersionDeltaFile
1.20+6-2usr.bin/find/ls.c
1.42+3-2bin/ls/print.c
+9-42 files

OpenBSD/src hw401Wausr.bin/stat stat.c

   stat: Show the stringified epoch if localtime() fails. Avoids segfault
   on out of range time values. The raw value can still be obtained with
   stat -f %m.

   ok tb@
VersionDeltaFile
1.26+8-2usr.bin/stat/stat.c
+8-21 files

OpenBSD/src TxSxNo5usr.sbin/fw_update fw_update.sh

   fw_update could be tricked into treating the untrusted comment as data.
   In some situations (-a) this could be passed into fetch(), which did not
   validate what it passed to su(1). Use the trusted output of signify and
   add stricter validation.

   with & ok afresh1@
VersionDeltaFile
1.68+15-9usr.sbin/fw_update/fw_update.sh
+15-91 files

OpenBSD/ports C1vwrChgames/lwjgl3 Makefile distinfo, games/lwjgl3/patches patch-config_openbsd_build_xml patch-config_build-bindings_xml

   Update to LWJGL 3.3.2.0

   Allows playing Minecraft up through 1.21.11
VersionDeltaFile
1.7+12-3games/lwjgl3/pkg/PLIST
1.5+4-4games/lwjgl3/distinfo
1.16+2-3games/lwjgl3/Makefile
1.2+0-0games/lwjgl3/patches/patch-config_openbsd_build_xml
1.2+0-0games/lwjgl3/patches/patch-config_build-bindings_xml
+18-105 files

OpenBSD/src phPdMbtsbin/mountd mountd.c

   Rewrite the imsg code to be more modern.

   Split the code into independent send and recv functions that properly
   send some of the more complex messages without leaking extra data or
   causing problems on recv (e.g. by passing string buffers).
   This also kills the send_imsg wrapper which kind of is the cause that
   everything was passed as one big blob.

   OK rsadowski@
VersionDeltaFile
1.99+220-153sbin/mountd/mountd.c
+220-1531 files

OpenBSD/src xjhW9Vuusr.sbin/ospfd ospfd.h name2id.c

   Fix kr_change to add missing rtlabel references and update routes when
   only the label changes.

   rtlabel_tag2id() does not take a reference for the rtlabel id so a call
   to rtlabel_ref() is needed here. This mirrors the rtlabel_unref calls.
   In the nexthop already present case one needs to adjust the kn to update
   the ext_tag and rtlabel in case those changed. With this the rtlabel to
   external-tag mapping should work more reliable.

   OK bluhm@
VersionDeltaFile
1.119+33-20usr.sbin/ospfd/kroute.c
1.3+1-3usr.sbin/ospfd/name2id.c
1.110+2-1usr.sbin/ospfd/ospfd.h
+36-243 files

OpenBSD/ports JfGVmKCdevel/p5-File-MimeInfo distinfo Makefile

   update p5-File-MimeInfo to 0.37
VersionDeltaFile
1.28+2-3devel/p5-File-MimeInfo/Makefile
1.17+2-2devel/p5-File-MimeInfo/distinfo
+4-52 files

OpenBSD/ports WSFv4mesecurity/p5-Crypt-RIPEMD160 distinfo Makefile

   update p5-Crypt-RIPEMD160 to 0.14
VersionDeltaFile
1.11+9-8security/p5-Crypt-RIPEMD160/Makefile
1.5+2-2security/p5-Crypt-RIPEMD160/distinfo
+11-102 files

OpenBSD/ports 9XLI0VAgraphics/p5-Imager Makefile distinfo, graphics/p5-Imager/patches patch-PNG_impng_c

   update p5-Imager to 1.035
   patches commited upstream
   CVE-2026-73639 CVE-2026-73638
VersionDeltaFile
1.60+1-3graphics/p5-Imager/Makefile
1.23+2-2graphics/p5-Imager/distinfo
1.2+0-0graphics/p5-Imager/patches/patch-PNG_impng_c
+3-53 files

OpenBSD/ports EhGqc5jmultimedia/libcamera Makefile, multimedia/libcamera/pkg PLIST-main

   Add missing @pkgpath.
VersionDeltaFile
1.4+1-1multimedia/libcamera/Makefile
1.2+1-0multimedia/libcamera/pkg/PLIST-main
+2-12 files

OpenBSD/ports hLq72v0www/p5-libwww distinfo Makefile

   update p5-libwww to 6.83
   fix run and test dependencies according to portgen
   CVE-2026-8368
VersionDeltaFile
1.61+27-26www/p5-libwww/Makefile
1.30+2-2www/p5-libwww/distinfo
+29-282 files

OpenBSD/ports wWeEB4Swww/p5-HTML-Gumbo Makefile distinfo

   update p5-HTML-Gumbo to 0.20
   CVE-2025-15646
VersionDeltaFile
1.3+2-2www/p5-HTML-Gumbo/distinfo
1.5+1-1www/p5-HTML-Gumbo/Makefile
+3-32 files

OpenBSD/ports UaS92fvwayland/cow distinfo Makefile, wayland/cow/patches patch-config_cow_cow_conf

   wayland/cow: Update to 0.2
VersionDeltaFile
1.2+8-8wayland/cow/patches/patch-config_cow_cow_conf
1.4+9-5wayland/cow/Makefile
1.2+2-2wayland/cow/distinfo
1.2+3-0wayland/cow/pkg/PLIST
+22-154 files

OpenBSD/ports 39t0dOSwayland/mango distinfo Makefile, wayland/mango/patches patch-src_mango_c patch-src_dispatch_bind_define_h

   wayland/mango: Update to 0.16.2

   + add missing LIB_DEPENDS, pointed out by naddy@
VersionDeltaFile
1.11+2-2wayland/mango/patches/patch-src_dispatch_bind_define_h
1.15+2-2wayland/mango/distinfo
1.16+3-1wayland/mango/Makefile
1.7+1-1wayland/mango/patches/patch-src_mango_c
+8-64 files

OpenBSD/ports xrZbr1qgames/dxx-rebirth distinfo Makefile, games/dxx-rebirth/patches patch-SConstruct

   Update dxx-rebirth to 0.60pl20260823 and unbreak libcxx22 build

   OK thfr@
VersionDeltaFile
1.10+25-3games/dxx-rebirth/patches/patch-SConstruct
1.5+2-2games/dxx-rebirth/distinfo
1.16+2-2games/dxx-rebirth/Makefile
+29-73 files