OpenBSD/ports DHlViipsysutils/moor distinfo Makefile

   sysutils/moor: Update to 2.12.1

   From Maintainer Lydia Sobot, thanks
VersionDeltaFile
1.5+2-2sysutils/moor/distinfo
1.5+1-1sysutils/moor/Makefile
+3-32 files

OpenBSD/ports OVyWO55games/nudoku Makefile distinfo, games/nudoku/pkg PLIST

   Update nudoku to 8.0.0.
VersionDeltaFile
1.12+2-2games/nudoku/Makefile
1.9+2-2games/nudoku/distinfo
1.6+2-0games/nudoku/pkg/PLIST
+6-43 files

OpenBSD/ports ChU0G2seditors/kakoune distinfo Makefile, editors/kakoune/patches patch-Makefile

   Update kakoune to latest release 2026.04.12. Based on diff from Lydia
   Sobot ( chilledfrogs () disroot ! org ) who also takes maintainer -
   thanks!

   I added missing make update-patches and make update-plist.
VersionDeltaFile
1.10+12-0editors/kakoune/pkg/PLIST
1.11+2-2editors/kakoune/distinfo
1.3+2-2editors/kakoune/patches/patch-Makefile
1.15+2-2editors/kakoune/Makefile
+18-64 files

OpenBSD/src AlHT2nVusr.sbin/vmd vionet.c virtio.h

   Fix vmd(8) vionet reset race leading to broken networking.

   A driver reset races with the device asynchronously notifying tx
   and rx threads. The current design finishes the reset after the
   threads pause and acknowledge the reset. This can clobber device
   state because a driver doesn't need to wait before reconfiguring
   the device. End result is device thinks it's in a blank slate while
   driver thinks device is configured and device refuses to pass packets
   thinking the driver isn't ready.

   This removes that async reset design and ack message from the
   threads. Reset occurs immediately while emulating the write to the
   register. A generation counter is used to signal to tx and rx
   threads that a reset occurred between they time they finished
   processing virtqueues and the time they grabbed the write lock to
   change interrupt state on the device so they can safely skip
   raising irq lines.

   Original bug reports by mbuhl@ and stsp@.

    [4 lines not shown]
VersionDeltaFile
1.30+55-64usr.sbin/vmd/vionet.c
1.63+2-1usr.sbin/vmd/virtio.h
1.147+1-2usr.sbin/vmd/vmd.h
+58-673 files

OpenBSD/ports Cg0Et4xdevel/py-filebytes/patches patch-setup_py

   pick up upstream commit fixing with newer python
VersionDeltaFile
1.1+33-0devel/py-filebytes/patches/patch-setup_py
+33-01 files

OpenBSD/src REP6Udhlibexec/ftpd ftpd.c

   Avoid potential undefined behavior on write error while sending data.
   From Dhiraj Mishra
   OK deraadt@ tb@
VersionDeltaFile
1.236+6-5libexec/ftpd/ftpd.c
+6-51 files

OpenBSD/ports LbZZrxhgraphics/djvulibre Makefile, graphics/djvulibre/patches patch-libdjvu_MMRDecoder_cpp

   graphics/djuvlibre: include patch to fix CVE-2025-53367

   From Nick Permyakov, thanks

   ok tb@
VersionDeltaFile
1.1+25-0graphics/djvulibre/patches/patch-libdjvu_MMRDecoder_cpp
1.54+1-1graphics/djvulibre/Makefile
+26-12 files

OpenBSD/src tGFYYzvsys/arch/riscv64/stand/efiboot efiboot.c conf.c

   Attempt to load the right device tree from the riscv64-specmit-dtb
   firmware package on SpacemiT K1 boards.  The only viable way to do this
   seems to be basing this on the "model" property of the root node of
   the device tree provided by the device.  This is still a bit of a guess
   since the Milk-V Jupiter advertises itself as "spacemit k1-x evb board"
   and the Banana Pi BPI-F3 seems to say it is a "spacemit k1-x deb1 board".

   ok jca@
VersionDeltaFile
1.14+44-2sys/arch/riscv64/stand/efiboot/efiboot.c
1.6+2-2sys/arch/riscv64/stand/efiboot/conf.c
+46-42 files

OpenBSD/src Ckmknd0sys/arch/i386/conf RAMDISK

   If you use the floppy, fw_update for some drivers will not work, you will
   have to figure out the names of the missing firmwares and request them
   manually.

   The pci strings in the kernel have become too large, and I'm being told I
   may not shorten them.
VersionDeltaFile
1.205+2-2sys/arch/i386/conf/RAMDISK
+2-21 files

OpenBSD/src 8tWMEywsys/arch/amd64/conf RAMDISK

   If you use the floppy, fw_update for some drivers will not work, you will
   have to figure out the names of the missing firmwares and request them
   manually.

   The pci strings in the kernel have become too large, and I'm being told I
   may not shorten them.
VersionDeltaFile
1.90+2-2sys/arch/amd64/conf/RAMDISK
+2-21 files

OpenBSD/src mQnjuf2sys/net rtsock.c

   route_output() can not use the info struct late in its function
   since the rtm struct that populated it was freed around the
   rtm_report() call. In that case access to info.rti_info[RTAX_DST]
   is a use-after-free.  Cache the address family before handling the
   route message so that the route_input call can use this value instead.

   Report from Bruce Dang of Calif.io
   OK deraadt@
VersionDeltaFile
1.391+6-3sys/net/rtsock.c
+6-31 files

OpenBSD/src DRnhoQTusr.bin/mandoc main.c

   oops, fix a one-byte mishap in the previous commit
VersionDeltaFile
1.270+2-2usr.bin/mandoc/main.c
+2-21 files

OpenBSD/src TZo2qLKusr.bin/mandoc main.c

   Refine unveil(2) usage.

   * Process man.conf(5) early before unveil(2) because it needs realpath(3).
   * Rather than unveiling the whole file system for reading and execution,
   only reveal the manpaths actually needed for reading, and /usr/share/locale/
   if needed, and only reveal the pager binary for execution.
   * Only reveal the whole file system for reading if input file names
   are listed individually on the command line.
   * Rather than unveiling /tmp unconditionally, only do so when it is
   actually needed for the pager.
   * When -O outfilename or -O tagfilename is specified, rather than
   unveiling the current working directory for writing, only unveil
   the specific filenames needed.

   Using some feedback from deraadt@, in particular reducing the number
   of vnodes that are held, and avoiding use of the "unveil" pledge(2).
VersionDeltaFile
1.269+212-105usr.bin/mandoc/main.c
+212-1051 files

OpenBSD/ports rSOupvgsecurity/gopass Makefile, security/gopass/patches patch-main_go

   add missing pledge, 'unix' needed for "gopass age agent"
   https://github.com/gopasspw/gopass/commit/d9b731ce1e1590539516828a44cf02daba759801
VersionDeltaFile
1.8+13-29security/gopass/patches/patch-main_go
1.44+1-0security/gopass/Makefile
+14-292 files

OpenBSD/src xTcc3nDusr.bin/mandoc manpath.c manconf.h

   Prepare for refining unveil(2) usage by providing a function manpath_unveil()
   that makes the manpath directories accessible.  Soon to be used by man(1),
   spropos(1), and makewhatis(8).
VersionDeltaFile
1.33+45-5usr.bin/mandoc/manpath.c
1.10+5-2usr.bin/mandoc/manconf.h
1.226+3-1usr.bin/mandoc/mandoc.h
1.20+3-1usr.bin/mandoc/mandoc_msg.c
+56-94 files

OpenBSD/ports Axnqvkmx11/xscreensaver Makefile, x11/xscreensaver/pkg PLIST

   xscreensaver: disable "worldpieces", xft_word_wrap segfaults (fails when
   trying to wrap an empty string)
VersionDeltaFile
1.60+1-1x11/xscreensaver/pkg/PLIST
1.125+1-1x11/xscreensaver/Makefile
+2-22 files

OpenBSD/ports yAxn7M1wayland/waybar/patches patch-src_main_cpp patch-resources_config_jsonc

   wayland/waybar: Unbreak USR1/USR2 signal handling

   https://github.com/Alexays/Waybar/pull/4278 inadvertently broke handling
   SIGUSR1/SIGUSR2 on OpenBSD. This reverts the offending bit.

   + replace sndio module in the default configuration with a custom module
   using sndioctl(1)
VersionDeltaFile
1.1+30-0wayland/waybar/patches/patch-src_main_cpp
1.4+9-7wayland/waybar/patches/patch-resources_config_jsonc
1.1+15-0wayland/waybar/patches/patch-src_modules_image_cpp
1.1+15-0wayland/waybar/patches/patch-include_util_SafeSignal_hpp
1.1+15-0wayland/waybar/patches/patch-src_modules_custom_cpp
1.3+4-3wayland/waybar/patches/patch-resources_style_css
+88-101 files not shown
+89-117 files

OpenBSD/src bMgNbJEusr.bin/mandoc mansearch.c

   Delete the pointless logic that remembers the original working directory.
   It was never needed because manpath_add() in manpath.c has always been
   using realpath(3) since the very beginning in 2011, so struct manpaths
   only ever contains absolute paths.
   The only exception is man.cgi(8), but that chdir(2)s to the right
   directory beforehand and only ever uses one single manpath, ".".

   This simplifies the code with no functional change.
VersionDeltaFile
1.68+3-33usr.bin/mandoc/mansearch.c
+3-331 files

OpenBSD/ports OmfIVooeditors/vim distinfo Makefile, editors/vim/patches patch-runtime_autoload_tar_vim

   update to vim-9.2.357
VersionDeltaFile
1.159+2-2editors/vim/distinfo
1.306+1-1editors/vim/Makefile
1.15+1-1editors/vim/patches/patch-runtime_autoload_tar_vim
+4-43 files

OpenBSD/ports ughlnN4x11/xscreensaver Makefile

   xscreensaver: fix #! line for xshadertoy-based scripts, RDEP on bash (they
   use exec -a, unsupported by base sh). noticed by lists at y42 dotorg
VersionDeltaFile
1.124+9-1x11/xscreensaver/Makefile
+9-11 files

OpenBSD/ports ppdYh9Ftextproc/lowdown Makefile

   lowdown: use ports-gcc on base-gcc

   base-gcc doesn't support deprecated attributes with deprecation message.
   ports-gcc is lower friction than patching the header:

   lowdown.h:460: error: wrong number of arguments specified for 'deprecated' attribute
VersionDeltaFile
1.39+4-0textproc/lowdown/Makefile
+4-01 files

OpenBSD/ports vMhfFIssecurity/mitmproxy distinfo Makefile, security/mitmproxy/pkg PLIST

   security/mitmproxy: update to 12.2.2
VersionDeltaFile
1.11+4-4security/mitmproxy/pkg/PLIST
1.13+2-2security/mitmproxy/distinfo
1.17+1-1security/mitmproxy/Makefile
+7-73 files

OpenBSD/ports 4JEP0DQsecurity/py-mitmproxy_rs distinfo crates.inc

   security/py-mitmproxy_rs: update to 0.12.9
VersionDeltaFile
1.9+436-408security/py-mitmproxy_rs/distinfo
1.9+217-203security/py-mitmproxy_rs/crates.inc
1.12+1-1security/py-mitmproxy_rs/Makefile
+654-6123 files

OpenBSD/ports tIex3YLsysutils/prometheus distinfo Makefile, sysutils/prometheus/patches patch-mmap_openbsd

   Update prometheus to 3.5.2 (latest LTS release):
   * [SECURITY] UI: Fix stored XSS via unescaped metric names and labels.
         CVE-2026-40179. #18507
   * [PERF] Regex: Stop calling Simplify. #17908

   OK sthen@
VersionDeltaFile
1.5+14-11sysutils/prometheus/patches/patch-mmap_openbsd
1.14+6-6sysutils/prometheus/distinfo
1.25+1-1sysutils/prometheus/Makefile
+21-183 files

OpenBSD/ports edp006edevel/sbt distinfo Makefile, devel/sbt/patches patch-bin_sbt

   devel/sbt: update to 1.12.9
VersionDeltaFile
1.26+2-2devel/sbt/distinfo
1.19+2-2devel/sbt/patches/patch-bin_sbt
1.26+1-1devel/sbt/Makefile
+5-53 files

OpenBSD/ports PPY7INHdevel/maven distinfo Makefile, devel/maven/pkg PLIST

   devel/maven: update to 3.9.15
VersionDeltaFile
1.24+15-15devel/maven/pkg/PLIST
1.22+2-2devel/maven/distinfo
1.50+1-1devel/maven/Makefile
+18-183 files

OpenBSD/ports 9S2pxVKwww/webkitgtk4 distinfo Makefile

   Update to webkitgtk{41,60}-2.52.3.
VersionDeltaFile
1.146+2-2www/webkitgtk4/distinfo
1.257+1-1www/webkitgtk4/Makefile
+3-32 files

OpenBSD/ports kpsZj4Aeditors/libreoffice distinfo Makefile, editors/libreoffice/patches patch-sdext_source_pdfimport_xpdfwrapper_pdfioutdev_gpl_cxx patch-sdext_source_pdfimport_xpdfwrapper_pdfioutdev_gpl_hxx

   update to 26.2.2.2
VersionDeltaFile
1.23+2-72editors/libreoffice/patches/patch-sdext_source_pdfimport_xpdfwrapper_pdfioutdev_gpl_cxx
1.14+2-59editors/libreoffice/patches/patch-sdext_source_pdfimport_xpdfwrapper_pdfioutdev_gpl_hxx
1.136+8-8editors/libreoffice/distinfo
1.8+2-2editors/libreoffice/patches/patch-external_skia_UnpackedTarball_skia_mk
1.341+1-1editors/libreoffice/Makefile
+15-1425 files

OpenBSD/ports JaOHwuBdevel/glib2 Makefile distinfo, devel/glib2/pkg PLIST

   Update to glib2-2.86.5.
VersionDeltaFile
1.412+7-7devel/glib2/Makefile
1.189+2-2devel/glib2/distinfo
1.143+2-2devel/glib2/pkg/PLIST
+11-113 files

OpenBSD/ports Ocgz6pVx11/gnome/at-spi2-core Makefile distinfo

   Update to at-spi2-core-2.58.5.
VersionDeltaFile
1.98+2-2x11/gnome/at-spi2-core/Makefile
1.71+2-2x11/gnome/at-spi2-core/distinfo
+4-42 files