OpenBSD/src tLUDAhgusr.sbin/bgpd log.c log.h

   Unexport vlog() from log.c nothing uses it outside of log.c.

   OK henning@
VersionDeltaFile
1.65+5-2usr.sbin/bgpd/log.c
1.21+1-3usr.sbin/bgpd/log.h
+6-52 files

OpenBSD/src nCdWe0Jusr.sbin/bgpctl log.c Makefile

   bgpctl: add log.c for bgpctl

   This provides log_{warn{,x},info,debug}() and fatal{,x}() implementations
   that wrap the err.h API. They are API compatile with bgpd's log.h and will
   help undo some contortions where we had to put log calls into weird spots
   because of code sharing between bgpd and bgpctl.

   ok claudio
VersionDeltaFile
1.1+82-0usr.sbin/bgpctl/log.c
1.22+2-2usr.sbin/bgpctl/Makefile
+84-22 files

OpenBSD/src iVz8Kfxsys/dev/pci/drm/i915 i915_driver.c

   disable GuC submission for Raptor Lake-S

   volker@ reports it fails to init on a desktop machine with a i9-14900K
VersionDeltaFile
1.30+3-2sys/dev/pci/drm/i915/i915_driver.c
+3-21 files

OpenBSD/src y9qiXhTusr.bin/ssh scp.c

   fiddle with mask after umask call and not before; avoids fortify
   warnings on android. bz3954
VersionDeltaFile
1.274+2-2usr.bin/ssh/scp.c
+2-21 files

OpenBSD/src 4fUklbylib/libexpat Changes, lib/libexpat/lib xmlparse.c internal.h

   Backport fixes from libexpat version 2.8.0.

   Relevant for OpenBSD are security fixes #47 #1183.  Library bump
   is not necessary.  CVE-2026-41080

   OK tb@
VersionDeltaFile
1.47+56-38lib/libexpat/lib/xmlparse.c
1.35+16-0lib/libexpat/Changes
1.17+2-0lib/libexpat/lib/internal.h
+74-383 files

OpenBSD/src DiCo1RWlib/libssl d1_both.c

   Split dtls1_do_write() into handshake message and CCS handling.

   dtls1_do_write() is currently a single function that handles both handshake
   messages and CCS. This is a strange mix that only serves to complicate the
   code - handshake messages have their own headers and may need to be
   fragmented, while CCS must be sent verbatim (and only contain a single
   byte). Pull the CCS part out into a separate function, simplifying the
   code. By definition, when sending a CCS message the MTU will already be
   set appropriately.

   ok kenjiro@ tb@
VersionDeltaFile
1.91+59-33lib/libssl/d1_both.c
+59-331 files

OpenBSD/src oXWqCYFlib/libssl d1_both.c

   Avoid unnecessary lookups in dtls1_retransmit_message().

   dtls1_retransmit_buffered_messages() is iterating over the sent_messages
   pqueue, only to pass dtls1_retransmit_message() a sequence number that it
   turns back into a priority, to then do a lookup on the sent_messages pqueue.
   This is pointless given that we already have the message that we need to
   retransmit - just pass that to dtls1_retransmit_message() directly.

   ok kenjiro@ tb@
VersionDeltaFile
1.90+6-37lib/libssl/d1_both.c
+6-371 files

OpenBSD/src AtFVF4nlib/libssl d1_both.c

   Remove unused frag_off argument from dtls1_retransmit_message().

   ok kenjiro@ tb@
VersionDeltaFile
1.89+3-4lib/libssl/d1_both.c
+3-41 files

OpenBSD/src RCExth0lib/libssl d1_both.c dtls_local.h

   Make dtls1_retransmit_message() static.

   This function is only called from dtls1_retransmit_buffered_messages().
   Make it static and move it above the caller.

   ok kenjiro@ tb@
VersionDeltaFile
1.88+75-75lib/libssl/d1_both.c
1.3+1-3lib/libssl/dtls_local.h
+76-782 files

OpenBSD/src O05VCFulib/libssl d1_both.c

   Inline dtls1_fix_message_header().

   This is only used in one place and it makes no sense to have it as a
   separate function. Furthermore, pull up an assertion so that we check
   before assigning frag_len.

   ok kenjiro@ tb@
VersionDeltaFile
1.87+5-16lib/libssl/d1_both.c
+5-161 files

OpenBSD/src u4mnbGMlib/libssl d1_both.c

   Convert DTLS code to ssl_msg_callback().

   ok kenjiro@ tb@
VersionDeltaFile
1.86+7-14lib/libssl/d1_both.c
+7-141 files

OpenBSD/src lZNVFK4usr.sbin/rpki-client parser.c

   rpki-client: properly ignore missing unsupported files in -n mode

   RFC 9286 section 6.5 mandates that we fetch all the files in a manifest
   fileList and validate their hashes. By design, RRDP will ship all the
   available files whereas in rsync we decided to fetch only the files of
   types we explicitly support. While we check the hashes of unsupported
   files, they won't be copied into the cache of validated files.

   Since unsupported files are not in the validated cache and may or may
   not be present in the temporary directory of fetched objects, there is
   logic that ensures that the hashes of all available files are correct
   and attempts to avoid an error for files absent from both directories.

   Whether all the above decisions in both, standards and our code, are
   fully sound is not entirely clear.

   Be that as it may, Job observed that this logic was incorrect in noop mode
   where no temporary directory is available. This resulted in rejecting the
   one manifest that still lists a Ghostbuster's record (RFC 6493) and as a

    [7 lines not shown]
VersionDeltaFile
1.181+7-3usr.sbin/rpki-client/parser.c
+7-31 files

OpenBSD/src quIaNYrsbin/pfctl parse.y

   The dual-pool form of the af-to action, af-to af FROM redirpool pool_opts
   TO redirpool pool_opts was writing the TO side options in the FROM side.

   OK sashan@
VersionDeltaFile
1.725+3-3sbin/pfctl/parse.y
+3-31 files

OpenBSD/src aZ7ip9nusr.bin/ssh ssh-agent.c

   unveil the actual listening socket path and its directory
   so it can be cleaned up at exit.

   Reported by / tested by David Krause, ok markus@
VersionDeltaFile
1.325+9-1usr.bin/ssh/ssh-agent.c
+9-11 files

OpenBSD/src HFPkIgRshare/zoneinfo/datfiles zonenow.tab northamerica

   Update to 2026bgtz from https://github.com/JodaOrg/global-tz
VersionDeltaFile
1.8+49-48share/zoneinfo/datfiles/zonenow.tab
1.92+58-13share/zoneinfo/datfiles/northamerica
1.34+14-14share/zoneinfo/datfiles/zone1970.tab
1.85+4-4share/zoneinfo/datfiles/southamerica
1.81+2-2share/zoneinfo/datfiles/zone.tab
+127-815 files

OpenBSD/src iDrvxq2lib/libc/gen cgetent.3

   Escape is octal 33, not 27 (which is escape in decimal)
   From Eric Mulholland
VersionDeltaFile
1.4+3-3lib/libc/gen/cgetent.3
+3-31 files

OpenBSD/src Wdt44bcusr.sbin/bgpd rde.c

   Fix possible reload bug that leave old filters on a peer.

   In rde_reload_done() the code handling the peer->reconf_rib case has a
   continue which skips the code path that actually reapplies the outbound
   filters. The result is that such a peer keeps on running with the old
   filters -- a subsequent reload will then fix this.

   Removing the continue changes the way peer->reconf_rib and peer->reconf_out
   interact. Now reconf_rib needs to be checked before reconf_out since it
   is possible for both to be set. Adjust the code in rde_softreconfig_in_done()
   accordingly.

   OK tb@
VersionDeltaFile
1.695+8-9usr.sbin/bgpd/rde.c
+8-91 files

OpenBSD/src K6Dqx1ausr.sbin/rdate ntp.c rdate.c

   rdate: remove -c option, we don't install the "right" zone files

   This option was non-functional since OpenBSD does not ship with the
   /usr/share/zoneinfo/right time zone files, which include leap
   seconds.  OK dgl@
VersionDeltaFile
1.38+4-22usr.sbin/rdate/ntp.c
1.39+6-11usr.sbin/rdate/rdate.c
1.42+3-7usr.sbin/rdate/rdate.8
1.9+2-2usr.sbin/rdate/Makefile
1.5+1-1usr.sbin/rdate/ntpleaps.h
1.15+1-1usr.sbin/rdate/ntpleaps.c
+17-446 files

OpenBSD/src znDV6yBusr.bin/tmux status.c key-bindings.c

   Make C-[ have the same bindings as Escape for terminals with extended
   keys where they are different, GitHub issue 5035 from Eric NICOLAS.
VersionDeltaFile
1.262+4-1usr.bin/tmux/status.c
1.167+3-1usr.bin/tmux/key-bindings.c
1.63+2-1usr.bin/tmux/menu.c
1.81+2-1usr.bin/tmux/mode-tree.c
+11-44 files

OpenBSD/src CyNIY5Gsys/dev/pci/drm/amd/amdgpu amdgpu_ids.c

   drm/amdgpu: replace PASID IDR with XArray

   From Mikhail Gavrilov
   b7cddf6c017510cd0c79980ea551e7bcdf0edc7e in linux-6.18.y/6.18.25
   3c863ff920b45fa7a9b7d4cb932f466488a87a58 in mainline linux
VersionDeltaFile
1.11+19-20sys/dev/pci/drm/amd/amdgpu/amdgpu_ids.c
+19-201 files

OpenBSD/src 1zk1OFxusr.bin/tmux paste.c

   Sanitize paste buffer names in paste_set and paste_rename, GitHub issue
   5032 from Barrett Ruth.
VersionDeltaFile
1.50+27-8usr.bin/tmux/paste.c
+27-81 files

OpenBSD/src nYBunLAusr.bin/tmux cmd-pipe-pane.c

   Do not leak socketpair fds in pipe-pane when fork fails. From Barrett
   Ruth.
VersionDeltaFile
1.63+3-1usr.bin/tmux/cmd-pipe-pane.c
+3-11 files

OpenBSD/src wr5ORy0usr.bin/tmux window-copy.c

   Do not deref NULL job in window_copy_pipe_run when job_run fails. From
   Barrett Ruth in GitHub issue 5036.
VersionDeltaFile
1.395+3-2usr.bin/tmux/window-copy.c
+3-21 files

OpenBSD/src b9oa0Wxusr.bin/tmux cmd-run-shell.c

   Do not hang run-shell when job_run fails, from Barrett Ruth in GitHub
   issue 5037.
VersionDeltaFile
1.90+11-2usr.bin/tmux/cmd-run-shell.c
+11-21 files

OpenBSD/src upMrRI0usr.bin/tmux cmd-join-pane.c

   Fix -p for for join-pane, from Dane Jensen.
VersionDeltaFile
1.53+2-2usr.bin/tmux/cmd-join-pane.c
+2-21 files

OpenBSD/src 3sYgTZVsys/dev/pci/drm drm_linux.c

   Change xarray pool from IPL_NONE to IPL_TTY as amdgpu will soon use
   it from interrupt context.  Matches the IPL of the IDR pool.
VersionDeltaFile
1.137+2-2sys/dev/pci/drm/drm_linux.c
+2-21 files

OpenBSD/src K2gfQ7Usys/dev/pci/drm/include/linux xarray.h

   use DEFINE_XARRAY_FLAGS() for DEFINE_XARRAY_ALLOC()
VersionDeltaFile
1.10+1-5sys/dev/pci/drm/include/linux/xarray.h
+1-51 files

OpenBSD/src j1zBbhysys/dev/pci/drm/include/linux xarray.h

   add DEFINE_XARRAY_FLAGS() for 6.18.25 drm
VersionDeltaFile
1.9+8-0sys/dev/pci/drm/include/linux/xarray.h
+8-01 files

OpenBSD/src T6gp4CYsys/dev/pci/drm drm_linux.c

   Make xarray cyclic start looking for a free id at the position specified
   by the next argument and stop after wrapping back to that position.

   Previously looking for a free id started at the beginning of the
   allocation range and stopped at the end, ignoring the next argument.

   Currently xarray cyclic id allocations are only used by the GuC code in
   inteldrm.  In 6.18.25 drm, the amdgpu PASID allocation changes from
   using cyclic idr to cyclic xarray.
VersionDeltaFile
1.136+43-10sys/dev/pci/drm/drm_linux.c
+43-101 files

OpenBSD/src ovkS53qusr.sbin/rpki-client parser.c

   adjust style

   OK tb@
VersionDeltaFile
1.180+2-1usr.sbin/rpki-client/parser.c
+2-11 files