OpenBSD/src 3ZPCzGElib/libfuse fuse_ops.c

   File systems can provide a pointer to private data to fuse_main(3)
   or fuse_new(3). However, if the file system implements init() then
   this will be replaced by the return value of init(). If a file
   system wants to keep the original value then it can retrieve it by
   calling fuse_get_context(3).

   OK claudio@
VersionDeltaFile
1.44+5-3lib/libfuse/fuse_ops.c
+5-31 files

OpenBSD/src UNEhDaQusr.bin/ssh packet.c

   use sshpkt_fatal instead of plain fatal() for errors in the packet
   code as this provides context of the failing peer (address, port,
   user, etc). Based on patch from Dag-Erling Smørgrav
VersionDeltaFile
1.341+3-3usr.bin/ssh/packet.c
+3-31 files

OpenBSD/src 6Db7mPklib/libfuse fuse.c

   Don't attempt to validate the mount directory during option parsing.
   Instead, check the result of realpath(3) before calling mount(2)
   and rely on this to confirm that it is indeed a directory.

   File systems like ntfs-3g that don't call fuse_parse_cmdline(3)
   will now print an error message if the directory doesn't exist
   rather than silently failing.

   OK claudio@
VersionDeltaFile
1.61+11-26lib/libfuse/fuse.c
+11-261 files

OpenBSD/src zCdQ7G2gnu/usr.bin/perl/dist/Storable Storable.xs

   Fix signed integer overflow in Storable

   Storable for Perl has a signed integer overflow when deserializing
   a crafted SX_HOOK record

   CVE-2026-57433

   https://lists.security.metacpan.org/cve-announce/msg/41780100/
VersionDeltaFile
1.10+4-1gnu/usr.bin/perl/dist/Storable/Storable.xs
+4-11 files

OpenBSD/src 9XG8fqggnu/usr.bin/perl pp_pack.c, gnu/usr.bin/perl/pod perldiag.pod

   Fix integer overflow in perl pack and unpack

   Perl has an integer overflow in S_measure_struct leading to an
   out-of-bounds heap read in pack and unpack.

   CVE-2026-57432

   https://lists.security.metacpan.org/cve-announce/msg/41780102/
VersionDeltaFile
1.12+6-2gnu/usr.bin/perl/pp_pack.c
1.31+6-0gnu/usr.bin/perl/pod/perldiag.pod
+12-22 files

OpenBSD/src xFAZ61wgnu/usr.bin/perl regcomp_study.c

   Fix for incorrect regular expression matches

   Perl produce silently incorrect regular expression matches when an
   alternation of more than 65535 fixed string branches is compiled
   into a trie in Perl_study_chunk

   CVE-2026-13221

   https://lists.security.metacpan.org/cve-announce/msg/41780104/
VersionDeltaFile
1.3+10-0gnu/usr.bin/perl/regcomp_study.c
+10-01 files

OpenBSD/src 7Io3a1Tdistrib/sets/lists/comp md.armv7

   sync
VersionDeltaFile
1.38+0-1distrib/sets/lists/comp/md.armv7
+0-11 files

OpenBSD/src baI1jOvsys/uvm uvm_object.c

   sys/uvm: fix uao_dropswap() index typo

   The loop variable indexes the current pgs[] batch, not the page within
   the object. Pass the fetched page's object offset to uao_dropswap(), as
   the other resident page callers do.

   OK: kettenis@
VersionDeltaFile
1.29+2-2sys/uvm/uvm_object.c
+2-21 files

OpenBSD/src khwkc6Gsys/arch/riscv64/dev smtpmic.c

   Unconditionally set cpuresetfn and powerdownfn.  The K3 firmware that I'm
   currently working with claims to implement the System Reset Extension,
   but the reset doesn't actually work.  Looking at the K1/K3 firmware
   code reveals that the firmware would do the same thing as this driver,
   so overriding these functions should be fine.

   ok jsg@
VersionDeltaFile
1.2+3-5sys/arch/riscv64/dev/smtpmic.c
+3-51 files

OpenBSD/src FmfcDvhusr.bin/tmux cmd-show-options.c tmux.1

   Switch show-options over to using a format and add -F.
VersionDeltaFile
1.75+157-94usr.bin/tmux/cmd-show-options.c
1.1148+25-2usr.bin/tmux/tmux.1
1.15+16-1usr.bin/tmux/hooks.c
1.1414+3-1usr.bin/tmux/tmux.h
+201-984 files

OpenBSD/src R41I0s7sys/arch/riscv64/dev smtclock.c

   Add support for the Spacemit K3 SoC.  Fix a pasto in most of the
   Spacemit K1 UART reset control definitions spotted while working
   on this code.

   ok jsg@
VersionDeltaFile
1.5+216-20sys/arch/riscv64/dev/smtclock.c
+216-201 files

OpenBSD/src fIhjACVusr.bin/tmux key-bindings.c

   Add a menu on empty areas to allow a new pane to be created.
VersionDeltaFile
1.190+6-1usr.bin/tmux/key-bindings.c
+6-11 files

OpenBSD/src mVBris7usr.bin/tmux cmd-show-options.c

   Show user hooks correctly with show-hooks.
VersionDeltaFile
1.74+10-6usr.bin/tmux/cmd-show-options.c
+10-61 files

OpenBSD/src lICvhk2usr.sbin/ospf6d interface.c parse.y

   ospf6d: preserve configured interface type on link update

   When an interface undergoes a link state change (RTM_IFINFO),
   if_update() unconditionally overwrites iface->type based on current
   interface flags. This causes interfaces explicitly configured with "type
   p2p" in ospf6d.conf to revert to broadcast (IF_TYPE_BROADCAST) on link
   bounce.

   Introduce F_IFACE_TYPE to track whether the interface type was set by
   configuration, and only auto-derive the type from interface flags when
   this flag is not set.

   Reported and tested by Atanas Vladimirov.

   OK claudio@
VersionDeltaFile
1.31+8-6usr.sbin/ospf6d/interface.c
1.54+4-2usr.sbin/ospf6d/parse.y
1.53+2-1usr.sbin/ospf6d/ospf6d.h
+14-93 files

OpenBSD/src fDmHtdwusr.sbin/vmd virtio.c

   vmd(8): guard synchronous imsg channel with a mutex.

   Serialize vcpu access to the synchronous imsg channel for communicating
   PCI register access to virtio device child processes. If vmd ever
   becomes MP, VCPUs could interleave during the io emulation on the imsg
   channel.

   Report and original diff by Andrew Griffiths. Modified to move the
   mutex into the global state of the vm process instead of per-device.

   ok hshoexer@
VersionDeltaFile
1.142+27-8usr.sbin/vmd/virtio.c
+27-81 files

OpenBSD/src h3janBfsys/dev/pci if_ice.c if_icevar.h

   ice(4): enable use of 128 DMA segments for TSO packets again

   This diff contains two fixes for the ice_tso_detect_sparse()
   function to prevent the 'Too many data commands' error:

    1. Replace wrong computation of nsegs with already
       specified map->dm_nsegs from the DMA layer.

    2. Reinstate ICE_MAX_TX_SEGS for max. No. of Segments
       per MSS section.

   Tested by bluhm

   OK bluhm@, stsp@
VersionDeltaFile
1.71+10-17sys/dev/pci/if_ice.c
1.12+2-2sys/dev/pci/if_icevar.h
+12-192 files

OpenBSD/src lcpi2Rslib/libcrypto/sha sha3.c

   Improve SHA-3 performance.

   Replace the tiny-sha3 keccakf implementation with an unrolled and
   interleaved algorithm, that is hidden away in an obsolete reference
   implementation.

   This gets us 3.3x speed up on arm64 (Apple M2), a 1.3x speed up on amd64
   (Intel i7-1165G7) and 6x speed up on sparc64 (M3000).

   ok tb@
VersionDeltaFile
1.21+286-42lib/libcrypto/sha/sha3.c
+286-421 files

OpenBSD/src wjwUXznlib/libc/hash sha512.c

   Correctly handle bit count for SHA-512.

   The SHA-512 bit counter is 128 bits - as such, we need to handle overflow
   and increment the second 64 bit field.

   Reported by claudio@

   ok claudio@ tb@
VersionDeltaFile
1.2+6-2lib/libc/hash/sha512.c
+6-21 files

OpenBSD/src LYZ4OFKusr.bin/tmux format.c tmux.1

   Add A modifier to cycle through a series of values, GitHub issue 5412
   from Fernando Daciuk.
VersionDeltaFile
1.408+96-5usr.bin/tmux/format.c
1.1147+21-1usr.bin/tmux/tmux.1
1.499+3-1usr.bin/tmux/server-client.c
1.1413+2-1usr.bin/tmux/tmux.h
+122-84 files

OpenBSD/src vIwrecIlibexec/getty gettytab.5

   gettytab(5): remove old references to pp

   tedu@ removed PPP support back in 2015. Sync the man page to match current
   reality.

   ok millert@, dlg@
VersionDeltaFile
1.29+2-11libexec/getty/gettytab.5
+2-111 files

OpenBSD/src YYBvYC5regress/usr.bin/ssh cfgparse.sh

   Automatically detect IPv6 support and test IPv6 parsing if found.
   This should always be enabled on OpenBSD, but allows us to use the same
   test in Portable without modifications that make syncs harder.
VersionDeltaFile
1.12+13-8regress/usr.bin/ssh/cfgparse.sh
+13-81 files

OpenBSD/src n88lT5xregress/usr.bin/ssh cfgparse.sh

   Factor out all of the IPv6 addresses into variables.  This lets us skip them
   in Portable on platforms that don't support IPv6 all in one place, removing
   diffs from within the tests themselves and making syncs easier.
VersionDeltaFile
1.11+16-7regress/usr.bin/ssh/cfgparse.sh
+16-71 files

OpenBSD/src oHKRvyZlibexec/getty subr.c

   getty(8): IXANY is an input flag, not a local flag

   The dx gettytab capability was a no-op, fix this so the capability behaves
   as intended.

   Original fix was submitted by Piotr Durlej in 2024. We applied half of
   that fix at the time. Now apply the other half of the originally submitted
   fix.

   ok millert@
VersionDeltaFile
1.30+3-3libexec/getty/subr.c
+3-31 files

OpenBSD/src AvVFSoIusr.sbin/bgpd rde_update.c

   If a session drops from add-path send to no add-path send then the
   adj-rib-out needs extra cleanup in up_generate_updates().

   In the EVAL_SYNC case up_generate_updates() should check if the
   adjout_prefix (p) returned was for an add-path path. This is the case if
   path_id_tx is not 0. In that case withdraw all paths before calling
   up_process_prefix().

   The add-path side already does this by default.

   OK tb@
VersionDeltaFile
1.203+13-1usr.sbin/bgpd/rde_update.c
+13-11 files

OpenBSD/src GZwuqb0usr.sbin/vmd vmd.c vioqcow2.c

   vmd(8): check for under reads/writes when copying qcow2 clusters.

   Report and original diff by Andrew Griffiths. Corrected to handle
   logging when errno was not set by pread(2)/pwrite(2).

   ok hshoexer@, mlarkin@, bluhm@
VersionDeltaFile
1.178+18-8usr.sbin/vmd/vmd.c
1.29+10-3usr.sbin/vmd/vioqcow2.c
1.53+5-3usr.sbin/vmd/control.c
+33-143 files

OpenBSD/src g9TVka4sys/arch/powerpc/include elf.h, sys/arch/powerpc64/include elf.h

   Set flags for Power ISA 2.06, 2.07, isel, and vec crypto

   These are for elf_aux_info(3) AT_HWCAP or AT_HWCAP2.  The vec crypto
   flag is for accelerating AES and SHA-2.  Some ports check these flags,
   or will check them if they get patched to call elf_aux_info.

   Define PPC_FEATURE2_VEC_CRYPTO with the same value as
   PPC_FEATURE2_HAS_VEC_CRYPTO, because I have seen code using the name
   without HAS.

   ok kettenis@
VersionDeltaFile
1.31+6-4sys/arch/powerpc64/powerpc64/cpu.c
1.4+2-1sys/arch/powerpc/include/elf.h
1.4+2-1sys/arch/powerpc64/include/elf.h
+10-63 files

OpenBSD/src HJRfzmtsys/netinet6 in6_ifattach.c

   netinet6: keep negotiated IPv6CP IFID unchanged for link-local address

   When sppp/PPPoE installs a peer-suggested IPv6CP interface identifier,
   in6_ifattach_linklocal() forced EUI64 G/U bit adjustments on the
   provided IFID. This unconditionally set the universal bit, rewriting a
   valid negotiated IFID like ::1 into ::200:0:0:1, yielding
   fe80::200:0:0:1 instead of fe80::1.

   RFC 5072 Section 5 specifies that the PPP link-local address is formed
   using the negotiated Interface Identifier as-is. Skip EUI64 bit
   modification on point-to-point interfaces. Non-P2P callers retain
   existing behaviour, while callers passing NULL continue using
   in6_get_ifid().

   Reported by Martin Crossley <admin AT crossleys DOT biz>.

   OK stsp@
VersionDeltaFile
1.126+7-3sys/netinet6/in6_ifattach.c
+7-31 files

OpenBSD/src X9158Ezusr.bin/tmux screen-redraw.c

   Clip floating panes exactly at window edge, don't let the border creep
   into the first outside column.
VersionDeltaFile
1.155+7-5usr.bin/tmux/screen-redraw.c
+7-51 files

OpenBSD/src xm7hXe3usr.bin/tmux window.c

   Invalidate scene when window is resized.
VersionDeltaFile
1.367+2-2usr.bin/tmux/window.c
+2-21 files

OpenBSD/src iAHP0bMusr.bin/tmux tmux.1 cmd-split-window.c

   Add a -C flag to new-pane to have a modal pane close when the mouse is
   clicked outside it, GitHub issue 5400.
VersionDeltaFile
1.1146+6-3usr.bin/tmux/tmux.1
1.146+5-3usr.bin/tmux/cmd-split-window.c
1.498+6-1usr.bin/tmux/server-client.c
1.1412+2-1usr.bin/tmux/tmux.h
+19-84 files