OpenBSD/src V4u0xbclib/libssl tls13_record.c

   Allocate TLS 1.3 receive buffers lazily

   The receive buffer is not used for records created for sending. Avoid
   allocating a maximum-sized buffer in tls13_record_new() and instead
   allocate a header-sized buffer when tls13_record_recv() is first called.
   The buffer will grow as needed once the record length is known.

   This avoids an unnecessary allocation for outgoing records and reduces
   the initial allocation size for incoming records.

   ok tb jsing
VersionDeltaFile
1.11+7-14lib/libssl/tls13_record.c
+7-141 files

OpenBSD/src mjMbcuOlibexec/getty ttys.5, sbin/init init.8 init.c

   init(8): remove support for the window= field in /etc/ttys

   This feature was introduced in 4.3BSD, and announced in "Bug Fixes
   and Changes in 4.3BSD", dated April 15, 1986. The feature provided
   a way to start a window system associated with a tty before
   starting getty(8).

   However the implementation has a few negatives and these days
   graphical environments are better started in other ways.

   In particular:
   - the window command is run with root privileges
   - init(8) does not track or supervise the process as part of the
     tty session.
   - reloading /etc/ttys by sending SIGHUP to init, can leave a stale
     window command cached incorrectly
   - repeated reloads leak memory

   Rather than fix all these issues, remove the feature instead.

    [5 lines not shown]
VersionDeltaFile
1.73+2-65sbin/init/init.c
1.16+4-15libexec/getty/ttys.5
1.51+5-5sbin/init/init.8
+11-853 files

OpenBSD/src 2nTIHV2share/mk bsd.own.mk, sys/arch/sparc64/conf Makefile.sparc64

   sys/sparc64: switch the base to LLVM toolchain

   OK: deraadt@
VersionDeltaFile
1.114+9-4sys/arch/sparc64/conf/Makefile.sparc64
1.5+4-4sys/arch/sparc64/stand/bootblk/genassym.sh
1.13+6-1sys/arch/sparc64/stand/Makefile.inc
1.217+3-3share/mk/bsd.own.mk
+22-124 files

OpenBSD/src 4oyugbMlib/libcrypto cert.pem

   update cert.pem based on newer mozilla ca root store, ok tb@
VersionDeltaFile
1.36+192-198lib/libcrypto/cert.pem
+192-1981 files

OpenBSD/src CW6lx0qsys/sys sem.h

   raise defaulfs for kern.seminfo.semmni and semmns to accommodate most
   common use of PostgreSQL.  ok deraadt
VersionDeltaFile
1.31+3-3sys/sys/sem.h
+3-31 files

OpenBSD/src pqjcrBRgnu/llvm/lld/ELF Driver.cpp Writer.cpp

   llvm/sparc64: match BFD -N alignment

   BFD aligns nonpaged PT_LOAD segments to their maximum contained section
   alignment. Do the same for SPARCV9 instead of retaining the 1 MiB
   maximum page alignment.

   This removes roughly 1 MiB of leading padding from ofwboot without
   changing its load address or memory layout.

   OK: deraadt@, kettenis@
VersionDeltaFile
1.12+10-0gnu/llvm/lld/ELF/Writer.cpp
1.26+6-0gnu/llvm/lld/ELF/Driver.cpp
+16-02 files

OpenBSD/src WXx7HEBregress/usr.bin/mandoc/tbl/space man-nogroff.out_ascii man-nogroff.in, usr.bin/mandoc roff.c tbl_layout.c

   Overhaul printing of whitespace before tbl(7) in man(7).
   This is the last major piece i intend to put in for making mandoc(1)
   compatible with groff-1.23.

   In spite of the change in man_term.c 1.194 (August 2022)
   which removed unconditional vertical space before .TS,
   GNU eqn(1) still prints vertical space in some cases
   where the layout contains vertical lines.
VersionDeltaFile
1.1+119-0regress/usr.bin/mandoc/tbl/space/man.in
1.1+62-0regress/usr.bin/mandoc/tbl/space/man.out_ascii
1.1+51-0regress/usr.bin/mandoc/tbl/space/man-nogroff.in
1.280+34-12usr.bin/mandoc/roff.c
1.40+40-6usr.bin/mandoc/tbl_layout.c
1.1+34-0regress/usr.bin/mandoc/tbl/space/man-nogroff.out_ascii
+340-1812 files not shown
+414-4518 files

OpenBSD/src 3YfNPZ4usr.bin/mandoc tbl_html.c

   stop including "roff.h" which this file does not need
VersionDeltaFile
1.37+1-2usr.bin/mandoc/tbl_html.c
+1-21 files

OpenBSD/src t9q8voiusr.bin/tmux spawn.c layout.c

   Add a way for floating panes to stay above zoom (-A) flag. Use by
   default for modal panes to match popups.
VersionDeltaFile
1.370+100-30usr.bin/tmux/window.c
1.150+25-8usr.bin/tmux/cmd-split-window.c
1.78+14-5usr.bin/tmux/cmd-select-pane.c
1.59+7-7usr.bin/tmux/resize.c
1.52+8-5usr.bin/tmux/spawn.c
1.97+9-4usr.bin/tmux/layout.c
+163-595 files not shown
+191-7911 files

OpenBSD/src 8gx324Jsys/net if.c

   SIOCGIFDATA (on most architectures) leaked 4 bytes of kernel stack.

   from deraadt@; from Acts1631

   this is errata/7.9/010_ifioctl.patch.sig
VersionDeltaFile
1.763.2.3+3-1sys/net/if.c
+3-11 files

OpenBSD/src vuvdlHXsys/net if.c

   Backout previous, commit message was wrong.
VersionDeltaFile
1.763.2.2+1-3sys/net/if.c
+1-31 files

OpenBSD/src 4tJ1mDusys/net if.c

   SIOCGIFDATA (on most architectures) leaked 4 bytes of kernel stack.

   from deraadt@; from Acts1631

   this is errata/7.8/046_ifioctl.patch.sig
VersionDeltaFile
1.741.2.3+3-1sys/net/if.c
+3-11 files

OpenBSD/src FN11urRsys/net if.c

   Backout previous, commit message was wrong.
VersionDeltaFile
1.741.2.2+1-3sys/net/if.c
+1-31 files

OpenBSD/src AbyKGVUlib/libexpat Changes, lib/libexpat/lib xmltok_impl.c xmlparse.c

   Backport all changes from libexpat 2.8.3.

   Sources from 2.8.3, header from 2.7.5, no ABI change.
   CVE-2026-45186 CVE-2026-50219 CVE-2026-56131 CVE-2026-56132
   CVE-2026-56403 CVE-2026-56404 CVE-2026-56405 CVE-2026-56406
   CVE-2026-56407 CVE-2026-56408 CVE-2026-56409 CVE-2026-56410
   CVE-2026-56411 CVE-2026-56412 CVE-2026-72522

   this is errata/7.9/014_expat.patch.sig
VersionDeltaFile
1.47.2.1+734-725lib/libexpat/lib/xmlparse.c
1.9.4.1+366-26lib/libexpat/tests/basic_tests.c
1.35.2.1+243-22lib/libexpat/Changes
1.10.4.1+110-4lib/libexpat/tests/misc_tests.c
1.5.4.1+72-17lib/libexpat/tests/handlers.c
1.18.12.1+13-10lib/libexpat/lib/xmltok_impl.c
+1,538-80441 files not shown
+1,708-87547 files

OpenBSD/src RHiW011lib/libexpat Changes, lib/libexpat/lib xmltok.c xmlparse.c

   Backport all changes from libexpat 2.8.3.

   Sources from 2.8.3, header from 2.7.3, no ABI change.
   CVE-2026-45186 CVE-2026-50219 CVE-2026-56131 CVE-2026-56132
   CVE-2026-56403 CVE-2026-56404 CVE-2026-56405 CVE-2026-56406
   CVE-2026-56407 CVE-2026-56408 CVE-2026-56409 CVE-2026-56410
   CVE-2026-56411 CVE-2026-56412 CVE-2026-72522

   this is errata/7.8/050_expat.patch.sig
VersionDeltaFile
1.44.2.4+734-725lib/libexpat/lib/xmlparse.c
1.7.2.3+366-26lib/libexpat/tests/basic_tests.c
1.32.2.4+333-34lib/libexpat/Changes
1.8.2.2+112-5lib/libexpat/tests/misc_tests.c
1.4.2.2+72-17lib/libexpat/tests/handlers.c
1.18.2.1+19-6lib/libexpat/lib/xmltok.c
+1,636-81341 files not shown
+1,805-89347 files

OpenBSD/src SnEYvtqsys/kern tty.c

   TIOCGSID can dereference a freed t_session, because we are storing s_leader
   in the wrong place.  This is a cold hard crash crashes.  Some folk are
   looking at fixing this properly but it will take some time, so in the meantime
   we should just fail the ioctl.

   from deraadt@; from Acts1632, OK kettenis@

   this is errata/7.9/013_ttyioctl.patch.sig
VersionDeltaFile
1.183.2.1+3-1sys/kern/tty.c
+3-11 files

OpenBSD/src YJfVxQNsys/kern tty.c

   TIOCGSID can dereference a freed t_session, because we are storing s_leader
   in the wrong place.  This is a cold hard crash crashes.  Some folk are
   looking at fixing this properly but it will take some time, so in the meantime
   we should just fail the ioctl.

   from deraadt@; from Acts1632, OK kettenis@

   this is errata/7.8/049_ttyioctl.patch.sig
VersionDeltaFile
1.182.2.1+3-1sys/kern/tty.c
+3-11 files

OpenBSD/src 9bGh8sosys/uvm uvm_io.c

   sysctl_proc_args() did not check if uvm_io() returned no data, which
   could result in uninitialised memory being returned. Rather than callers
   of uvm_io() having to carefully check for this condition, treat it as an
   error.

   from dgl@; OK kettenis@; initial report from Acts1631

   this is errata/7.9/012_kernproc.patch.sig
VersionDeltaFile
1.30.14.1+2-2sys/uvm/uvm_io.c
+2-21 files

OpenBSD/src ENKjoWEsys/uvm uvm_io.c

   sysctl_proc_args() did not check if uvm_io() returned no data, which
   could result in uninitialised memory being returned. Rather than callers
   of uvm_io() having to carefully check for this condition, treat it as an
   error.

   from dgl@; OK kettenis@; initial report from Acts1631

   this is errata/7.8/048_kernproc.patch.sig
VersionDeltaFile
1.30.10.1+2-2sys/uvm/uvm_io.c
+2-21 files

OpenBSD/src ldNys2hsys/kern kern_pledge.c

   Don't panic if ni_pledge is unset in pledge_namei.

   from dgl@; OK deraadt@

   this is errata/7.9/011_nipledge.patch.sig
VersionDeltaFile
1.356.2.1+2-2sys/kern/kern_pledge.c
+2-21 files

OpenBSD/src acyo5qgsys/kern kern_pledge.c

   Don't panic if ni_pledge is unset in pledge_namei.

   from dgl@; OK deraadt@

   this is errata/7.8/047_nipledge.patch.sig
VersionDeltaFile
1.333.2.4+2-2sys/kern/kern_pledge.c
+2-21 files

OpenBSD/src gCQjWUqsys/net if.c

   TIOCGSID can dereference a freed t_session, because we are storing s_leader
   in the wrong place.  This is a cold hard crash crashes.  Some folk are
   looking at fixing this properly but it will take some time, so in the meantime
   we should just fail the ioctl.

   from deraadt@; from Acts1632; OK kettenis@

   this is errata/7.9/010_ifioctl.patch.sig
VersionDeltaFile
1.763.2.1+3-1sys/net/if.c
+3-11 files

OpenBSD/src 1kwZVUfsys/net if.c

   TIOCGSID can dereference a freed t_session, because we are storing s_leader
   in the wrong place.  This is a cold hard crash crashes.  Some folk are
   looking at fixing this properly but it will take some time, so in the meantime
   we should just fail the ioctl.

   from deraadt@; from Acts1632; OK kettenis@
VersionDeltaFile
1.741.2.1+3-1sys/net/if.c
+3-11 files

OpenBSD/src ihAA2hbsys/dev/pci/drm/i915/display intel_display_types.h, sys/dev/pci/drm/i915/gt intel_engine_user.c

   remove local patches no longer required after ilog2() changed
VersionDeltaFile
1.10+0-46sys/dev/pci/drm/i915/gt/intel_engine_user.c
1.19+1-2sys/dev/pci/drm/i915/display/intel_display_types.h
1.29+0-2sys/dev/pci/drm/i915/gt/uc/intel_guc_submission.c
+1-503 files

OpenBSD/src dOPpA7Usys/uvm uvm_io.c

   sysctl_proc_args() did not check if uvm_io() returned no data, which
   could result in uninitialised memory being returned. Rather than callers
   of uvm_io() having to carefully check for this condition, treat it as an
   error.

   ok kettenis; initial report from Acts1631
VersionDeltaFile
1.31+2-2sys/uvm/uvm_io.c
+2-21 files

OpenBSD/src CmKGuugsys/dev/pci/drm/amd/amdgpu amdgpu_device.c amdgpu_ttm.c

   Revert "drm/amdgpu: fix aperture mapping leak"

   From Asad Kamal
   a2e326c52c4bcecc033cd3ca2733fdbe30fbf55d in linux-6.18.y/6.18.45
   b96c529cd2551b78316a4afa3237b2ed96ba03c8 in mainline linux
VersionDeltaFile
1.36+25-20sys/dev/pci/drm/amd/amdgpu/amdgpu_ttm.c
1.104+2-0sys/dev/pci/drm/amd/amdgpu/amdgpu_device.c
+27-202 files

OpenBSD/src IqQKn8Fsys/dev/pci/drm/amd/display/dc/hwss/dce110 dce110_hwseq.c

   drm/amd/display: Check for tg ops in dce110_set_avmute

   From Ray Wu
   d089f32d34f821c8f0ef23d5fcd77bd43c1b3b92 in linux-6.18.y/6.18.45
   3141e3d61469bba2624a91c5e2407f110b33b29e in mainline linux
VersionDeltaFile
1.14+4-1sys/dev/pci/drm/amd/display/dc/hwss/dce110/dce110_hwseq.c
+4-11 files

OpenBSD/src UAuMW8Rsys/dev/pci/drm/amd/display/dc/hwss/dce110 dce110_hwseq.c

   drm/amd/display: Add AV mute wait frames to dce110_set_avmute

   From Ray Wu
   8aba384bfc8aac800335f0f458c4e77fc7223e48 in linux-6.18.y/6.18.45
   443290d70b01e9c35830c300e3247c06581b594c in mainline linux
VersionDeltaFile
1.13+20-1sys/dev/pci/drm/amd/display/dc/hwss/dce110/dce110_hwseq.c
+20-11 files

OpenBSD/src J9bDdgusys/kern tty.c

   fix theoretically racy code in ttystats_init

   "makes sense" to deraadt@
VersionDeltaFile
1.186+3-2sys/kern/tty.c
+3-21 files

OpenBSD/src YRdmUJysys/arch/arm64/dev simplebus.c

   Revert bits that git committed accidentally.
VersionDeltaFile
1.25+1-59sys/arch/arm64/dev/simplebus.c
+1-591 files