CVSROOT: /cvs Module name: ports Changes by: tb@cvs.openbsd.org 2024/03/10 01:05:58 Modified files: lang/go : go.port.mk Log message: Bump _MODGO_SYSTEM_VERSION after go update CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/10 06:23:57 Modified files: devel/rebar3 : Makefile Log message: bump REVISION, hopefully pkgpath will now be consistent CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/10 07:25:10 Modified files: sys/conf : GENERIC Log message: disable POOL_DEBUG for release ok deraadt@ CVSROOT: /cvs Module name: ports Changes by: kn@cvs.openbsd.org 2024/03/10 08:58:31 Modified files: textproc/goldendict-ng: Makefile Log message: USE_NOBTCFI=Yes due to Qt6 WebEngine; OK sthen Otherwise searching Wictionary results in SIGILL without core dump. CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2024/03/10 09:37:54 Modified files: sys/arch/armv7/stand/efiboot: conf.c exec.c Log message: Invalidating the D-cache after disabling it turned out to be a bad idea and broke Allwinner SoCs with Cortex-A7 cores. So skip that and also invalidate the I-cache before disabling it. This seems to work better on a wide range of boards. ok deraadt@, jmatthew@ CVSROOT: /cvs Module name: www Changes by: tj@cvs.openbsd.org 2024/03/10 12:46:16 Modified files: . : plus.html plus20.html plus21.html plus22.html plus23.html plus24.html plus25.html plus26.html plus27.html plus28.html plus29.html plus30.html plus31.html plus32.html plus33.html plus34.html plus35.html plus36.html plus37.html plus38.html plus39.html plus40.html plus41.html plus42.html plus43.html plus44.html plus45.html plus46.html plus47.html plus48.html plus49.html plus50.html plus51.html plus52.html plus53.html plus54.html plus55.html plus56.html plus57.html plus58.html plus59.html plus60.html plus61.html plus62.html plus63.html plus64.html plus65.html plus66.html plus67.html plus68.html plus69.html plus70.html plus71.html plus72.html plus73.html Log message: reroll plus pages for 7.5 CVSROOT: /cvs Module name: www Changes by: tj@cvs.openbsd.org 2024/03/10 12:46:50 Modified files: . : errata.html errata20.html errata21.html errata22.html errata23.html errata24.html errata25.html errata26.html errata27.html errata28.html errata29.html errata30.html errata31.html errata32.html errata33.html errata34.html errata35.html errata36.html errata37.html errata38.html errata39.html errata40.html errata41.html errata42.html errata43.html errata44.html errata45.html errata46.html errata47.html errata48.html errata49.html errata50.html errata51.html errata52.html errata53.html errata54.html errata55.html errata56.html errata57.html errata58.html errata59.html errata60.html errata61.html errata62.html errata63.html errata64.html errata65.html errata66.html errata67.html errata68.html errata69.html errata70.html errata71.html errata72.html errata73.html errata74.html Added files: . : errata75.html Log message: add 7.5 errata page CVSROOT: /cvs Module name: www Changes by: kmos@cvs.openbsd.org 2024/03/10 22:07:54 Modified files: . : plus.html Log message: Plus through 2024-03-08 From pamela CVSROOT: /cvs Module name: src Changes by: djm@cvs.openbsd.org 2024/03/10 22:59:47 Modified files: usr.bin/ssh : version.h Log message: openssh-9.7 CVSROOT: /cvs Module name: ports Changes by: stsp@cvs.openbsd.org 2024/03/11 02:22:32 Modified files: devel/got : Makefile distinfo Log message: update to got 0.97 see git repository history for per-change authorship information - improve error messages shown upon execv failure - fix 'gotadmin pack' crash upon Ctrl-C due to invalid imsg_free() - significantly speed up deltification of large files - improve error handling in got_privsep_recv_imsg() CVSROOT: /cvs Module name: ports Changes by: semarie@cvs.openbsd.org 2024/03/11 03:07:30 Modified files: sysutils/sysclean: Makefile distinfo Log message: sysutils/sysclean: update to 3.8 - accounting files are expected to be present by default now ok sthen@ CVSROOT: /cvs Module name: www Changes by: djm@cvs.openbsd.org 2024/03/11 04:36:58 Added files: openssh/txt : release-9.7 Log message: release notes for OpenSSH 9.7 CVSROOT: /cvs Module name: www Changes by: djm@cvs.openbsd.org 2024/03/11 04:39:58 Modified files: build : Makefile build/mirrors : openssh-ftp.html.head openssh : ftp.html index.html openbsd.html releasenotes.html openssh/txt : release-9.7 Log message: openssh-9.7 CVSROOT: /cvs Module name: www Changes by: dlg@cvs.openbsd.org 2024/03/11 04:57:38 Modified files: . : want.html Log message: i've got an r6c now, thank you CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2024/03/11 08:25:50 Modified files: telephony/baresip/baresip: Makefile Removed files: telephony/baresip/baresip/patches: patch-cmake_modules_cmake Log message: telephony/baresip/baresip: make sure pipewire isnt picked up drop patch and use -DCMAKE_DISABLE_FIND_PACKAGE_ trick instead (from kn@) build failure reported by ajacoutot@ ok sthen@ kn@ CVSROOT: /cvs Module name: src Changes by: sthen@cvs.openbsd.org 2024/03/11 10:35:48 Modified files: usr.sbin/unbound/util/data: msgencode.c Log message: apply https://nlnetlabs.nl/downloads/unbound/patch_CVE-2024-1931.diff to unbound, fixing an indefinite loop that could be triggered by a client against an unbound server where the (non-default) configuration "ede: yes" is used. https://nlnetlabs.nl/downloads/unbound/CVE-2024-1931.txt ok florian@ CVSROOT: /cvs Module name: ports Changes by: gnezdo@cvs.openbsd.org 2024/03/11 12:31:49 Modified files: textproc/pandoc: Makefile distinfo Log message: Update to pandoc 3.1.12.2 by maintainer from Evan Silberman ok naddy@ CVSROOT: /cvs Module name: src Changes by: deraadt@cvs.openbsd.org 2024/03/11 19:20:30 Modified files: sys/conf : newvers.sh Log message: moving on to 7.5-current CVSROOT: /cvs Module name: src Changes by: guenther@cvs.openbsd.org 2024/03/11 20:31:15 Modified files: sys/arch/amd64/amd64: vmm_machdep.c Log message: Correct handling of cpuid(0xd) subleaves, carefully hiding bits and sizes that the host does not intend to expose, but do expose xsaveopt and xgetbv(1). ok dv@ CVSROOT: /cvs Module name: ports Changes by: aisha@cvs.openbsd.org 2024/03/11 20:31:43 Modified files: security/lego : Makefile distinfo modules.inc Log message: update to 4.16.1 from Horia Racoviceanu maintainer CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/11 23:40:37 Modified files: sys/dev/pci/drm/amd/pm/legacy-dpm: amdgpu_si_dpm.c Log message: Revert "drm/amd/pm: resolve reboot exception for si oland" From Alex Deucher baac292852c0e347626fb5436916947188e5838f in linux-6.6.y/6.6.21 955558030954b9637b41c97b730f9b38c92ac488 in mainline linux CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/11 23:42:37 Modified files: sys/dev/pci/drm: drm_buddy.c Log message: drm/buddy: fix range bias From Matthew Auld 5e476625fa8a36d7483ec3396a2bd124c2c02066 in linux-6.6.y/6.6.21 f41900e4a6ef019d64a70394b0e0c3bd048d4ec8 in mainline linux CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/11 23:46:09 Modified files: sys/dev/pci/drm/amd/display/amdgpu_dm: amdgpu_dm_helpers.c Log message: drm/amd/display: Add monitor patch for specific eDP From Ryan Lin 82dacc26e15cbac7f64a30ad4bc2c414f78eaa8f in linux-6.6.y/6.6.21 b7cdccc6a849568775f738b1e233f751a8fed013 in mainline linux CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2024/03/12 07:32:53 Modified files: sys/arch/arm64/arm64: db_trace.c exception.S Log message: Fix the "fake" frame that we create alongside the trapframe. This fixes backtraces through trap franes. Adjust the code that prints backtraces in ddb as the old code now tries to access a userland address. ok mpi@ CVSROOT: /cvs Module name: src Changes by: job@cvs.openbsd.org 2024/03/12 10:02:30 Modified files: usr.sbin/rpki-client: http.c Log message: Enforce same-origin policy for HTTP redirects Isolate resources from different RRDP servers to avoid inappropriately increasing resource consumption for both RRDP clients and the referenced server. OK claudio@ tb@ CVSROOT: /cvs Module name: src Changes by: job@cvs.openbsd.org 2024/03/12 10:03:56 Modified files: regress/usr.sbin/rpki-client: test-http.c regress/usr.sbin/rpki-client/libressl: Makefile Log message: Add regress for cross-origin HTTP redirection CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2024/03/12 10:26:46 Modified files: sys/dev/mii : ytphy.c Log message: Configure the signal on the CLKOUT pin of the YT8531 PHY when we're instructed to do so by the device tree. ok patrick@ CVSROOT: /cvs Module name: src Changes by: cheloha@cvs.openbsd.org 2024/03/12 11:22:24 Modified files: usr.sbin/btrace: ksyms.c Log message: btrace(8): cache ELF .symtab, .strtab entries in sorted array Currently, every kelf_snprintsym() call performs a linear search through the .symtab for a matching symbol. The search is very costly and causes btrace(8) to drop a lot of profiling events. Storing the STT_FUNC .symtab entries and their corresponding .strtab entries in a sorted array cuts the lookup cost from O(n) to O(lg n). Lower overhead reduces the drop rate for profiling events. With tweaks from mpi@. Thread: https://marc.info/?l=openbsd-tech&m=170830125132105&w=2 probably ok mpi@ CVSROOT: /cvs Module name: ports Changes by: robert@cvs.openbsd.org 2024/03/12 15:30:09 Modified files: net/zabbix : Makefile distinfo net/zabbix/patches: patch-include_zbx_dbversion_constants_h Log message: update to 6.4.11; fixes compatibility with timescaledb from Mark Patruck; ok naddy@ CVSROOT: /cvs Module name: src Changes by: bluhm@cvs.openbsd.org 2024/03/12 15:31:29 Modified files: regress/sys/netinet6/frag6: LICENSE Makefile Added files: regress/sys/netinet6/frag6: frag6_oversize.py frag6_unfragsize.py Log message: Add regress test showing that OpenBSD IPv6 fragment reassembly is not affected by FreeBSD-SA-23:06.ipv6 security advisory. Scapy test frag6_oversize.py reassembles fragments of a packet too big to fit. Test frag6_unfragsize.py also plays games with ECN bits and hop-by-hop extension header to check overflow protection. ICMP6 parameter problem responses are expected. As pf does not generate such ICMP6 error packets, these tests are only run with frag6_input() in the IPv6 stack. CVSROOT: /cvs Module name: ports Changes by: jsg@cvs.openbsd.org 2024/03/12 18:22:15 Modified files: sysutils/firmware/intel: Makefile distinfo sysutils/firmware/intel/pkg: PLIST Log message: update intel microcode to 20240312 release notes: https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240312 ok sthen@ CVSROOT: /cvs Module name: src Changes by: deraadt@cvs.openbsd.org 2024/03/13 04:02:37 Modified files: etc/root : root.mail Log message: mail(1) is very sensitive to spacing in the header, and sometimes when we manually edit this file we forget that. noticed by naddy CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2024/03/13 05:18:42 Modified files: regress/usr.bin/lastcomm: gadget.S Log message: Add endbr64/bti instruction at the start of the gadget, otherwise we'll get a SIGILL when the gadget gets call. Fix the instruction that sets the syscall number on arm64. ok anton@, deraadt@ CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2024/03/13 05:25:50 Modified files: usr.bin/tmux : tmux.1 Log message: Make the attach-session description clearer - do not mention creating a client which is not important, explicitly say the session must exist, and mention new-session and new-session -A. Prompted by Theo. CVSROOT: /cvs Module name: src Changes by: bluhm@cvs.openbsd.org 2024/03/13 07:13:57 Modified files: sys/dev/dt : dt_prov_profile.c Log message: Fix potential NULL pointer dereference in dt(4). When initializing the profiling probes, check if we sucessfully allocated the probe, before registering it. This avoids a NULL pointer dereference when probe allocation has failed. from Christian Ludwig CVSROOT: /cvs Module name: src Changes by: bluhm@cvs.openbsd.org 2024/03/13 08:43:31 Modified files: sys/conf : GENERIC Log message: enable POOL_DEBUG after 7.5 release OK deraadt@ CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2024/03/13 08:57:08 Modified files: sys/arch/arm64/arm64: machdep.c Log message: Expose BTI support to userland. ok deraadt@ CVSROOT: /cvs Module name: ports Changes by: robert@cvs.openbsd.org 2024/03/13 12:48:29 Modified files: www/chromium : Makefile www/iridium : Makefile www/ungoogled-chromium: Makefile Added files: www/chromium/patches: patch-media_base_libaom_thread_wrapper_cc www/ungoogled-chromium/patches: patch-media_base_libaom_thread_wrapper_cc Log message: switch over the chromium ports to use multimedia/aom to pick up endbr64 fixes iridium does not need the thread wrapper patch as it does not include that code yet tested by sthen@ and me, ok naddy@ CVSROOT: /cvs Module name: www Changes by: op@cvs.openbsd.org 2024/03/13 13:58:20 Modified files: . : 75.html Log message: smtpd changes CVSROOT: /cvs Module name: src Changes by: cheloha@cvs.openbsd.org 2024/03/13 18:54:54 Modified files: usr.sbin/btrace: ksyms.c Log message: Revert "btrace(8): cache ELF .symtab, .strtab entries in sorted array" "No it's not okay." mpi@ CVSROOT: /cvs Module name: src Changes by: job@cvs.openbsd.org 2024/03/14 00:23:14 Modified files: usr.bin/ssh : ssh.1 Log message: Clarify how literal IPv6 addresses can be used in -J mode OK djm@ CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2024/03/14 08:29:03 Modified files: regress/sys : Makefile Log message: Hook up the btcfi test. CVSROOT: /cvs Module name: src Changes by: bluhm@cvs.openbsd.org 2024/03/14 11:35:37 Modified files: lib/libexpat/lib: xmlparse.c Log message: Cerry-pick fix for CVE-2024-28757 from libexpat. Detect billion laughs attack with isolated external parser. github commit 1d50b80cf31de87750103656f6eb693746854aa8 OK deraadt@ CVSROOT: /cvs Module name: src Changes by: bluhm@cvs.openbsd.org 2024/03/14 13:37:40 Modified files: lib/libexpat : Changes lib/libexpat/tests: acc_tests.c Log message: Change log and regress test for expat billion laughs attack. CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/14 16:09:40 Modified files: lib/libcrypto/man: CRYPTO_lock.3 Log message: Add back a .Pp CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/14 16:19:12 Modified files: lib/libcrypto/man: X509_STORE_set1_param.3 Log message: Mark up X509_STORE_get1_objects() CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/14 17:54:55 Modified files: lib/libcrypto/man: EVP_CIPHER_do_all.3 Log message: Add missing Nm entries for OBJ_NAME_do_all* CVSROOT: /cvs Module name: src Changes by: job@cvs.openbsd.org 2024/03/14 21:38:59 Modified files: usr.sbin/rpki-client: constraints.c Log message: Log which of the constraints files triggered a violation Requested by Ties de Kock (RIPE NCC) OK tb@ CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/14 23:14:16 Modified files: usr.sbin/rpki-client: constraints.c Log message: whitespace CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2024/03/15 07:26:09 Modified files: sys/arch/arm64/arm64: cpu.c trampoline.S Log message: According to errata AC03_CPU_12, AmpereOne needs the loopy branches with a loop count of 11 to mitigate Spectre-BHB. And it seems Cortex-A57 was missed when Spectre-BHB mitigation support was added, so add it here as well. ok jsg@ CVSROOT: /cvs Module name: src Changes by: kn@cvs.openbsd.org 2024/03/15 10:29:32 Modified files: distrib/miniroot: install.sub Log message: Move code into new stop_watchdog() We have {reset,start}_watchdog() which are only used in unattended upgrade code, but stopping the background timer is done inline for all upgrades, incl. interactive ones. Relocate it out of the very end of do_upgrade() right after its only caller and limit it to unattended upgrades to match where/how the timer is started. OK afresh1 CVSROOT: /cvs Module name: src Changes by: kn@cvs.openbsd.org 2024/03/15 11:31:21 Modified files: distrib/miniroot: install.sub Log message: Backout "Move code into new stop_watchdog()" An upgrade stalled on me, either my testing was flawed or my diff is... Having stop_watchdog() is fine, but calling it in a different place has is apparently too subtle for me to get right. CVSROOT: /cvs Module name: src Changes by: stsp@cvs.openbsd.org 2024/03/15 11:45:36 Modified files: sys/net80211 : ieee80211_input.c Log message: Ignore ADDBA requests if we are not ready to receive data frames. This prevents potential firmware errors in Intel wifi drivers when APs send an ADDBA request before the driver's state machine has settled into RUN state. The driver's addba task would race the driver's newstate task, and the hardware would see an incorrect sequence of commands. Ignoring an early ADDBA request is harmless. The AP will retry later. Reported by zxystd from the OpenIntelWireless project, thanks! ok phessler@ CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/15 15:32:21 Modified files: lib/libz : deflate.c gzguts.h gzlib.c Log message: zlib: sync with upstream More Windows #ifdef shuffling. Only one change relevant for OpenBSD: Make deflateBound() more conservative and handle Z_STREAM_END. CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/15 15:32:54 Modified files: sys/lib/libz : deflate.c Log message: zlib: sync with src CVSROOT: /cvs Module name: src Changes by: op@cvs.openbsd.org 2024/03/15 15:52:20 Modified files: usr.sbin/smtpd : mda_unpriv.c Log message: set ORIGINAL_RECIPIENT in the environment of mda scripts mostly for compatibility with postfix since some mdas (like public-inbox) make use of it. diff from Philipp (philipp+openbsd [at] bureaucracy [dot] de) ok gilles@ CVSROOT: /cvs Module name: src Changes by: op@cvs.openbsd.org 2024/03/15 15:56:22 Modified files: usr.sbin/smtpd : smtpd.conf.5 Log message: add some initial documentation regarding MDAs this adds some initial commentary for how MDAs should behave and in what environment they are executed. diff from Philipp (philipp+openbsd [at] bureaucracy [dot] de) with some tweaks from Richard Toohey and me. ok gilles@ CVSROOT: /cvs Module name: src Changes by: millert@cvs.openbsd.org 2024/03/15 20:00:31 Modified files: usr.bin/whois : whois.1 whois.c Log message: whois: trim output after ">>> Last update of WHOIS database:" Currently, whois(1) displays the full output it receives from the server. With this change, any text after a line starting with ">>> Last update of WHOIS database:" is dropped. This trims a lot of useless text that would otherwise cause the data you care about to scroll off the screen. From FreeBSD. OK deraadt@ CVSROOT: /cvs Module name: src Changes by: job@cvs.openbsd.org 2024/03/15 23:18:01 Modified files: distrib/sets/lists/base: mi distrib/sets/lists/etc: mi Log message: Move RPKI Trust Anchor constraints from etc set to base The cadence of updates being applied to the RPKI Trust Anchor constraints seems sufficiently low, while the required understanding of context to make educated decisions quite high, so centralized coordination of updates through tech@openbsd.org is more appropriate. requested by & OK deraadt@, OK tb@ CVSROOT: /cvs Module name: src Changes by: jmc@cvs.openbsd.org 2024/03/16 00:29:36 Modified files: usr.bin/whois : whois.c Log message: add -S to usage(); CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/16 03:15:04 Modified files: sys/arch/arm64/arm64: cpu.c Log message: recognise Cortex-A520AE (Hayes AE), Cortex-A720AE (Hunter AE) CVSROOT: /cvs Module name: src Changes by: cheloha@cvs.openbsd.org 2024/03/16 11:42:37 Modified files: usr.sbin/btrace: ksyms.c Log message: btrace(8): cache ELF symbols in sorted array Currently, every kelf_snprintsym() call performs a linear search through the .symtab for a symbol matching the given PC. The search is expensive and seems to be a major source of dropped profiling events. Storing all STT_FUNC .symtab entries and their names in a sorted array cuts search time from O(n) to O(lg n). In practice, the faster lookups seem to dramatically reduce the profiling drop rate. With tweaks from mpi@. Thread: https://marc.info/?l=openbsd-tech&m=170830125132105&w=2 ok mpi@ CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/16 14:42:33 Modified files: lib/libcrypto/bn: bn_rand.c Log message: Fix signed integer overflow in bnrand() If more bits than INT_MAX - 7 are requested, the calculation of number of bytes required to store the bignum triggers undefined behavior due to signed integer overflow. This will typically result in bytes becoming negative which will then make malloc() fail. If the ulimit should be high enough to make malloc() succeed, there is a bad out of bounds write in case bottom is set (an odd number was requested). On jsing's request this does not deal with another bug which we could catch with a similar check due to BN_bn2bin() failing later on as the number of words in a BIGNUM is some fraction of INT_MAX. ok jsing CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2024/03/16 14:46:28 Modified files: sys/arch/arm64/arm64: locore.S sys/arch/arm64/include: hypervisor.h Log message: Set the HCR_API and HCR_APK bits in the HCR_EL2 when CPUs boot in EL2. Otherwise using PAC instructions in EL1 will trigger a trap into EL2 that we don't handle. ok jsg@, deraadt@ CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/16 15:42:20 Modified files: lib/libcrypto : cversion.c Log message: Remove ugly parens and thereby fix KNF CVSROOT: /cvs Module name: src Changes by: patrick@cvs.openbsd.org 2024/03/16 18:06:43 Modified files: sys/dev/mii : eephy.c Log message: Some PHYs need board-specific initializations, e.g. to correctly configure LED settings, which might be stored in the marvell,reg-init property. With these applied, the LEDs on the SolidRun ClearFog CN9130 Base work correctly. ok kettenis@ CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/16 19:44:59 Modified files: usr.sbin/rpki-client: extern.h Log message: Remove unused enum rsc_resourceblock_tag This was used in rsc.c prior to the switch to ASN.1 templates. ok job CVSROOT: /cvs Module name: src Changes by: guenther@cvs.openbsd.org 2024/03/16 23:49:41 Modified files: sys/arch/amd64/amd64: cpu.c identcpu.c locore.S vmm_support.S sys/arch/amd64/include: specialreg.h Log message: Use VERW to mitigate the RFDS (Register File Data Sampling) vulnerability present in Intel Atom CPUs, reordering some ASM in return-to-userspace and start/resume-vmx-guest to reduce the number of kernel values still live in registers when VERW is used. This mitigation requires updated firmware which has affected CPUs report RFDS_CLEAR in dmesg. Firmware packaging by jsg@ and sthen@ Logic for interpreting intel's flags by jsg@ after lots of discussion between him, deraadt@, and I ok deraadt@ CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/17 01:10:00 Modified files: lib/libcrypto/rsa: rsa_ameth.c Log message: Annotate RSA-PSS SHA parameter encoding as wrong A historic blunderfest in the ASN.1 module for RSA-PSS led to very confusing text in various RFCs. davidben and my current reading of this is that parameters for SHA-* should be encoded as an ASN.1 NULL rather than omitted. The use of X509_ALGOR_set_evp_md() leads to them being omitted, and is therefore counter to the specification (but allowed. We should fix this. For now, leave a reminder. See https://boringssl-review.googlesource.com/c/boringssl/+/67088 for a lot more details. ok davidben CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2024/03/17 07:05:40 Modified files: sys/arch/arm64/arm64: cpu.c machdep.c sys/arch/arm64/include: armreg.h Log message: The feature is called SSBS instead of SBSS. CVSROOT: /cvs Module name: www Changes by: naddy@cvs.openbsd.org 2024/03/17 13:30:47 Modified files: . : 75.html Log message: 12309 amd64 packages CVSROOT: /cvs Module name: src Changes by: mvs@cvs.openbsd.org 2024/03/17 13:47:08 Modified files: sys/kern : uipc_usrreq.c Log message: Do UNP_CONNECTING and UNP_BINDING flags check in uipc_listen() and return EINVAL if set. This prevents concurrent solisten() thread to make this socket listening while socket is unlocked. Reported-by: syzbot+4acfcd73d15382a3e7cf@syzkaller.appspotmail.com ok mpi CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2024/03/17 14:06:28 Modified files: security/nss : Makefile distinfo Log message: security/nss: update to 3.99, required by gecko 125 see https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_99.html bump minor for some func additions in libsmime3 CVSROOT: /cvs Module name: ports Changes by: kn@cvs.openbsd.org 2024/03/17 14:16:52 Modified files: net/tdesktop : Makefile Log message: complete and sort bundle license markers, tidy up a bit CVSROOT: /cvs Module name: ports Changes by: kn@cvs.openbsd.org 2024/03/17 14:19:07 Modified files: devel/abseil-cpp: Makefile distinfo Log message: update to abseil-cpp 20240116.1 (one macOS change, pure maintainer chore) CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2024/03/17 14:20:33 Modified files: x11/x2goclient : Makefile distinfo x11/x2goclient/patches: patch-Makefile patch-x2goclient_pro x11/x2goclient/pkg: PLIST Log message: x11/x2goclient: update to 4.1.2.3. ok rsadowski@ (MAINTAINER) CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/17 14:25:35 Modified files: x11/icewm : Makefile distinfo x11/icewm/patches: patch-src_default_h Log message: update to icewm-3.4.6 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/17 14:25:38 Modified files: mail/dovecot-fts-flatcurve: Makefile distinfo Log message: update to dovecot-fts-flatcurve-1.0.2 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/17 14:25:41 Modified files: x11/evilwm : Makefile distinfo x11/evilwm/pkg : DESCR Log message: update to evilwm-1.4.3 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/17 14:25:50 Modified files: telephony/pjsua: Makefile distinfo Log message: update to pjsip-2.14.1 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/17 14:25:53 Modified files: sysutils/borgmatic: Makefile distinfo sysutils/borgmatic/pkg: PLIST Log message: update to borgmatic-1.8.9 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/17 14:25:56 Modified files: net/libunbound : Makefile distinfo Log message: update to libunbound-1.19.3 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/17 14:27:11 Modified files: net/eduvpn/vpn-user-portal: Makefile distinfo net/eduvpn/vpn-user-portal/pkg: PLIST Log message: update to vpn-user-portal-3.5.7 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/17 14:27:16 Modified files: lang/php/8.3 : Makefile distinfo Log message: update to php-8.3.4 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/17 14:27:18 Modified files: lang/php/8.2 : Makefile distinfo Log message: update to php-8.2.17 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/17 14:27:59 Modified files: www/tomcat/v9 : Makefile distinfo Log message: update to tomcat-9.0.87 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/17 14:28:40 Modified files: www/tomcat : Makefile Removed files: www/tomcat/v8 : Makefile distinfo www/tomcat/v8/patches: patch-conf_server_xml www/tomcat/v8/pkg: DESCR-examples DESCR-main PLIST-examples PLIST-main README-main tomcat.rc Log message: remove nearly EoL tomcat v8 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/17 14:29:37 Modified files: www/libsass : Makefile distinfo www/libsass/pkg: DESCR Log message: update to libsass-3.6.6 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/17 14:29:40 Modified files: www/py-urllib3 : Makefile distinfo www/py-urllib3/pkg: PLIST Log message: update to py3-urllib3-1.26.18 CVSROOT: /cvs Module name: ports Changes by: tb@cvs.openbsd.org 2024/03/17 14:43:28 Modified files: security/rust-openssl-tests: Makefile crates.inc distinfo security/rust-openssl-tests/patches: patch-openssl-sys_build_main_rs security/rust-openssl-tests/pkg: PLIST Log message: Update to rust-openssl-tests 20240318 CVSROOT: /cvs Module name: ports Changes by: daniel@cvs.openbsd.org 2024/03/17 17:02:36 Modified files: devel/ipython : Makefile distinfo Removed files: devel/ipython/patches: patch-examples_IPython_Kernel_ipython_desktop Log message: update ipython to 8.22.2 CVSROOT: /cvs Module name: ports Changes by: daniel@cvs.openbsd.org 2024/03/17 17:11:31 Modified files: devel/py-jupyter_client: Makefile distinfo devel/py-jupyter_client/patches: patch-jupyter_client_connect_py Log message: update jupyter_client to 8.6.1 CVSROOT: /cvs Module name: ports Changes by: daniel@cvs.openbsd.org 2024/03/17 17:14:01 Modified files: devel/py-jupyter_core: Makefile distinfo Log message: update jupyter_core to 5.7.2 CVSROOT: /cvs Module name: ports Changes by: daniel@cvs.openbsd.org 2024/03/17 17:52:15 Modified files: sysutils/py-watchdog: Makefile distinfo sysutils/py-watchdog/pkg: PLIST Log message: update watchdog to 2.3.1; needed to update werkzeug CVSROOT: /cvs Module name: xenocara Changes by: kettenis@cvs.openbsd.org 2024/03/17 18:15:10 Modified files: lib/mesa/src/gallium/auxiliary/gallivm: lp_bld_init.c lp_bld_misc.cpp lp_bld_misc.h Log message: Tell LLVM to generate code with BTI instructions. "looks ok" jsg@, ok deraadt@ CVSROOT: /cvs Module name: ports Changes by: daniel@cvs.openbsd.org 2024/03/17 21:58:01 Modified files: devel/py-ipykernel: Makefile distinfo devel/py-ipykernel/pkg: PLIST Log message: update ipykernel to 6.29.3 CVSROOT: /cvs Module name: ports Changes by: daniel@cvs.openbsd.org 2024/03/17 22:00:40 Modified files: devel/spyder/py-spyder-kernels: Makefile distinfo Log message: update spyder-kernels to 2.5.1 CVSROOT: /cvs Module name: ports Changes by: daniel@cvs.openbsd.org 2024/03/17 22:04:33 Modified files: devel/spyder/spyder: Makefile distinfo Log message: update spyder to 5.5.3 CVSROOT: /cvs Module name: ports Changes by: bket@cvs.openbsd.org 2024/03/17 22:15:30 Modified files: sysutils/rclone: Makefile distinfo Log message: Update to rclone-1.66.0 Changes: https://rclone.org/changelog/#v1-66-0-2024-03-10 CVSROOT: /cvs Module name: ports Changes by: bket@cvs.openbsd.org 2024/03/17 22:15:45 Modified files: net/ocserv : Makefile distinfo net/ocserv/patches: patch-doc_sample_config patch-src_main-ban_c patch-src_occtl_occtl_c patch-src_occtl_time_c patch-src_ocpasswd_ocpasswd_c Log message: Update to ocserve-1.2.4 Changes: https://ocserv.openconnect-vpn.net/changelog.html CVSROOT: /cvs Module name: ports Changes by: bket@cvs.openbsd.org 2024/03/17 22:16:11 Modified files: mail/notmuch : Makefile.inc mail/notmuch/notmuch: distinfo mail/notmuch/py-notmuch: distinfo Log message: Update to notmuch-0.38.3 Fixes a bug in configuration code that caused the notmuch command to erroneously report "Error: could not locate database" under some circumstances. CVSROOT: /cvs Module name: ports Changes by: bket@cvs.openbsd.org 2024/03/17 22:16:34 Modified files: news/sabnzbd : Makefile distinfo Log message: Update to sabnzbd-4.2.3 Changes: https://github.com/sabnzbd/sabnzbd/releases/tag/4.2.3 CVSROOT: /cvs Module name: ports Changes by: bket@cvs.openbsd.org 2024/03/17 22:16:51 Modified files: devel/git-cola : Makefile distinfo devel/git-cola/patches: patch-cola_app_py Log message: Update to git-cola-4.6.1 Changes: https://github.com/git-cola/git-cola/blob/v4.6.1/CHANGES.rst CVSROOT: /cvs Module name: ports Changes by: daniel@cvs.openbsd.org 2024/03/17 22:31:44 Modified files: devel/py-python-lsp-server: Makefile distinfo Log message: update python-lsp-server to 1.10.1 CVSROOT: /cvs Module name: ports Changes by: tb@cvs.openbsd.org 2024/03/18 00:01:15 Modified files: security/openssl-ruby-tests: Makefile distinfo Log message: Update to openssl-ruby-tests 20240318 CVSROOT: /cvs Module name: src Changes by: dlg@cvs.openbsd.org 2024/03/18 00:05:23 Modified files: sys/net : if_aggr.c Log message: use high bits from the mbuf flowid to pick a port to transmit on. a port here is a physical interface used by an aggr. this leaves the low bits for a physical interface to use to pick a tx ring. without this, aggr used low bits for port selection, which takes bits away from the ring selection, which can lead to uneven distribution of packets over tx rings. ive been running this in production for well over a year now. CVSROOT: /cvs Module name: src Changes by: dlg@cvs.openbsd.org 2024/03/18 00:14:50 Modified files: sys/net : if_aggr.c Log message: expose per port information via kstats. the most interesting information exposed here is the number of times a port changes state according to the lacp state machine. if a port is flapping, it's hard to see if you only look at the current state. getting a count of changes over time makes problems a lot more visible and therefore fixable. this also exposes counters around how the lacp protocol packets. all of these can be useful when trying to line up behaviors with another system (eg, a switch). ok jmatthew@ CVSROOT: /cvs Module name: ports Changes by: otto@cvs.openbsd.org 2024/03/18 00:46:18 Modified files: net/quiche : Makefile distinfo Log message: Update to quiche 0.20.1 This fixes a potential DOS. See https://github.com/cloudflare/quiche/releases/tag/0.20.1 CVSROOT: /cvs Module name: ports Changes by: otto@cvs.openbsd.org 2024/03/18 00:47:53 Modified files: net/dnsdist : Makefile distinfo Log message: Update to dnsdist 1.9.1 CVSROOT: /cvs Module name: ports Changes by: otto@cvs.openbsd.org 2024/03/18 00:50:45 Modified files: net/powerdns : Makefile distinfo Log message: Update to PowerDNS Authoritative Server 4.9.0 CVSROOT: /cvs Module name: src Changes by: op@cvs.openbsd.org 2024/03/18 02:48:50 Modified files: usr.sbin/smtpd : smtpd.conf.5 Log message: improve the MDA documentation - add a pointer to the section when documenting the `mda' keyword - rename the section to MDA COMMANDS - document also what happens when the MDA doesn't exit with status 0 - add the missing environment variables - sort the variables - minor other tweaks to the text with several improvements from jmc, ok jmc CVSROOT: /cvs Module name: src Changes by: op@cvs.openbsd.org 2024/03/18 02:50:54 Modified files: lib/libc/gen : login_cap.3 Log message: fix markup of _PATH_DEFPATH (Li -> Dv); ok jmc CVSROOT: /cvs Module name: ports Changes by: op@cvs.openbsd.org 2024/03/18 03:08:54 Modified files: lang/clojure : Makefile distinfo Log message: update lang/clojure to 1.11.2.1446 CVSROOT: /cvs Module name: ports Changes by: op@cvs.openbsd.org 2024/03/18 03:36:49 Modified files: devel/luarocks : Makefile distinfo devel/luarocks/pkg: PLIST Log message: update devel/luarocks to 3.11.0 changelog: https://github.com/luarocks/luarocks/blob/master/CHANGELOG.md This "skips" over 3.10.0. CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2024/03/18 04:16:50 Modified files: usr.sbin/bgpd : bgpd.conf.5 Log message: Use same markup for origin-set arguments as for roa-set. The maxlen argument is optional. OK tb@ CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2024/03/18 04:49:24 Modified files: usr.sbin/bgpd : bgpd.h Log message: Double PEER_DESCR_LEN to 64 characters since 32 is a bit on the short side. OK sthen@, deraadt@, dlg@, tb@ CVSROOT: /cvs Module name: src Changes by: bluhm@cvs.openbsd.org 2024/03/18 05:02:25 Modified files: lib/libexpat : Tag: OPENBSD_7_4 Changes lib/libexpat/lib: Tag: OPENBSD_7_4 xmlparse.c Log message: Cherry-pick fix for CVE-2024-28757 from libexpat. Detect billion laughs attack with isolated external parser. github commit 1d50b80cf31de87750103656f6eb693746854aa8 OK deraadt@ this is errata/7.4/015_expat.patch.sig CVSROOT: /cvs Module name: src Changes by: bluhm@cvs.openbsd.org 2024/03/18 05:03:04 Modified files: lib/libexpat : Tag: OPENBSD_7_3 Changes lib/libexpat/lib: Tag: OPENBSD_7_3 xmlparse.c Log message: Cherry-pick fix for CVE-2024-28757 from libexpat. Detect billion laughs attack with isolated external parser. github commit 1d50b80cf31de87750103656f6eb693746854aa8 OK deraadt@ this is errata/7.3/027_expat.patch.sig CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/18 06:53:55 Modified files: graphics/ImageMagick: Makefile Log message: remove LIB_DEPENDS on aom, dav1d, libde265, x265 - they're pulled in via libheif and not used directly. from Brad. CVSROOT: /cvs Module name: www Changes by: sthen@cvs.openbsd.org 2024/03/18 08:13:01 Modified files: . : 75.html Log message: i386: 10830 pkgs, aarch64: 12145 pkgs CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/18 08:33:13 Modified files: lang/python : python.port.mk Log message: add python to TEST_DEPENDS if MODPY_PYTEST is set to 'no'. CVSROOT: /cvs Module name: www Changes by: bluhm@cvs.openbsd.org 2024/03/18 08:39:10 Modified files: . : errata73.html errata74.html Log message: Release libexpat errata. CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2024/03/18 08:54:53 Modified files: usr.sbin/bgpd : parse.y Log message: Typecast char argument to isxdigit() to unsigned char since isxdigit() only works that way correctly. OK deraadt@ CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/18 08:59:46 Modified files: net/bird/2 : Makefile distinfo Log message: update to bird-2.15 CVSROOT: /cvs Module name: ports Changes by: fcambus@cvs.openbsd.org 2024/03/18 10:43:39 Modified files: audio/schismtracker: Makefile distinfo audio/schismtracker/patches: patch-configure_ac Log message: Update schismtracker to 20240308. CVSROOT: /cvs Module name: ports Changes by: fcambus@cvs.openbsd.org 2024/03/18 11:23:20 Modified files: graphics/p5-Image-ExifTool: Makefile distinfo graphics/p5-Image-ExifTool/pkg: PLIST Log message: Update p5-Image-ExifTool to 12.79. CVSROOT: /cvs Module name: ports Changes by: jeremy@cvs.openbsd.org 2024/03/18 11:46:37 Modified files: security/suricata: Makefile Added files: security/suricata/patches: patch-src_suricata_c patch-src_util-privs_c patch-src_util-privs_h Log message: Readd privdrop patches "probably automatically removed" by gonzalo@ in the 7.0.2 update OK gonzalo@ CVSROOT: /cvs Module name: ports Changes by: jca@cvs.openbsd.org 2024/03/18 11:50:18 Modified files: graphics/pqiv : Makefile distinfo Removed files: graphics/pqiv/patches: patch-pqiv_c Log message: Update to pqiv-2.13.1 time_t patch addressed upstream. CVSROOT: /cvs Module name: ports Changes by: jca@cvs.openbsd.org 2024/03/18 11:56:00 Modified files: security/libksba: Makefile distinfo Log message: Bugfix update to libksba-1.6.6 CVSROOT: /cvs Module name: ports Changes by: fcambus@cvs.openbsd.org 2024/03/18 12:00:09 Modified files: sysutils/broot : Makefile crates.inc distinfo Log message: Update broot to 1.36.1. CVSROOT: /cvs Module name: ports Changes by: fcambus@cvs.openbsd.org 2024/03/18 12:08:10 Modified files: misc/dialog : Makefile distinfo Log message: Update dialog to 1.3-20240307. CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2024/03/18 12:35:21 Modified files: sys/arch/arm64/arm64: cpu.c sys/arch/arm64/include: armreg.h Log message: Add support for the new layout of the CCSIDR_EL1 register that was introduced in Armv8.3 when the CCIDX feature is advertised. This makes us properly detect the cache size on newer CPU cores like Neoverse N2, at least when emulated by QEMU. ok jsg@ CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2024/03/18 15:20:46 Modified files: sys/dev/pci : pci.c Log message: Reduce dmesg spam and only print about resource conflicts for resources that are actually enabled. ok dlg@, deraadt@ CVSROOT: /cvs Module name: src Changes by: patrick@cvs.openbsd.org 2024/03/18 15:37:44 Modified files: sys/dev/fdt : if_mvpp.c Log message: Pass PHY OF node to the MII layer for use by PHY drivers. CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2024/03/18 15:57:22 Modified files: sys/arch/arm64/arm64: cpu.c sys/dev/fdt : psci.c pscivar.h Log message: Implement Spectre-V4 mitigations. The only real effect of this change is that we now make a firmware call to enable the mitigations if the firmware tells us mitigations are implemented and needed. But according to the specification these mitigations should be enabled by default. The open source TF-A implementation only implements mitigations for older Cortex-A76 cores. Newer Cortex-A76 revisions are not vulnerable and as far as I can tell we only support SoCs with the newer cores. ok patrick@ CVSROOT: /cvs Module name: ports Changes by: lraab@cvs.openbsd.org 2024/03/18 16:36:23 Modified files: sysutils/telegraf: Makefile distinfo modules.inc Log message: sysutils/telegraf: update to 1.30.0 ok landry@ CVSROOT: /cvs Module name: ports Changes by: lraab@cvs.openbsd.org 2024/03/18 16:37:45 Modified files: sysutils/grafana: Makefile distinfo sysutils/grafana/patches: patch-conf_sample_ini sysutils/grafana/pkg: PLIST Log message: sysutils/grafana: update to 10.4.0 CVSROOT: /cvs Module name: ports Changes by: daniel@cvs.openbsd.org 2024/03/18 19:44:14 Modified files: net/py-zmq : Makefile distinfo Log message: update py-zmq to 25.1.1 for Python 3.12 support CVSROOT: /cvs Module name: ports Changes by: daniel@cvs.openbsd.org 2024/03/18 20:18:44 Modified files: devel/py-nbconvert: Makefile distinfo devel/py-nbconvert/pkg: DESCR PLIST textproc/py-mistune: Makefile distinfo textproc/py-mistune/pkg: PLIST Log message: update nbconvert to 7.16.2 and mistune to 2.0.5 CVSROOT: /cvs Module name: src Changes by: dlg@cvs.openbsd.org 2024/03/18 21:49:11 Modified files: sys/net : if_sec.c Log message: count if_enqueue/ifq_enqueue errors as oqdrops. this helps narrow down where some "output failures" on sec interfaces occur. based on discussion with jason tubnor CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/18 23:04:13 Modified files: usr.sbin/rpki-client: cert.c extern.h filemode.c ip.c parser.c validate.c x509.c Log message: Rename parent to issuer in struct auth Parent is confusing and issuer is the appropriate terminology. This is a mechanical diff. The only remaining uses of 'parent' in this code base now mean 'parent process'. discussed with beck and job ok job CVSROOT: /cvs Module name: ports Changes by: op@cvs.openbsd.org 2024/03/19 02:28:40 Modified files: databases/pspg : Makefile distinfo Log message: update databases/pspg to 5.8.2 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/19 02:43:01 Modified files: security/gopass: Makefile distinfo modules.inc Log message: update to gopass-1.15.12 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/19 02:52:05 Modified files: net/p5-Zonemaster/ldns: Makefile distinfo Log message: update to p5-Zonemaster-LDNS-4.0.0 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/19 02:52:39 Modified files: net/p5-Zonemaster/cli: Makefile distinfo Log message: update to zonemaster-6.1.0 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/19 02:52:42 Modified files: net/p5-Zonemaster/engine: Makefile distinfo net/p5-Zonemaster/engine/pkg: PLIST Log message: update to p5-Zonemaster-engine-5.0.0 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/19 06:32:42 Modified files: telephony/asterisk/20: Makefile distinfo telephony/asterisk/20/patches: patch-apps_app_voicemail_c patch-configure_ac patch-third-party_pjproject_source_pjlib_src_pj_ssl_sock_ossl_c patch-third-party_pjproject_source_pjmedia_src_pjmedia_sdp_c telephony/asterisk/20/pkg: PLIST-main Log message: update to asterisk-20.7.0 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/19 06:32:46 Modified files: telephony/asterisk/18: Makefile distinfo telephony/asterisk/18/patches: patch-apps_app_voicemail_c patch-configure_ac patch-third-party_pjproject_source_pjlib_src_pj_ssl_sock_ossl_c patch-third-party_pjproject_source_pjmedia_src_pjmedia_sdp_c telephony/asterisk/18/pkg: PLIST-main Log message: update to asterisk-18.22.0 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/19 06:38:23 Modified files: cad/kicad : Makefile editors/texworks: Makefile net/profanity : Makefile productivity/kmymoney: Makefile www/bluefish : Makefile Log message: replace hardcoded 'python3.10' in WANTLIB with ${MODPY_WANTLIB}. CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2024/03/19 07:33:29 Modified files: www/mozilla-firefox: Makefile distinfo www/mozilla-firefox/files: unveil.main www/firefox-i18n: Makefile.inc distinfo Removed files: www/mozilla-firefox/patches: patch-media_ffvpx_libavcodec_x86_fft_asm patch-third_party_libwebrtc_common_audio_common_audio_c_gn_moz_build patch-third_party_libwebrtc_common_audio_third_party_spl_sqrt_floor_spl_sqrt_floor_gn_moz_build patch-third_party_libwebrtc_modules_audio_processing_aecm_aecm_core_gn_moz_build patch-third_party_libwebrtc_modules_desktop_capture_desktop_capture_gn_moz_build patch-third_party_libwebrtc_modules_video_capture_video_capture_factory_cc patch-xpcom_reflect_xptcall_md_unix_moz_build Log message: www/mozilla-firefox: update to 124.0. see https://www.mozilla.org/en-US/firefox/124.0/releasenotes/ fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-12/ - ffmpeg was updated in #1877221, patch-media_ffvpx_libavcodec_x86_fft_asm doesnt apply anymore and isnt needed - rm riscv64 patches from #1876554 & #1879656, merged upstream - rm patch from #1878010, merged upstream - add ~/.cache/{gvfsd,dconf} to unveil.main, silence some warnings from glib CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2024/03/19 07:35:14 Modified files: www/firefox-esr: Makefile distinfo Log message: www/firefox-esr: update to 115.9.0. see https://www.mozilla.org/en-US/firefox/115.9.0/releasenotes/ fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-13/ CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2024/03/19 07:35:55 Modified files: www/firefox-esr: Tag: OPENBSD_7_4 Makefile distinfo Log message: www/firefox-er: MFC update to 115.9.0. see https://www.mozilla.org/en-US/firefox/115.9.0/releasenotes/ fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-13/ CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2024/03/19 07:39:01 Modified files: www/mozilla-firefox: Tag: OPENBSD_7_4 Makefile distinfo www/mozilla-firefox/pkg: Tag: OPENBSD_7_4 PLIST Removed files: www/mozilla-firefox/patches: Tag: OPENBSD_7_4 patch-build_moz_configure_nss_configure patch-media_ffvpx_libavcodec_x86_fft_asm patch-netwerk_protocol_http_Http2Session_cpp patch-security_manager_ssl_nsNSSCallbacks_cpp patch-security_manager_ssl_nsNSSComponent_cpp patch-security_manager_ssl_nsNSSIOLayer_cpp patch-third_party_libwebrtc_modules_video_capture_video_capture_factory_cc Log message: www/mozilla-firefox: MFC update to 124.0. see https://www.mozilla.org/en-US/firefox/124.0/releasenotes/ fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-12/ - build against bundled nss 3.98, the Xyber tentacles are now everywhere and it's simpler than trying to untangle them - ffmpeg was updated in #1877221, patch-media_ffvpx_libavcodec_x86_fft_asm doesnt apply anymore and isnt needed - rm patch from #1878010, merged upstream CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2024/03/19 07:41:04 Modified files: mail/mozilla-thunderbird: Makefile distinfo mail/thunderbird-i18n: Makefile.inc distinfo Log message: mail/mozilla-thunderbird: update to 115.9.0. see https://www.thunderbird.net/en-US/thunderbird/115.9.0/releasenotes/ fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-14/ CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2024/03/19 07:41:51 Modified files: mail/mozilla-thunderbird: Tag: OPENBSD_7_4 Makefile distinfo Log message: mail/mozilla-thunderbird: MFC update to 115.9.0. see https://www.thunderbird.net/en-US/thunderbird/115.9.0/releasenotes/ fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-14/ CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/19 09:00:58 Modified files: net/unifi/main : Makefile distinfo net/unifi/main/pkg: PLIST Log message: update to unifi-8.1.113 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/19 09:01:23 ports/net/unifi/snappy-java/patches Update of /cvs/ports/net/unifi/snappy-java/patches In directory cvs.openbsd.org:/tmp/cvs-serv87714/patches Log Message: Directory /cvs/ports/net/unifi/snappy-java/patches added to the repository CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/19 09:02:02 Modified files: net/unifi/snappy-java: Makefile distinfo Added files: net/unifi/snappy-java/patches: patch-Makefile Log message: update snappy-java builder to 1.1.10.5 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/19 09:20:19 Modified files: devel/fast-float: Makefile distinfo Log message: update to fast-float-6.1.1, from Jose Maldonado (maintainer) CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/19 11:34:05 Modified files: lib/libcrypto/man: EVP_DigestInit.3 X509_ALGOR_dup.3 evp.3 Log message: Remove X509_ALGOR_set_md() documentation As far as LibreSSL is concerned, this terrible API is pushing up the daisies. CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/19 11:48:57 Modified files: lib/libcrypto/man: OPENSSL_malloc.3 Log message: Remove OPENSSL/CRYPTO_realloc documentation CVSROOT: /cvs Module name: ports Changes by: volker@cvs.openbsd.org 2024/03/19 12:29:55 Modified files: devel/difftastic: Makefile crates.inc distinfo devel/difftastic/patches: patch-Cargo_lock patch-Cargo_toml patch-manual_book_toml Log message: devel/difftastic: Update to 0.56.1 ok op@ CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/19 13:27:33 Modified files: lib/libcrypto : Makefile crypto_init.c Removed files: lib/libcrypto : o_init.c Log message: Move the OPENSSL_init() stub from o_init.c to crypto_init.c CVSROOT: /cvs Module name: ports Changes by: matthieu@cvs.openbsd.org 2024/03/19 14:03:10 Modified files: wayland/wlroots: Makefile distinfo Log message: Update to wlroots 0.17.2. ok landry@ CVSROOT: /cvs Module name: ports Changes by: daniel@cvs.openbsd.org 2024/03/19 17:45:58 Modified files: www/py-flasgger: Makefile distinfo www/py-flasgger/pkg: PLIST Log message: update flasgger to 0.9.7.1; needed for newer flask ok lraab@ CVSROOT: /cvs Module name: ports Changes by: bluhm@cvs.openbsd.org 2024/03/19 18:29:45 Modified files: devel/p5-Devel-MAT-Dumper: Makefile distinfo devel/p5-Devel-MAT-Dumper/patches: patch-t_01header_t Log message: update p5-Devel-MAT-Dumper to 0.48 CVSROOT: /cvs Module name: ports Changes by: bluhm@cvs.openbsd.org 2024/03/19 18:30:01 Modified files: devel/p5-Devel-MAT: Makefile distinfo devel/p5-Devel-MAT/pkg: PLIST Log message: update p5-Devel-MAT to 0.53 CVSROOT: /cvs Module name: ports Changes by: daniel@cvs.openbsd.org 2024/03/19 20:30:15 Modified files: devel/py-traitlets: Makefile distinfo Log message: update traitlets to 5.14.2 CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/19 20:38:35 Modified files: sys/dev/pci/drm: drm_linux.c Log message: in vga_get_uninterruptible() return early if behind a bridge remove KASSERT() that triggered on dg2 CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/19 20:42:17 Modified files: sys/dev/pci/drm: drm_linux.c sys/dev/pci/drm/include/linux: vmalloc.h Log message: add vmap_pfn() CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/19 20:44:57 Modified files: sys/dev/pci/drm/include/linux: io-mapping.h Log message: start implementing io_mapping CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/19 20:47:24 Modified files: sys/dev/pci/drm/i915/gem: i915_gem_stolen.c sys/dev/pci/drm/i915/gt: intel_region_lmem.c sys/dev/pci/drm/i915: intel_memory_region.h Log message: add replacements for io_mapping_init_wc() paths CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/19 20:48:20 Modified files: sys/dev/pci/drm/i915/gem: i915_gem_pages.c Log message: unstub i915_gem_object_map_pfn() CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/19 20:51:06 Modified files: sys/dev/pci/drm/include/linux: bitmap.h Log message: add bitmap_intersects() bitmap_from_arr32() CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/19 20:54:40 Modified files: sys/dev/pci/drm/i915/gt: intel_sseu.c Log message: unstub xehp_load_dss_mask() CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/19 20:56:49 Modified files: sys/dev/pci/drm/i915/gem: i915_gem_lmem.c i915_gem_object.c sys/dev/pci/drm/ttm: ttm_resource.c Log message: enable io_mapping paths for lmem CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/19 20:58:40 Modified files: sys/dev/pci/drm/i915: i915_driver.c i915_drv.h Log message: init bus_space tags in ttm struct CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/19 21:00:21 Modified files: sys/dev/pci/drm/i915/gem: i915_gem_ttm_move.c Log message: unstub i915_ttm_memcpy_init() i915_ttm_move_memcpy() CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/19 21:02:24 Modified files: sys/dev/pci/drm/ttm: ttm_tt.c Log message: handle ttm_sg_tt_init() not being called before ttm_tt_fini() Check that dmamap and segs are non-NULL as not all drivers call ttm_sg_tt_init(). CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/19 22:28:39 Modified files: sys/dev/pci/drm/i915/gem: i915_gem_ttm.c Log message: unstub i915_ttm_io_mem_pfn() CVSROOT: /cvs Module name: src Changes by: job@cvs.openbsd.org 2024/03/19 22:36:30 Modified files: usr.sbin/rpki-client: x509.c Log message: Check whether filename and SIA match Verify whether the filename as presented by the publication point (which is unsigned information) matches the filename in the SIA attribute (which is signed information). Based on RFC 6487 section 4.8.8. with and OK tb@ CVSROOT: /cvs Module name: src Changes by: job@cvs.openbsd.org 2024/03/19 22:39:10 Modified files: regress/usr.sbin/rpki-client: test-aspa.c test-gbr.c test-mft.c test-roa.c test-spl.c test-tak.c Log message: Run most of regress explicitly in filemode to avoid hitting location checks with tb@ CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/19 23:44:19 Modified files: sys/dev/pci/drm/include/linux: io-mapping.h Log message: add io_mapping_map_atomic_wc() CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/20 00:02:20 Modified files: sys/dev/pci/drm/i915: i915_drv.h i915_gem.c i915_vma.c sys/dev/pci/drm/i915/gem: i915_gem_execbuffer.c sys/dev/pci/drm/i915/gt: intel_ggtt.c intel_gtt.h Log message: switch ggtt from agp_map to io_mapping reduces the diff to linux, no functional change CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/20 00:11:41 Modified files: sys/dev/pci/drm/i915/gem: i915_gem_pages.c Log message: remove i915_gem_object_map() removed in linux 5.10 CVSROOT: /cvs Module name: src Changes by: ratchov@cvs.openbsd.org 2024/03/20 02:42:11 Modified files: usr.bin/aucat : aucat.1 aucat.c dsp.c Log message: aucat: Add generic channel mapping in place of -j and -c options. The argument to the -m option specifies the source and destination channel ranges to be mapped. Compatibility is maintained: if -m is not used, the -c and -j options still work. Help and suggestions from Jan Stary , thanks. CVSROOT: /cvs Module name: ports Changes by: benoit@cvs.openbsd.org 2024/03/20 03:03:17 Modified files: devel/p5-Variable-Magic: Makefile distinfo Log message: Update to p5-Variable-Magic-0.64. CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2024/03/20 03:26:42 Modified files: usr.bin/rsync : sender.c Log message: Remove some else statements in if () else if () chains that don't need to be written this way. Makes the code more readable. OK tb@ CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2024/03/20 03:35:46 Modified files: usr.sbin/bgpd : parse.y printconf.c rde.c rde_peer.c session.c util.c Log message: Cleanup AID handling. - Loops over all valid AID should start with AID_MIN and go up to AID_MAX - 1 e.g. for (i = AID_MIN; i < AID_MAX; i++) If for some reason AID_UNSPEC must be handled make that explicit in the for loop. - aid2afi() now returns an error for AID_UNSPEC since there is no valid AFI SAFI combo for AID_UNSPEC. - Add additional checks for AID_MIN where currently only AID_MAX was checked. This affects imsg for route refresh and graceful restart. - Simplify add-path capability handling. Only the negotiated add_path capa sets the flag for AID_UNSPEC to help code to quickly check if any add-path is active. OK tb@ CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2024/03/20 04:38:05 Modified files: regress/lib/libssl/dtls: Makefile regress/lib/libssl/quic: Makefile regress/lib/libssl/server: Makefile regress/lib/libssl/shutdown: Makefile regress/lib/libssl/tls: Makefile regress/lib/libssl/unit: ssl_get_shared_ciphers.c regress/lib/libtls/keypair: Makefile keypairtest.c regress/lib/libtls/tls: Makefile Log message: Use the new certificates/chains in regress. The new certificates are more representative of the real world. The old certificates use weak algorithms and expire in the very near future. Most of our regress has already been switched over, this changes the remainder. Thanks to Bernhard M. Wiedemann for reminding us of the upcoming expiry. ok tb@ CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/20 08:42:05 Modified files: textproc/redland-bindings/patches: patch-configure_ac Log message: use sysconfig.get_config_var("EXT_SUFFIX") not sysconfig.get_config_var("SO"); the latter is deprecated in Pyhton 3.10 and not usable in 3.11 CVSROOT: /cvs Module name: www Changes by: sthen@cvs.openbsd.org 2024/03/20 09:27:52 Modified files: build : mirrors.dat Log message: update notes, mirror.businessconnect.nl switched upstream CVSROOT: /cvs Module name: www Changes by: sthen@cvs.openbsd.org 2024/03/20 09:35:51 Modified files: build : mirrors.dat Log message: add mirror.freedif.org in Singapore, from Kari CVSROOT: /cvs Module name: www Changes by: sthen@cvs.openbsd.org 2024/03/20 09:36:12 Modified files: . : ftp.html ftplist httpslist openbgpd : ftp.html openssh : ftp.html portable.html openntpd : portable.html rpki-client : portable.html Log message: sync CVSROOT: /cvs Module name: www Changes by: sthen@cvs.openbsd.org 2024/03/20 09:37:49 Modified files: build : mirrors.dat Log message: tidy comment CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2024/03/20 09:49:33 Modified files: net/synapse : Makefile distinfo modules.inc Log message: net/synapse: update to 1.103.0, from MAINTAINER Renaud Allard CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/20 10:18:25 Modified files: net/isc-bind : Makefile distinfo Log message: update to isc-bind-9.18.25 various fixes around cache cleaning: "fixes a memory issue in the prior maintenance version that was significant for some very busy resolvers" CVSROOT: /cvs Module name: src Changes by: op@cvs.openbsd.org 2024/03/20 11:52:43 Modified files: usr.sbin/smtpd : smtp_session.c Log message: fix ORCPT handling due to a swapped strlcpy() arguments we don't save the ORCPT argument after validation. There's no buffer overflow since dsn_orcpt is zeroed. Spotted by Tassilo Philipp, thanks! ok millert gilles CVSROOT: /cvs Module name: ports Changes by: fcambus@cvs.openbsd.org 2024/03/20 12:40:03 Modified files: net/swirc : Makefile distinfo Log message: Update swirc to 3.4.7. From maintainer Markus Uhlin, thanks! CVSROOT: /cvs Module name: ports Changes by: fcambus@cvs.openbsd.org 2024/03/20 14:21:12 Modified files: audio/libopenmpt: Makefile distinfo Log message: Update libopenmpt to 0.7.5. CVSROOT: /cvs Module name: ports Changes by: fcambus@cvs.openbsd.org 2024/03/20 14:24:57 Modified files: textproc/ruby-rouge: Makefile distinfo Log message: Update ruby-rouge to 4.2.1. CVSROOT: /cvs Module name: ports Changes by: fcambus@cvs.openbsd.org 2024/03/20 14:43:10 Modified files: textproc/riff : Makefile distinfo Log message: Update riff to 3.1.0. CVSROOT: /cvs Module name: ports Changes by: sebastia@cvs.openbsd.org 2024/03/20 15:17:21 Modified files: databases/puppetdb/8: Makefile distinfo databases/puppetdb/8/patches: patch-Makefile Log message: Update 8.3.0 -> 8.4.1 CVSROOT: /cvs Module name: ports Changes by: sebastia@cvs.openbsd.org 2024/03/20 15:18:23 Modified files: sysutils/puppetserver/8: Makefile distinfo sysutils/puppetserver/8/pkg: README Log message: update 8.4.0 -> 8.5.0 while there, mention to install hiera within puppetserver as well CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/20 15:21:03 Modified files: lib/libcrypto/conf: conf_mod.c Log message: Make module_free() NULL safe ok jsing CVSROOT: /cvs Module name: ports Changes by: sebastia@cvs.openbsd.org 2024/03/20 15:21:14 Modified files: sysutils/ruby-puppet/8: Makefile distinfo sysutils/ruby-puppet/8/patches: patch-lib_puppet_provider_package_openbsd_rb patch-lib_puppet_reference_configuration_rb sysutils/ruby-puppet/8/pkg: PLIST Log message: update 8.4.0 -> 8.5.1 CVSROOT: /cvs Module name: ports Changes by: sebastia@cvs.openbsd.org 2024/03/20 15:24:21 Modified files: sysutils/ruby-puppet-syntax: Makefile distinfo Log message: update 4.0.0 -> 4.1.0 CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/20 15:31:31 Modified files: lib/libcrypto/conf: conf_mod.c Log message: Implement imodule_free() and call it from module_finish() ok jsing CVSROOT: /cvs Module name: ports Changes by: sebastia@cvs.openbsd.org 2024/03/20 15:35:42 Modified files: net/udns : Makefile distinfo net/udns/patches: patch-configure net/udns/pkg : PLIST Log message: update 0.4 -> 0.5 CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/20 15:41:09 Modified files: lib/libcrypto/conf: conf_mod.c Log message: Change return type of module_add() There is one caller of this function which returns module_add() != NULL. Make the function return an int instead. suggested by and ok jsing CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/20 15:49:00 Modified files: lib/libcrypto/conf: conf_mod.c Log message: md -> mod for CONF_MODULEs A CONF_MODULE is no EVP_MD, so call it mod instead of md. CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/20 15:51:23 Modified files: lib/libcrypto/conf: conf_mod.c Log message: md -> imod for CONF_IMODULEs A CONF_IMODULE is neither an EVP_MD nor a CONF_MODULE, so call it imod instead of md or mod. CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/20 15:53:57 Modified files: lib/libcrypto/conf: conf_mod.c Log message: tmod -> mod requested by jsing CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/20 16:08:22 Modified files: lib/libcrypto/conf: conf_mod.c Log message: pmod -> mod in CONF_IMODULE Hungarian notation occasionally helps, but only if it is done consistently. Steve and consistency... cf e.g the last few commits. Accordingly, Hensonian Hungarian notation is a complete disaster. Start cleaning this mess up. CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/20 16:11:07 Modified files: lib/libcrypto/conf: conf_mod.c Log message: Rename the remaining pmod to mod CVSROOT: /cvs Module name: src Changes by: bluhm@cvs.openbsd.org 2024/03/20 16:52:44 Modified files: sys/dev/pci/drm/include/linux: bitmap.h Log message: Fix build with bitmap_copy() on i386 by adding const qualifier. OK jsg@ CVSROOT: /cvs Module name: src Changes by: afresh1@cvs.openbsd.org 2024/03/20 19:02:29 Modified files: usr.sbin/fw_update: fw_update.sh Log message: Clear spinner after each cycle Otherwise we can get left with a piece of the spinner if all firmware gets updates and don't print a "kept" value. While here, replace \010 with the ksh supported \b, as suggested by cheloha@ Noticed by deraadt@ CVSROOT: /cvs Module name: ports Changes by: jeremy@cvs.openbsd.org 2024/03/20 20:43:46 Modified files: x11/ruby-tk : Makefile distinfo x11/ruby-tk/pkg: PLIST Log message: Update to ruby-tk 0.5.0 CVSROOT: /cvs Module name: src Changes by: jmatthew@cvs.openbsd.org 2024/03/20 22:10:37 Modified files: share/man/man4 : mcx.4 Log message: mention that SR-IOV virtual functions work too CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/20 23:06:42 Modified files: sys/dev/pci/drm/i915/gt/uc: intel_uc_fw.c Log message: unstub intel_uc_fw_copy_rsa() CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/20 23:14:35 Modified files: sys/dev/pci/drm/i915/gt: shmem_utils.h shmem_utils.c Log message: add uao_read_to_iosys_map() alternative to shmem_read_to_iosys_map() CVSROOT: /cvs Module name: ports Changes by: pascal@cvs.openbsd.org 2024/03/21 00:35:53 Log message: Import net/matterhorn, ok kili@. Matterhorn is a terminal client for the Mattermost chat system. Features include: * Channel creation, deletion, and membership management commands * Support for multiple teams * Optimized channel-switching modes: M-a, M-s, and C-g * Message posting, editing, replying, and deletion * Markdown rendering * Support for participating in threads via the thread window * Convenient URL-opening with local browser * Yank verbatim content from messages into the system clipboard * Edit messages with $EDITOR * Rebindable keys (see /help keybindings) * Message editor with kill/yank buffer and readline-style keybindings * Support for adding and removing emoji post reactions * Tab-completion * Multiple color themes with color theme customization support * Custom notifications via notification scripts Status: Vendor Tag: pascal Release Tags: pascal_20240321 N ports/net/matterhorn/Makefile N ports/net/matterhorn/distinfo N ports/net/matterhorn/pkg/DESCR N ports/net/matterhorn/pkg/PLIST No conflicts created by this import CVSROOT: /cvs Module name: ports Changes by: pascal@cvs.openbsd.org 2024/03/21 00:37:28 Modified files: net : Makefile Log message: += matterhorn CVSROOT: /cvs Module name: ports Changes by: caspar@cvs.openbsd.org 2024/03/21 01:18:26 Modified files: meta/tor-browser: Makefile www/tor-browser: Makefile.inc www/tor-browser/browser: Makefile distinfo Log message: Tor Browser: update to 13.0.12 CVSROOT: /cvs Module name: ports Changes by: caspar@cvs.openbsd.org 2024/03/21 01:18:59 Modified files: meta/tor-browser: Tag: OPENBSD_7_4 Makefile www/tor-browser: Tag: OPENBSD_7_4 Makefile.inc www/tor-browser/browser: Tag: OPENBSD_7_4 Makefile distinfo Log message: Tor Browser: update to 13.0.12 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/21 01:19:05 Modified files: net/isc-bind : Tag: OPENBSD_7_4 Makefile distinfo Log message: MFC update to isc-bind-9.18.25 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/21 01:21:06 Modified files: lang/php/8.2 : Tag: OPENBSD_7_4 Makefile distinfo Log message: MFC update to php-8.2.17 CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2024/03/21 02:17:23 Removed files: regress/lib/libssl/certs: ca.pem client.pem server.pem Log message: Remove now unused certificates (which are also soon to expire). CVSROOT: /cvs Module name: ports Changes by: martin@cvs.openbsd.org 2024/03/21 03:17:30 Modified files: databases/py-influxdb_client: Makefile distinfo Log message: Updat py-influxdb_client to 1.41.0. CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2024/03/21 04:58:15 Modified files: sbin/nfsd : nfsd.c Log message: Do not exit the master process if a client TCP connection fails to be added. OK millert@ CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2024/03/21 05:26:28 Modified files: usr.bin/tmux : cmd-detach-client.c screen.c window-copy.c Log message: Do not consider a selection present if it is empty, from Michael Grant (GitHub issue 3869). Also a typo fix from GitHub issue 3877. CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2024/03/21 05:27:18 Modified files: usr.bin/tmux : cmd-detach-client.c Log message: Revert detach-client part of last, did not intend this to go in. CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2024/03/21 05:30:42 Modified files: usr.bin/tmux : cmd-display-panes.c cmd-resize-pane.c popup.c resize.c server-fn.c tmux.h window.c Log message: Do not notify window-layout-changed if the window is about to be destroyed (since it may have been freed by the time the notify happens), from Romain Francoise in GitHub issue 3860. CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2024/03/21 05:32:49 Modified files: usr.bin/tmux : tmux.1 window-buffer.c Log message: Use -p for default paste-buffer command in buffer mode, it will only do anything if the application asked for it. From Gregory Anders. CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2024/03/21 05:47:55 Modified files: usr.bin/tmux : tty-keys.c Log message: Look for feature code 21 for DECSLRM and 28 for DECFRA in the device attributes and also accept level 1 (there is no hardware with this but some emulators may use it). Pointed out by James Holderness. CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2024/03/21 05:51:32 Modified files: usr.bin/tmux : cmd-display-menu.c tmux.1 Log message: Add -M to always turn mouse on in a menu, GitHub issue 3779. CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2024/03/21 05:53:11 Modified files: usr.bin/tmux : options-table.c tmux.1 Log message: Reduce escape-time default to 10 milliseconds, 500 is far too long for modern terminals and networks. Case made by Kurtis Rader in GitHub issue 3844. CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2024/03/21 06:10:57 Modified files: usr.bin/tmux : screen-write.c Log message: Write padding character into the right position. CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/21 06:23:59 Modified files: graphics/zbar : Makefile distinfo graphics/zbar/patches: patch-Makefile_in Removed files: graphics/zbar/patches: patch-configure Log message: update to zbar-0.23.93, ok jsg (maintainer) Various fixes including a heap buffer overflow triggerable by crafted QR code, plus fixes build with Python 3.11. https://github.com/mchehab/zbar/releases CVSROOT: /cvs Module name: www Changes by: sthen@cvs.openbsd.org 2024/03/21 06:28:31 Modified files: . : 75.html Log message: sparc64, 9432 pkgs CVSROOT: /cvs Module name: ports Changes by: jca@cvs.openbsd.org 2024/03/21 06:44:41 Modified files: security/gnupg : Makefile distinfo Log message: Update to gnupg-2.4.5 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/21 07:04:57 Modified files: graphics/mypaint: Makefile graphics/mypaint/patches: patch-setup_py Added files: graphics/mypaint/patches: patch-lib_gettext_setup_py Log message: backport upstream py3.11 fixes CVSROOT: /cvs Module name: ports Changes by: op@cvs.openbsd.org 2024/03/21 08:35:25 Modified files: games/taisei : Makefile distinfo Removed files: games/taisei/patches: patch-external_koishi_src_stack_alloc_c Log message: update games/taisei to 1.4.1 disable LTO to fix a crash during the bossfight of the third stage (this issue was already present in 1.4 but not on 1.3.x) CVSROOT: /cvs Module name: ports Changes by: paco@cvs.openbsd.org 2024/03/21 09:52:04 Modified files: net/miniflux : Makefile distinfo modules.inc Log message: update net/miniflux to 2.1.1 CVSROOT: /cvs Module name: src Changes by: bluhm@cvs.openbsd.org 2024/03/21 10:46:04 Modified files: usr.bin/tcpbench: tcpbench.c Log message: Fix white space. OK tobhe@ CVSROOT: /cvs Module name: ports Changes by: paco@cvs.openbsd.org 2024/03/21 11:41:35 Modified files: net/tailscale : Makefile distinfo modules.inc Log message: update net/tailscale to 1.62.0 from Adriano Barbosa (maintainer) CVSROOT: /cvs Module name: ports Changes by: caspar@cvs.openbsd.org 2024/03/21 14:35:55 Modified files: devel/shellcheck: Makefile distinfo devel/shellcheck/files: shellcheck.1 Log message: devel/shellcheck: update to 0.10.0 OK gnezdo@ CVSROOT: /cvs Module name: ports Changes by: caspar@cvs.openbsd.org 2024/03/21 14:39:21 Modified files: net/snowflake_proxy: Makefile distinfo modules.inc Log message: net/snowflake_proxy: update to 2.9.2 CVSROOT: /cvs Module name: ports Changes by: kili@cvs.openbsd.org 2024/03/21 14:52:54 Modified files: lang/ghc : Tag: OPENBSD_7_5 Makefile distinfo Log message: New bootstrap. Reminded by gnezdo@ CVSROOT: /cvs Module name: src Changes by: tobhe@cvs.openbsd.org 2024/03/21 16:08:49 Modified files: sbin/iked : ikev2.c Log message: Avoid redundant allocation in ikev2_prfplus() from markus@ CVSROOT: /cvs Module name: ports Changes by: bluhm@cvs.openbsd.org 2024/03/21 16:37:16 Modified files: www/p5-Test-HTTP-LocalServer: Makefile distinfo Log message: update p5-Test-HTTP-LocalServer to 0.76 CVSROOT: /cvs Module name: ports Changes by: kili@cvs.openbsd.org 2024/03/21 16:57:01 Modified files: lang/ghc : Makefile distinfo Log message: New bootstrap. Reminded by gnezdo@ (now committed to -current, sorry for the mess on OPENBSD_7_5). CVSROOT: /cvs Module name: src Changes by: patrick@cvs.openbsd.org 2024/03/21 17:12:33 Modified files: sys/dev/fdt : if_mvneta.c Log message: Never bindings use the phy-handle property instead of the phy property. ok kettenis@ CVSROOT: /cvs Module name: ports Changes by: bluhm@cvs.openbsd.org 2024/03/21 18:25:08 Modified files: graphics/py-pyqtgraph: Makefile distinfo graphics/py-pyqtgraph/pkg: PLIST Log message: update py-pyqtgraph to 0.13.4 CVSROOT: /cvs Module name: ports Changes by: daniel@cvs.openbsd.org 2024/03/21 18:51:24 Modified files: security/py-requests-aws4auth: Makefile distinfo security/py-requests-aws4auth/pkg: PLIST Log message: update requests-aws4auth to 1.1.2; needed to update urllib3 CVSROOT: /cvs Module name: ports Changes by: daniel@cvs.openbsd.org 2024/03/21 19:07:19 Modified files: devel/py-nbconvert: Makefile distinfo Log message: update nbconvert to 7.16.3 CVSROOT: /cvs Module name: www Changes by: lteo@cvs.openbsd.org 2024/03/21 20:26:52 Modified files: . : 75.html Log message: Update versions for ports CVSROOT: /cvs Module name: src Changes by: job@cvs.openbsd.org 2024/03/21 21:38:12 Modified files: usr.sbin/rpki-client: cert.c extern.h filemode.c http.c main.c repo.c rrdp_delta.c rrdp_notification.c rrdp_snapshot.c rsync.c tal.c x509.c Log message: Replace protocol literal strings and strlen() calls with defined constants OK tb@ claudio@ CVSROOT: /cvs Module name: ports Changes by: kn@cvs.openbsd.org 2024/03/21 23:06:05 Modified files: devel/github-cli: Makefile distinfo modules.inc Log message: update to github-cli 2.46.0 CVSROOT: /cvs Module name: src Changes by: ratchov@cvs.openbsd.org 2024/03/21 23:54:25 Modified files: sys/kern : kern_pledge.c Log message: pledge: Allow the AUDIO_GETDEV ioctl in "audio" ok deraadt, kn, phessler CVSROOT: /cvs Module name: src Changes by: ratchov@cvs.openbsd.org 2024/03/22 00:06:06 Modified files: usr.bin/aucat : aucat.c Log message: aucat: Add a bytes-per-sample argument to allcobuf() No behavior change. CVSROOT: /cvs Module name: src Changes by: ratchov@cvs.openbsd.org 2024/03/22 00:20:48 Modified files: usr.bin/aucat : aucat.c Log message: aucat: Allow any device sample encoding. If the device doesn't support the aucat internal encoding, then setup a conversion layer instead of failing. This allows aucat to be used for audio equipment testing/debugging without involving the full sndiod processing chain. CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/22 00:24:54 Modified files: lib/libcrypto/x509: x509_lu.c Log message: Simplify X509_STORE_free() This had an inlined version of sk_pop_free(). We can just call it the right way. ok jsing CVSROOT: /cvs Module name: ports Changes by: sdk@cvs.openbsd.org 2024/03/22 00:59:11 Modified files: misc/remind : Makefile distinfo misc/remind/pkg: PLIST Log message: update to remind-4.3.3, from Martin Ziemer (maintainer) plus port fixes spotted by kn@ and sdk@ CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2024/03/22 01:15:04 Modified files: sys/nfs : nfs_socket.c nfs_syscalls.c Log message: Limit NFS connections to originate from a reserved port. For TCP connections do the check when adding the socket via nfssvc(2). For UDP do the check early after soreceive(). On top of this limit the sockets added via nfssvc(2) to IPv4 TCP and UDP sockets. OK millert@ deraadt@ CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2024/03/22 01:19:28 Modified files: usr.sbin/bgpd : bgpd.h logmsg.c session.c session.h util.c Log message: Rework parse_notification() to use the ibuf API for everything. While there fix the RFC5492 handling of ERR_OPEN_CAPA (the current code has the logic inversed). ERR_OPEN_CAPA is there to signal that a needed capability is missing in our OPEN message. Just add the handling of ERR_OPEN_CAPA to log_notification(). Also rework the handling of the shutdown reason and move the printing into log_notification(). OK tb@ CVSROOT: /cvs Module name: ports Changes by: martin@cvs.openbsd.org 2024/03/22 02:13:36 Modified files: net/ntfy : Makefile distinfo modules.inc Log message: Update ntfy to 2.9.0. CVSROOT: /cvs Module name: ports Changes by: jsg@cvs.openbsd.org 2024/03/22 02:29:15 Modified files: sysutils/pciutils: Makefile distinfo sysutils/pciutils/patches: patch-lib_names-net_c patch-lib_obsd-device_c sysutils/pciutils/pkg: PLIST Log message: update to pciutils 3.11.1 CVSROOT: /cvs Module name: ports Changes by: benoit@cvs.openbsd.org 2024/03/22 03:11:18 Modified files: textproc/p5-PDF-Table: Makefile distinfo Log message: Update to p5-PDF-Table-1.006 from wen heping. CVSROOT: /cvs Module name: www Changes by: sthen@cvs.openbsd.org 2024/03/22 05:08:09 Modified files: . : 75.html Log message: powerpc64: 8469 packages CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/22 06:05:07 Modified files: graphics/glad : Makefile distinfo graphics/glad/pkg: PLIST Log message: update to glad-2.0.6, from Jose Maldonado (maintainer), plus tweak to use MODPY_EGG_VERSION while there CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/22 06:15:27 Modified files: multimedia/libde265: Makefile distinfo multimedia/libde265/patches: patch-acceleration-speed_Makefile_in patch-dec265_Makefile_in patch-enc265_Makefile_in patch-libde265_pc_in patch-sherlock265_Makefile_in patch-tools_Makefile_in multimedia/libde265/pkg: PLIST-tools Log message: update to libde265-1.0.15, from Brad CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/22 06:15:57 Modified files: sysutils/supuner: Makefile distinfo Log message: update to supuner-0.3, from Laurence Tratt (maintainer) CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/22 06:25:33 Modified files: graphics/openimageio: Makefile distinfo Log message: update to openimageio-2.4.17.0, from Brad, I updated GH_ACCOUNT and GH_PROJECT to avoid some faffing with WRKDIST/PKGNAME CVE-2023-36183, CVE-2023-42295 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/22 06:28:39 Modified files: shells/fish : Makefile distinfo shells/fish/pkg: PLIST Log message: update to fish-3.7.1, from Florian Viehweger (maintainer) CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/22 06:29:33 Modified files: share/man/man4/man4.alpha: mem.4 share/man/man4/man4.amd64: mem.4 share/man/man4/man4.i386: mem.4 share/man/man4/man4.landisk: mem.4 share/man/man4/man4.loongson: mem.4 share/man/man4/man4.luna88k: mem.4 share/man/man4/man4.macppc: mem.4 share/man/man4/man4.sparc64: mem.4 Log message: correct history of /dev/mem and /dev/kmem The history section (added in CSRG) claimed both first appeared in v6. Looking at the manuals in the TUHS archive, /dev/mem was in v1 and /dev/kmem was introduced in v5. ok jan@ CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/22 06:29:43 Modified files: graphics/libplacebo: Makefile Log message: remove workaround no longer needed with newer glad, from Brad (maintainer) CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/22 06:31:08 Modified files: www/darkhttpd : Makefile distinfo Log message: update to darkhttpd-1.16, from Florian Viehweger (taking maintainer) CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/22 06:36:53 Modified files: devel/py-wheel : Makefile distinfo Log message: update to py3-wheel-0.43.0 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/22 06:37:19 Modified files: mail/getmail : Makefile distinfo Log message: update to getmail-6.18.14, from Martin Ziemer (maintainer) CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/22 06:37:53 Modified files: audio/opencore-amr: Makefile distinfo audio/opencore-amr/pkg: PLIST Log message: update to opencore-amr-0.1.6 CVSROOT: /cvs Module name: ports Changes by: pvk@cvs.openbsd.org 2024/03/22 06:40:57 Modified files: www/gitea : Makefile distinfo www/gitea/pkg : PLIST Log message: Update gitea 1.21.7 - > 1.21.9 Changelogs: https://github.com/go-gitea/gitea/releases/tag/v1.21.8 https://github.com/go-gitea/gitea/releases/tag/v1.21.9 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/22 06:42:57 Modified files: security/py-scrypt: Makefile distinfo security/py-scrypt/pkg: PLIST Log message: update to py3-scrypt-0.8.24 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/22 06:43:00 Modified files: www/nghttp2 : Makefile distinfo www/nghttp2/patches: patch-Makefile_in Log message: update to nghttp2-1.60.0 CVSROOT: /cvs Module name: ports Changes by: semarie@cvs.openbsd.org 2024/03/22 06:53:06 Modified files: lang/rust : Makefile distinfo rust.port.mk lang/rust/patches: patch-compiler_rustc_session_src_options_rs patch-src_bootstrap_bootstrap_py patch-src_bootstrap_src_core_build_steps_test_rs patch-src_bootstrap_src_lib_rs patch-vendor_openssl-sys_build_main_rs patch-vendor_openssl_build_rs patch-vendor_openssl_src_lib_rs lang/rust/pkg : PLIST-main PLIST-src Added files: lang/rust/patches: patch-library_std_src_sys_pal_unix_os_rs patch-vendor_openssl-sys-0_9_92_build_main_rs patch-vendor_openssl-sys-0_9_92_src_handwritten_x509_rs Removed files: lang/rust/patches: patch-library_std_src_sys_unix_os_rs patch-library_std_src_sys_unix_thread_rs patch-vendor_openssl-sys-0_9_90_src_handwritten_x509_rs patch-vendor_openssl-sys_build_cfgs_rs patch-vendor_openssl-sys_src_handwritten_x509_rs patch-vendor_openssl-sys_src_handwritten_x509v3_rs patch-vendor_openssl_src_x509_mod_rs Log message: update lang/rust to 1.77.0 Announce: https://blog.rust-lang.org/2024/03/21/Rust-1.77.0.html ReleaseNotes: https://doc.rust-lang.org/nightly/releases.html#version-77-2024-03-21 CVSROOT: /cvs Module name: ports Changes by: semarie@cvs.openbsd.org 2024/03/22 06:55:40 Modified files: devel/rust-analyzer: Makefile Log message: devel/rust-analyzer: mark broken for now (fail to build with lang/rust 1.77.0) CVSROOT: /cvs Module name: ports Changes by: robert@cvs.openbsd.org 2024/03/22 07:10:56 Modified files: www/chromium : Makefile distinfo www/chromium/patches: patch-BUILD_gn patch-base_BUILD_gn patch-base_allocator_partition_allocator_partition_alloc_gni patch-base_allocator_partition_allocator_src_partition_alloc_BUILD_gn patch-base_functional_unretained_traits_h patch-base_i18n_icu_util_cc patch-base_native_library_unittest_cc patch-base_process_process_handle_openbsd_cc patch-base_process_process_metrics_h patch-base_process_process_unittest_cc patch-base_profiler_stack_sampling_profiler_unittest_cc patch-base_rand_util_posix_cc patch-base_synchronization_lock_impl_h patch-base_syslog_logging_cc patch-base_system_sys_info_posix_cc patch-base_test_test_file_util_posix_cc patch-base_threading_hang_watcher_cc patch-base_threading_platform_thread_internal_posix_cc patch-base_trace_event_process_memory_dump_cc patch-build_config_compiler_BUILD_gn patch-build_toolchain_gcc_toolchain_gni patch-build_toolchain_toolchain_gni patch-cc_BUILD_gn patch-chrome_app_chrome_main_cc patch-chrome_app_chrome_main_delegate_cc patch-chrome_browser_BUILD_gn patch-chrome_browser_about_flags_cc patch-chrome_browser_accessibility_pdf_ocr_controller_cc patch-chrome_browser_after_startup_task_utils_cc patch-chrome_browser_background_background_mode_manager_cc patch-chrome_browser_background_background_mode_optimizer_cc patch-chrome_browser_browser_features_cc patch-chrome_browser_browser_process_impl_cc patch-chrome_browser_chrome_browser_interface_binders_cc patch-chrome_browser_chrome_browser_main_cc patch-chrome_browser_chrome_browser_main_linux_cc patch-chrome_browser_chrome_content_browser_client_cc patch-chrome_browser_chrome_content_browser_client_h patch-chrome_browser_component_updater_widevine_cdm_component_installer_cc patch-chrome_browser_download_chrome_download_manager_delegate_cc patch-chrome_browser_download_download_item_model_cc patch-chrome_browser_enterprise_connectors_reporting_browser_crash_event_router_cc patch-chrome_browser_enterprise_connectors_reporting_crash_reporting_context_cc patch-chrome_browser_extensions_BUILD_gn patch-chrome_browser_extensions_api_passwords_private_passwords_private_delegate_impl_cc patch-chrome_browser_extensions_api_runtime_chrome_runtime_api_delegate_cc patch-chrome_browser_extensions_api_settings_private_prefs_util_cc patch-chrome_browser_extensions_api_tabs_tabs_api_cc patch-chrome_browser_flag_descriptions_cc patch-chrome_browser_flag_descriptions_h patch-chrome_browser_headless_headless_mode_util_cc patch-chrome_browser_metrics_chrome_metrics_service_client_cc patch-chrome_browser_net_system_network_context_manager_cc patch-chrome_browser_net_system_network_context_manager_h patch-chrome_browser_password_manager_chrome_password_manager_client_cc patch-chrome_browser_password_manager_password_reuse_manager_factory_cc patch-chrome_browser_policy_configuration_policy_handler_list_factory_cc patch-chrome_browser_prefs_browser_prefs_cc patch-chrome_browser_prefs_pref_service_incognito_allowlist_cc patch-chrome_browser_profiles_chrome_browser_main_extra_parts_profiles_cc patch-chrome_browser_profiles_profile_impl_cc patch-chrome_browser_safe_browsing_download_protection_file_analyzer_cc patch-chrome_browser_screen_ai_screen_ai_install_state_cc patch-chrome_browser_send_tab_to_self_receiving_ui_handler_registry_cc patch-chrome_browser_send_tab_to_self_send_tab_to_self_client_service_cc patch-chrome_browser_sync_chrome_sync_client_cc patch-chrome_browser_sync_sync_service_factory_cc patch-chrome_browser_ui_actions_chrome_action_id_h patch-chrome_browser_ui_browser_command_controller_cc patch-chrome_browser_ui_chrome_pages_cc patch-chrome_browser_ui_passwords_manage_passwords_ui_controller_cc patch-chrome_browser_ui_startup_startup_browser_creator_cc patch-chrome_browser_ui_startup_startup_browser_creator_impl_cc patch-chrome_browser_ui_tab_helpers_cc patch-chrome_browser_ui_ui_features_cc patch-chrome_browser_ui_ui_features_h patch-chrome_browser_ui_views_accelerator_table_cc patch-chrome_browser_ui_views_chrome_browser_main_extra_parts_views_cc patch-chrome_browser_ui_views_compose_compose_dialog_view_cc patch-chrome_browser_ui_views_frame_browser_view_cc patch-chrome_browser_ui_views_frame_picture_in_picture_browser_frame_view_cc patch-chrome_browser_ui_views_frame_picture_in_picture_browser_frame_view_h patch-chrome_browser_ui_views_passwords_password_bubble_view_base_cc patch-chrome_browser_ui_views_profiles_profile_menu_view_base_cc patch-chrome_browser_ui_views_tab_search_bubble_host_cc patch-chrome_browser_ui_views_tabs_tab_drag_controller_cc patch-chrome_browser_ui_views_tabs_tab_hover_card_bubble_view_cc patch-chrome_browser_ui_views_user_education_browser_user_education_service_cc patch-chrome_browser_ui_views_web_apps_web_app_integration_test_driver_cc patch-chrome_browser_ui_webui_app_home_app_home_page_handler_cc patch-chrome_browser_ui_webui_chrome_web_ui_controller_factory_cc patch-chrome_browser_ui_webui_realbox_realbox_handler_cc patch-chrome_browser_ui_webui_settings_settings_localized_strings_provider_cc patch-chrome_browser_web_applications_os_integration_web_app_shortcut_manager_cc patch-chrome_browser_web_applications_policy_web_app_policy_manager_cc patch-chrome_browser_webauthn_chrome_authenticator_request_delegate_cc patch-chrome_common_chrome_features_cc patch-chrome_common_chrome_features_h patch-chrome_common_chrome_paths_cc patch-chrome_common_chrome_switches_cc patch-chrome_common_chrome_switches_h patch-chrome_common_media_cdm_registration_cc patch-chrome_common_media_component_widevine_cdm_hint_file_linux_h patch-chrome_common_pref_names_h patch-chrome_common_url_constants_h patch-chrome_common_webui_url_constants_cc patch-chrome_common_webui_url_constants_h patch-chrome_renderer_chrome_render_frame_observer_cc patch-chrome_services_printing_print_backend_service_impl_cc patch-chrome_utility_services_cc patch-chromecast_browser_cast_content_browser_client_cc patch-components_autofill_core_browser_personal_data_manager_cc patch-components_autofill_core_common_autofill_util_cc patch-components_commerce_core_commerce_feature_list_cc patch-components_crash_core_app_BUILD_gn patch-components_feature_engagement_public_feature_configurations_cc patch-components_feature_engagement_public_feature_constants_cc patch-components_feature_engagement_public_feature_constants_h patch-components_feature_engagement_public_feature_list_cc patch-components_feature_engagement_public_feature_list_h patch-components_gwp_asan_client_gwp_asan_cc patch-components_gwp_asan_crash_handler_crash_analyzer_cc patch-components_live_caption_caption_util_h patch-components_named_mojo_ipc_server_connection_info_h patch-components_password_manager_core_browser_features_password_features_cc patch-components_password_manager_core_browser_features_password_features_h patch-components_password_manager_core_browser_password_form_manager_cc patch-components_password_manager_core_browser_password_manager_cc patch-components_password_manager_core_browser_password_store_login_database_unittest_cc patch-components_password_manager_core_browser_sync_password_sync_bridge_cc patch-components_password_manager_core_common_password_manager_pref_names_h patch-components_policy_core_browser_policy_pref_mapping_test_cc patch-components_policy_core_common_cloud_cloud_policy_client_cc patch-components_policy_core_common_cloud_cloud_policy_util_cc patch-components_safe_browsing_core_common_features_cc patch-components_search_engines_search_engine_choice_search_engine_choice_service_cc patch-components_search_engines_template_url_service_cc patch-components_services_screen_ai_public_cpp_utilities_cc patch-components_signin_public_base_signin_switches_cc patch-components_signin_public_base_signin_switches_h patch-components_supervised_user_core_browser_supervised_user_service_cc patch-components_supervised_user_core_common_features_cc patch-components_supervised_user_core_common_features_h patch-components_sync_base_features_cc patch-components_user_education_views_help_bubble_view_cc patch-components_variations_service_variations_service_cc patch-components_viz_service_display_embedder_skia_output_surface_impl_cc patch-components_viz_service_display_skia_renderer_cc patch-components_viz_service_frame_sinks_root_compositor_frame_sink_impl_cc patch-content_app_content_main_runner_impl_cc patch-content_browser_BUILD_gn patch-content_browser_browser_child_process_host_impl_cc patch-content_browser_browser_main_loop_cc patch-content_browser_child_process_launcher_helper_h patch-content_browser_gpu_gpu_data_manager_impl_private_cc patch-content_browser_gpu_gpu_process_host_cc patch-content_browser_media_media_keys_listener_manager_impl_cc patch-content_browser_renderer_host_delegated_frame_host_cc patch-content_browser_renderer_host_render_process_host_impl_cc patch-content_browser_renderer_host_render_process_host_impl_h patch-content_browser_renderer_host_render_widget_host_view_aura_cc patch-content_browser_renderer_host_render_widget_host_view_aura_h patch-content_browser_utility_process_host_cc patch-content_browser_web_contents_web_contents_view_aura_cc patch-content_common_features_cc patch-content_common_features_h patch-content_gpu_gpu_main_cc patch-content_public_browser_content_browser_client_cc patch-content_public_common_content_features_cc patch-content_renderer_render_thread_impl_cc patch-content_renderer_renderer_blink_platform_impl_cc patch-content_renderer_renderer_blink_platform_impl_h patch-content_shell_BUILD_gn patch-content_shell_app_shell_main_delegate_cc patch-content_test_BUILD_gn patch-content_utility_services_cc patch-content_zygote_zygote_linux_cc patch-device_bluetooth_bluetooth_adapter_cc patch-extensions_browser_api_api_browser_context_keyed_service_factories_cc patch-extensions_browser_api_management_management_api_cc patch-extensions_browser_api_messaging_message_service_cc patch-gpu_command_buffer_service_gles2_cmd_decoder_cc patch-gpu_command_buffer_service_shared_image_external_vk_image_backing_cc patch-gpu_command_buffer_service_shared_image_external_vk_image_backing_factory_cc patch-gpu_command_buffer_service_shared_image_shared_image_factory_cc patch-gpu_command_buffer_service_shared_image_shared_image_manager_cc patch-gpu_command_buffer_service_shared_image_wrapped_sk_image_backing_cc patch-gpu_command_buffer_service_webgpu_decoder_impl_cc patch-gpu_config_gpu_finch_features_cc patch-gpu_ipc_service_gpu_init_cc patch-media_base_libaom_thread_wrapper_cc patch-media_base_libvpx_thread_wrapper_cc patch-media_base_media_switches_cc patch-media_base_media_switches_h patch-media_base_video_frame_cc patch-media_gpu_chromeos_libyuv_image_processor_backend_cc patch-media_gpu_chromeos_mailbox_video_frame_converter_cc patch-media_gpu_chromeos_platform_video_frame_utils_cc patch-media_gpu_chromeos_video_decoder_pipeline_cc patch-media_gpu_sandbox_hardware_video_decoding_sandbox_hook_linux_cc patch-media_gpu_vaapi_vaapi_video_decoder_cc patch-media_gpu_vaapi_vaapi_wrapper_cc patch-media_video_gpu_memory_buffer_video_frame_pool_cc patch-media_video_video_encode_accelerator_adapter_cc patch-media_webrtc_audio_processor_cc patch-media_webrtc_helpers_cc patch-media_webrtc_helpers_unittests_cc patch-mojo_public_c_system_thunks_cc patch-net_BUILD_gn patch-net_base_features_cc patch-net_http_http_auth_handler_negotiate_cc patch-net_socket_udp_socket_posix_cc patch-net_socket_udp_socket_unittest_cc patch-net_url_request_url_request_context_builder_cc patch-remoting_host_policy_watcher_cc patch-remoting_host_remoting_me2me_host_cc patch-sandbox_policy_features_cc patch-sandbox_policy_features_h patch-sandbox_policy_openbsd_sandbox_openbsd_cc patch-services_device_public_mojom_BUILD_gn patch-services_network_BUILD_gn patch-services_network_network_context_cc patch-services_network_network_sandbox_hook_linux_cc patch-services_network_network_service_cc patch-services_network_network_service_h patch-services_network_public_cpp_BUILD_gn patch-services_network_public_mojom_BUILD_gn patch-services_on_device_model_on_device_model_service_h patch-third_party_abseil-cpp_absl_base_config_h patch-third_party_angle_BUILD_gn patch-third_party_angle_src_libANGLE_Display_cpp patch-third_party_blink_public_common_renderer_preferences_renderer_preferences_h patch-third_party_blink_public_common_renderer_preferences_renderer_preferences_mojom_traits_h patch-third_party_blink_public_platform_platform_h patch-third_party_blink_renderer_core_exported_web_view_impl_cc patch-third_party_blink_renderer_core_frame_web_frame_test_cc patch-third_party_blink_renderer_core_layout_layout_view_cc patch-third_party_blink_renderer_core_scroll_scrollbar_theme_aura_cc patch-third_party_blink_renderer_modules_media_audio_audio_renderer_mixer_manager_test_cc patch-third_party_blink_renderer_modules_peerconnection_webrtc_audio_renderer_test_cc patch-third_party_blink_renderer_modules_webgl_webgl_rendering_context_base_cc patch-third_party_blink_renderer_modules_webgpu_gpu_queue_cc patch-third_party_blink_renderer_platform_BUILD_gn patch-third_party_blink_renderer_platform_fonts_font_cache_cc patch-third_party_blink_renderer_platform_fonts_font_cache_h patch-third_party_blink_renderer_platform_fonts_skia_font_cache_skia_cc patch-third_party_blink_renderer_platform_runtime_enabled_features_json5 patch-third_party_boringssl_src_util_generate_build_files_py patch-third_party_cpuinfo_cpuinfo_gni patch-third_party_ffmpeg_chromium_scripts_build_ffmpeg_py patch-third_party_ffmpeg_chromium_scripts_robo_lib_config_py patch-third_party_fontconfig_include_config_h patch-third_party_libaom_source_libaom_aom_ports_aarch64_cpudetect_c patch-third_party_material_color_utilities_src_cpp_palettes_tones_cc patch-third_party_speech-dispatcher_libspeechd_version_h patch-third_party_sqlite_src_amalgamation_sqlite3_c patch-third_party_test_fonts_fontconfig_fontconfig_util_linux_cc patch-third_party_webrtc_rtc_base_physical_socket_server_cc patch-tools_gn_build_gen_py patch-ui_base_cursor_cursor_factory_cc patch-ui_base_ime_fake_text_input_client_cc patch-ui_base_ime_fake_text_input_client_h patch-ui_base_test_ui_controls_h patch-ui_base_ui_base_features_cc patch-ui_base_x_x11_display_manager_cc patch-ui_base_x_x11_display_util_cc patch-ui_color_color_id_h patch-ui_color_color_provider_utils_cc patch-ui_events_event_cc patch-ui_gfx_font_render_params_linux_cc patch-ui_gfx_font_util_cc patch-ui_gfx_gpu_memory_buffer_h patch-ui_gfx_linux_gbm_wrapper_cc patch-ui_gfx_mojom_native_handle_types_mojom_traits_h patch-ui_gfx_platform_font_skia_cc patch-ui_gl_BUILD_gn patch-ui_gl_gl_switches_cc patch-ui_ozone_platform_headless_vulkan_implementation_headless_cc patch-ui_ozone_platform_wayland_emulate_wayland_input_emulate_cc patch-ui_ozone_platform_wayland_emulate_wayland_input_emulate_h patch-ui_ozone_platform_wayland_host_wayland_toplevel_window_cc patch-ui_ozone_platform_wayland_host_wayland_toplevel_window_h patch-ui_ozone_platform_wayland_host_wayland_window_cc patch-ui_ozone_platform_wayland_host_wayland_window_h patch-ui_ozone_platform_wayland_host_xdg_toplevel_wrapper_impl_cc patch-ui_ozone_platform_wayland_ozone_platform_wayland_cc patch-ui_ozone_platform_x11_vulkan_implementation_x11_cc patch-ui_ozone_platform_x11_x11_screen_ozone_cc patch-ui_ozone_platform_x11_x11_screen_ozone_h patch-ui_ozone_platform_x11_x11_window_cc patch-ui_ozone_test_mock_platform_window_delegate_h patch-ui_platform_window_platform_window_delegate_cc patch-ui_platform_window_platform_window_delegate_h patch-ui_platform_window_platform_window_init_properties_h patch-ui_views_controls_textfield_textfield_cc patch-ui_views_controls_textfield_textfield_h patch-ui_views_style_platform_style_cc patch-ui_views_test_ui_controls_factory_desktop_aura_ozone_cc patch-ui_views_widget_desktop_aura_desktop_drag_drop_client_ozone_cc patch-ui_views_widget_desktop_aura_desktop_window_tree_host_platform_cc patch-ui_views_widget_widget_cc patch-ui_views_widget_widget_h patch-v8_BUILD_gn patch-v8_src_api_api_cc patch-v8_src_base_platform_platform-posix_cc patch-v8_src_execution_isolate_cc patch-v8_src_flags_flags_cc patch-v8_src_wasm_baseline_ia32_liftoff-assembler-ia32-inl_h Added files: www/chromium/patches: patch-build_config_clang_BUILD_gn patch-build_config_rust_gni patch-build_rust_std_BUILD_gn patch-chrome_browser_chrome_browser_main_extra_parts_ozone_cc patch-chrome_browser_chrome_browser_main_linux_h patch-chrome_browser_ui_startup_startup_tab_provider_cc patch-chrome_common_media_cdm_registration_h patch-components_constrained_window_constrained_window_views_cc patch-third_party_perfetto_src_tracing_service_tracing_service_impl_cc patch-ui_ozone_platform_wayland_host_wayland_input_method_context_cc Removed files: www/chromium/patches: patch-base_base_switches_cc patch-base_base_switches_h patch-chrome_browser_permissions_chrome_permissions_client_cc patch-chrome_browser_ui_webui_ntp_app_launcher_handler_cc patch-chrome_test_BUILD_gn patch-components_qr_code_generator_BUILD_gn patch-components_qr_code_generator_features_cc patch-components_qr_code_generator_features_h patch-components_qr_code_generator_qr_code_generator_cc patch-services_device_compute_pressure_cpu_probe_cc patch-third_party_blink_renderer_platform_text_text_break_iterator_cc patch-third_party_ffmpeg_configure patch-third_party_perfetto_src_trace_processor_db_column_numeric_storage_cc patch-third_party_perfetto_src_tracing_core_tracing_service_impl_cc Log message: update to 123.0.6312.58 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/22 07:14:32 Modified files: telephony/asterisk-g729: Makefile distinfo Log message: update to asterisk-g729-1.4.4 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/22 07:14:37 Modified files: textproc/mupdf : Makefile distinfo textproc/mupdf/patches: patch-Makefile patch-Makerules patch-Makethird patch-platform_x11_pdfapp_c patch-source_helpers_pkcs7_pkcs7-openssl_c patch-source_tools_mudraw_c patch-source_tools_pdfclean_c patch-source_tools_pdfextract_c patch-source_tools_pdfinfo_c patch-source_tools_pdfpages_c patch-source_tools_pdfposter_c textproc/mupdf/pkg: PLIST Log message: update to mupdf-1.24.0 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/22 07:32:21 Modified files: devel/py-rencode: Makefile distinfo devel/py-rencode/patches: patch-setup_py Log message: update py-rencode to git version, reenabling cython and unbreaking build with python 3.11. CVSROOT: /cvs Module name: ports Changes by: pvk@cvs.openbsd.org 2024/03/22 07:41:49 Modified files: net/mattermost-server: Makefile Log message: Mark mattermost-server as BROKEN after direct syscall(2) removal CVSROOT: /cvs Module name: ports Changes by: pvk@cvs.openbsd.org 2024/03/22 07:43:31 Modified files: security/squealer: Makefile distinfo modules.inc Log message: Update squealer 1.2.1 -> 1.2.2 Changelog: https://github.com/owenrumney/squealer/releases/tag/v1.2.2 CVSROOT: /cvs Module name: ports Changes by: semarie@cvs.openbsd.org 2024/03/22 08:05:57 Modified files: devel/rust-analyzer: Makefile crates.inc distinfo devel/rust-analyzer/patches: patch-crates_sourcegen_src_lib_rs Added files: devel/rust-analyzer/patches: patch-xtask_src_codegen_rs Removed files: devel/rust-analyzer/patches: patch-crates_rust-analyzer_tests_slow-tests_tidy_rs Log message: update devel/rust-analyzer to 2024-03-18 (and unbreak it) CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2024/03/22 08:35:23 Modified files: www/mozilla-firefox: Makefile distinfo www/firefox-i18n: Makefile.inc distinfo Log message: www/mozilla-firefox: update to 124.0.1. see https://www.mozilla.org/en-US/firefox/124.0.1/releasenotes/ fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-15/ CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2024/03/22 08:36:42 Modified files: www/mozilla-firefox: Tag: OPENBSD_7_4 Makefile distinfo Log message: www/mozilla-firefox: MFC update to 124.0.1. see https://www.mozilla.org/en-US/firefox/124.0.1/releasenotes/ fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-15/ CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2024/03/22 09:41:34 Modified files: usr.sbin/bgpd : bgpd.h logmsg.c rtr_proto.c session.c util.c Log message: Rework the cease shutdown reason to work in both directions by looking at the ibuf payload passed to log_notification(). Because of this move ibuf_get_string() and the log_notification() call in parse_notification(). OK tb@ CVSROOT: /cvs Module name: ports Changes by: fcambus@cvs.openbsd.org 2024/03/22 10:27:02 Modified files: fonts/spleen : Makefile distinfo Log message: Update spleen to 2.1.0. CVSROOT: /cvs Module name: ports Changes by: paco@cvs.openbsd.org 2024/03/22 10:40:17 Modified files: audio/ncspot : Makefile crates.inc distinfo Log message: update audio/ncspot to 1.1.0 from lraab@ ok Henrik Friedrichsen (maintainer). While here take maintainer as Henrik asked for it. CVSROOT: /cvs Module name: src Changes by: mvs@cvs.openbsd.org 2024/03/22 11:34:11 Modified files: sys/kern : uipc_socket.c uipc_usrreq.c sys/sys : socketvar.h Log message: Use sorflush() instead of direct unp_scan(..., unp_discard) to discard dead unix(4) sockets. The difference in direct unp_scan() and sorflush() is the mbuf(9) chain. For the first case it is still linked to the `so_rcv', for the second it is not. This is required to make `sb_mtx' mutex(9) the only `so_rcv' sockbuf protection and remove socket re-locking from the most of uipc_*send() paths. The unlinked mbuf(9) chain doesn't require any protection, so this allows to perform sleeping unp_discard() lockless. Also, the mbuf(9) chain of the discarded socket still contains addresses of file descriptors and it is much safer to unlink it before FRELE() them. This is the reason to commit this diff standalone. ok bluhm CVSROOT: /cvs Module name: src Changes by: bluhm@cvs.openbsd.org 2024/03/22 12:05:01 Modified files: sys/netinet : in_pcb.c in_pcb.h sys/netinet6 : in6_pcb.c Log message: Make local port which is bound during connect(2) unique per laddr. in_pcbconnect() did not pass down the address it got from in_pcbselsrc() to in_pcbpickport(). As a consequence local port numbers selected during connect(2) were globally unique although they belong to different addresses. This strict uniqueness is not necessary and wastes usable ports for outgoing connections. To solve this, pass ina from in_pcbconnect() to in_pcbbind_locked(). This does not interfere how wildcard sockets are matched with specific sockets during bind(2). It only allows non-wildcard sockets to share a local port during connect(2). OK mvs@ deraadt@ CVSROOT: /cvs Module name: src Changes by: bluhm@cvs.openbsd.org 2024/03/22 13:14:28 Modified files: usr.sbin/lpd : control.c Log message: Fix chroot(2) call in control process. Use /var/empty as chroot directory. Call chroot(2) before setresuid(2). Do the error check correctly. Call chdir(2) after chroot(2). from spiros thanasoulas; with florian@ tb@; OK millert@ CVSROOT: /cvs Module name: src Changes by: jcs@cvs.openbsd.org 2024/03/22 13:22:23 Modified files: usr.bin/patch : backupfile.c patch.1 patch.c Log message: add "-V none" to prevent making any backups from FreeBSD ok bluhm deraadt CVSROOT: /cvs Module name: ports Changes by: robert@cvs.openbsd.org 2024/03/22 14:13:26 Modified files: www/ungoogled-chromium: Makefile distinfo www/ungoogled-chromium/patches: patch-BUILD_gn patch-base_BUILD_gn patch-base_allocator_partition_allocator_partition_alloc_gni patch-base_allocator_partition_allocator_src_partition_alloc_BUILD_gn patch-base_functional_unretained_traits_h patch-base_i18n_icu_util_cc patch-base_native_library_unittest_cc patch-base_process_process_handle_openbsd_cc patch-base_process_process_metrics_h patch-base_process_process_unittest_cc patch-base_profiler_stack_sampling_profiler_unittest_cc patch-base_rand_util_posix_cc patch-base_synchronization_lock_impl_h patch-base_syslog_logging_cc patch-base_system_sys_info_posix_cc patch-base_test_test_file_util_posix_cc patch-base_threading_hang_watcher_cc patch-base_threading_platform_thread_internal_posix_cc patch-base_trace_event_process_memory_dump_cc patch-build_config_compiler_BUILD_gn patch-build_toolchain_gcc_toolchain_gni patch-build_toolchain_toolchain_gni patch-cc_BUILD_gn patch-chrome_app_chrome_main_cc patch-chrome_app_chrome_main_delegate_cc patch-chrome_browser_BUILD_gn patch-chrome_browser_about_flags_cc patch-chrome_browser_accessibility_pdf_ocr_controller_cc patch-chrome_browser_after_startup_task_utils_cc patch-chrome_browser_background_background_mode_manager_cc patch-chrome_browser_background_background_mode_optimizer_cc patch-chrome_browser_browser_features_cc patch-chrome_browser_browser_process_impl_cc patch-chrome_browser_chrome_browser_interface_binders_cc patch-chrome_browser_chrome_browser_main_cc patch-chrome_browser_chrome_browser_main_linux_cc patch-chrome_browser_chrome_content_browser_client_cc patch-chrome_browser_chrome_content_browser_client_h patch-chrome_browser_component_updater_widevine_cdm_component_installer_cc patch-chrome_browser_download_chrome_download_manager_delegate_cc patch-chrome_browser_download_download_item_model_cc patch-chrome_browser_enterprise_connectors_reporting_browser_crash_event_router_cc patch-chrome_browser_enterprise_connectors_reporting_crash_reporting_context_cc patch-chrome_browser_extensions_BUILD_gn patch-chrome_browser_extensions_api_passwords_private_passwords_private_delegate_impl_cc patch-chrome_browser_extensions_api_runtime_chrome_runtime_api_delegate_cc patch-chrome_browser_extensions_api_settings_private_prefs_util_cc patch-chrome_browser_extensions_api_tabs_tabs_api_cc patch-chrome_browser_flag_descriptions_cc patch-chrome_browser_flag_descriptions_h patch-chrome_browser_headless_headless_mode_util_cc patch-chrome_browser_metrics_chrome_metrics_service_client_cc patch-chrome_browser_net_system_network_context_manager_cc patch-chrome_browser_net_system_network_context_manager_h patch-chrome_browser_password_manager_chrome_password_manager_client_cc patch-chrome_browser_password_manager_password_reuse_manager_factory_cc patch-chrome_browser_policy_configuration_policy_handler_list_factory_cc patch-chrome_browser_prefs_browser_prefs_cc patch-chrome_browser_prefs_pref_service_incognito_allowlist_cc patch-chrome_browser_profiles_chrome_browser_main_extra_parts_profiles_cc patch-chrome_browser_profiles_profile_impl_cc patch-chrome_browser_safe_browsing_download_protection_file_analyzer_cc patch-chrome_browser_screen_ai_screen_ai_install_state_cc patch-chrome_browser_send_tab_to_self_receiving_ui_handler_registry_cc patch-chrome_browser_send_tab_to_self_send_tab_to_self_client_service_cc patch-chrome_browser_sync_chrome_sync_client_cc patch-chrome_browser_sync_sync_service_factory_cc patch-chrome_browser_ui_actions_chrome_action_id_h patch-chrome_browser_ui_browser_command_controller_cc patch-chrome_browser_ui_chrome_pages_cc patch-chrome_browser_ui_passwords_manage_passwords_ui_controller_cc patch-chrome_browser_ui_startup_startup_browser_creator_cc patch-chrome_browser_ui_startup_startup_browser_creator_impl_cc patch-chrome_browser_ui_tab_helpers_cc patch-chrome_browser_ui_ui_features_cc patch-chrome_browser_ui_ui_features_h patch-chrome_browser_ui_views_accelerator_table_cc patch-chrome_browser_ui_views_chrome_browser_main_extra_parts_views_cc patch-chrome_browser_ui_views_compose_compose_dialog_view_cc patch-chrome_browser_ui_views_frame_browser_view_cc patch-chrome_browser_ui_views_frame_picture_in_picture_browser_frame_view_cc patch-chrome_browser_ui_views_frame_picture_in_picture_browser_frame_view_h patch-chrome_browser_ui_views_passwords_password_bubble_view_base_cc patch-chrome_browser_ui_views_profiles_profile_menu_view_base_cc patch-chrome_browser_ui_views_tab_search_bubble_host_cc patch-chrome_browser_ui_views_tabs_tab_drag_controller_cc patch-chrome_browser_ui_views_tabs_tab_hover_card_bubble_view_cc patch-chrome_browser_ui_views_user_education_browser_user_education_service_cc patch-chrome_browser_ui_views_web_apps_web_app_integration_test_driver_cc patch-chrome_browser_ui_webui_app_home_app_home_page_handler_cc patch-chrome_browser_ui_webui_chrome_web_ui_controller_factory_cc patch-chrome_browser_ui_webui_realbox_realbox_handler_cc patch-chrome_browser_ui_webui_settings_accessibility_main_handler_cc patch-chrome_browser_ui_webui_settings_accessibility_main_handler_h patch-chrome_browser_ui_webui_settings_settings_localized_strings_provider_cc patch-chrome_browser_web_applications_os_integration_web_app_shortcut_manager_cc patch-chrome_browser_web_applications_policy_web_app_policy_manager_cc patch-chrome_browser_webauthn_chrome_authenticator_request_delegate_cc patch-chrome_common_chrome_features_cc patch-chrome_common_chrome_features_h patch-chrome_common_chrome_paths_cc patch-chrome_common_chrome_switches_cc patch-chrome_common_chrome_switches_h patch-chrome_common_media_cdm_registration_cc patch-chrome_common_media_component_widevine_cdm_hint_file_linux_h patch-chrome_common_pref_names_h patch-chrome_common_url_constants_h patch-chrome_common_webui_url_constants_cc patch-chrome_common_webui_url_constants_h patch-chrome_renderer_chrome_render_frame_observer_cc patch-chrome_services_printing_print_backend_service_impl_cc patch-chrome_utility_services_cc patch-chromecast_browser_cast_content_browser_client_cc patch-components_autofill_core_browser_personal_data_manager_cc patch-components_autofill_core_common_autofill_util_cc patch-components_commerce_core_commerce_feature_list_cc patch-components_crash_core_app_BUILD_gn patch-components_feature_engagement_public_feature_configurations_cc patch-components_feature_engagement_public_feature_constants_cc patch-components_feature_engagement_public_feature_constants_h patch-components_feature_engagement_public_feature_list_cc patch-components_feature_engagement_public_feature_list_h patch-components_gwp_asan_client_gwp_asan_cc patch-components_gwp_asan_crash_handler_crash_analyzer_cc patch-components_live_caption_caption_util_h patch-components_named_mojo_ipc_server_connection_info_h patch-components_password_manager_core_browser_features_password_features_cc patch-components_password_manager_core_browser_features_password_features_h patch-components_password_manager_core_browser_password_form_manager_cc patch-components_password_manager_core_browser_password_manager_cc patch-components_password_manager_core_browser_password_store_login_database_unittest_cc patch-components_password_manager_core_browser_sync_password_sync_bridge_cc patch-components_password_manager_core_common_password_manager_pref_names_h patch-components_policy_core_browser_policy_pref_mapping_test_cc patch-components_policy_core_common_cloud_cloud_policy_client_cc patch-components_policy_core_common_cloud_cloud_policy_util_cc patch-components_safe_browsing_core_common_features_cc patch-components_search_engines_search_engine_choice_search_engine_choice_service_cc patch-components_search_engines_template_url_service_cc patch-components_services_screen_ai_public_cpp_utilities_cc patch-components_signin_public_base_signin_switches_cc patch-components_signin_public_base_signin_switches_h patch-components_supervised_user_core_browser_supervised_user_service_cc patch-components_supervised_user_core_common_features_cc patch-components_supervised_user_core_common_features_h patch-components_sync_base_features_cc patch-components_user_education_views_help_bubble_view_cc patch-components_variations_service_variations_service_cc patch-components_viz_service_display_embedder_skia_output_surface_impl_cc patch-components_viz_service_display_skia_renderer_cc patch-components_viz_service_frame_sinks_root_compositor_frame_sink_impl_cc patch-content_app_content_main_runner_impl_cc patch-content_browser_BUILD_gn patch-content_browser_browser_child_process_host_impl_cc patch-content_browser_browser_main_loop_cc patch-content_browser_child_process_launcher_helper_h patch-content_browser_gpu_gpu_data_manager_impl_private_cc patch-content_browser_gpu_gpu_process_host_cc patch-content_browser_media_media_keys_listener_manager_impl_cc patch-content_browser_renderer_host_delegated_frame_host_cc patch-content_browser_renderer_host_render_process_host_impl_cc patch-content_browser_renderer_host_render_process_host_impl_h patch-content_browser_renderer_host_render_widget_host_view_aura_cc patch-content_browser_renderer_host_render_widget_host_view_aura_h patch-content_browser_utility_process_host_cc patch-content_browser_web_contents_web_contents_view_aura_cc patch-content_common_features_cc patch-content_common_features_h patch-content_gpu_gpu_main_cc patch-content_public_browser_content_browser_client_cc patch-content_public_common_content_features_cc patch-content_renderer_render_thread_impl_cc patch-content_renderer_renderer_blink_platform_impl_cc patch-content_renderer_renderer_blink_platform_impl_h patch-content_shell_BUILD_gn patch-content_shell_app_shell_main_delegate_cc patch-content_test_BUILD_gn patch-content_utility_services_cc patch-content_zygote_zygote_linux_cc patch-device_bluetooth_bluetooth_adapter_cc patch-extensions_browser_api_api_browser_context_keyed_service_factories_cc patch-extensions_browser_api_management_management_api_cc patch-extensions_browser_api_messaging_message_service_cc patch-gpu_command_buffer_service_gles2_cmd_decoder_cc patch-gpu_command_buffer_service_shared_image_external_vk_image_backing_cc patch-gpu_command_buffer_service_shared_image_external_vk_image_backing_factory_cc patch-gpu_command_buffer_service_shared_image_shared_image_factory_cc patch-gpu_command_buffer_service_shared_image_shared_image_manager_cc patch-gpu_command_buffer_service_shared_image_wrapped_sk_image_backing_cc patch-gpu_command_buffer_service_webgpu_decoder_impl_cc patch-gpu_config_gpu_finch_features_cc patch-gpu_ipc_service_gpu_init_cc patch-media_base_libaom_thread_wrapper_cc patch-media_base_libvpx_thread_wrapper_cc patch-media_base_media_switches_cc patch-media_base_media_switches_h patch-media_base_video_frame_cc patch-media_gpu_chromeos_libyuv_image_processor_backend_cc patch-media_gpu_chromeos_mailbox_video_frame_converter_cc patch-media_gpu_chromeos_platform_video_frame_utils_cc patch-media_gpu_chromeos_video_decoder_pipeline_cc patch-media_gpu_sandbox_hardware_video_decoding_sandbox_hook_linux_cc patch-media_gpu_vaapi_vaapi_video_decoder_cc patch-media_gpu_vaapi_vaapi_wrapper_cc patch-media_video_gpu_memory_buffer_video_frame_pool_cc patch-media_video_video_encode_accelerator_adapter_cc patch-media_webrtc_audio_processor_cc patch-media_webrtc_helpers_cc patch-media_webrtc_helpers_unittests_cc patch-mojo_public_c_system_thunks_cc patch-net_BUILD_gn patch-net_base_features_cc patch-net_http_http_auth_handler_negotiate_cc patch-net_socket_udp_socket_posix_cc patch-net_socket_udp_socket_unittest_cc patch-net_url_request_url_request_context_builder_cc patch-remoting_host_policy_watcher_cc patch-remoting_host_remoting_me2me_host_cc patch-sandbox_policy_features_cc patch-sandbox_policy_features_h patch-sandbox_policy_openbsd_sandbox_openbsd_cc patch-services_device_public_mojom_BUILD_gn patch-services_network_BUILD_gn patch-services_network_network_context_cc patch-services_network_network_sandbox_hook_linux_cc patch-services_network_network_service_cc patch-services_network_network_service_h patch-services_network_public_cpp_BUILD_gn patch-services_network_public_mojom_BUILD_gn patch-services_on_device_model_on_device_model_service_h patch-third_party_abseil-cpp_absl_base_config_h patch-third_party_angle_BUILD_gn patch-third_party_angle_src_libANGLE_Display_cpp patch-third_party_blink_public_common_renderer_preferences_renderer_preferences_h patch-third_party_blink_public_common_renderer_preferences_renderer_preferences_mojom_traits_h patch-third_party_blink_public_platform_platform_h patch-third_party_blink_renderer_core_exported_web_view_impl_cc patch-third_party_blink_renderer_core_frame_web_frame_test_cc patch-third_party_blink_renderer_core_layout_layout_view_cc patch-third_party_blink_renderer_core_scroll_scrollbar_theme_aura_cc patch-third_party_blink_renderer_modules_media_audio_audio_renderer_mixer_manager_test_cc patch-third_party_blink_renderer_modules_peerconnection_webrtc_audio_renderer_test_cc patch-third_party_blink_renderer_modules_webgl_webgl_rendering_context_base_cc patch-third_party_blink_renderer_modules_webgpu_gpu_queue_cc patch-third_party_blink_renderer_platform_BUILD_gn patch-third_party_blink_renderer_platform_fonts_font_cache_cc patch-third_party_blink_renderer_platform_fonts_font_cache_h patch-third_party_blink_renderer_platform_fonts_skia_font_cache_skia_cc patch-third_party_blink_renderer_platform_runtime_enabled_features_json5 patch-third_party_boringssl_src_util_generate_build_files_py patch-third_party_cpuinfo_cpuinfo_gni patch-third_party_ffmpeg_chromium_scripts_build_ffmpeg_py patch-third_party_ffmpeg_chromium_scripts_robo_lib_config_py patch-third_party_fontconfig_include_config_h patch-third_party_libaom_source_libaom_aom_ports_aarch64_cpudetect_c patch-third_party_material_color_utilities_src_cpp_palettes_tones_cc patch-third_party_speech-dispatcher_libspeechd_version_h patch-third_party_sqlite_src_amalgamation_sqlite3_c patch-third_party_test_fonts_fontconfig_fontconfig_util_linux_cc patch-third_party_webrtc_rtc_base_physical_socket_server_cc patch-tools_gn_build_gen_py patch-ui_base_cursor_cursor_factory_cc patch-ui_base_ime_fake_text_input_client_cc patch-ui_base_ime_fake_text_input_client_h patch-ui_base_test_ui_controls_h patch-ui_base_ui_base_features_cc patch-ui_base_x_x11_display_manager_cc patch-ui_base_x_x11_display_util_cc patch-ui_color_color_id_h patch-ui_color_color_provider_utils_cc patch-ui_events_event_cc patch-ui_gfx_font_render_params_linux_cc patch-ui_gfx_font_util_cc patch-ui_gfx_gpu_memory_buffer_h patch-ui_gfx_linux_gbm_wrapper_cc patch-ui_gfx_mojom_native_handle_types_mojom_traits_h patch-ui_gfx_platform_font_skia_cc patch-ui_gl_BUILD_gn patch-ui_gl_gl_switches_cc patch-ui_ozone_platform_headless_vulkan_implementation_headless_cc patch-ui_ozone_platform_wayland_emulate_wayland_input_emulate_cc patch-ui_ozone_platform_wayland_emulate_wayland_input_emulate_h patch-ui_ozone_platform_wayland_host_wayland_toplevel_window_cc patch-ui_ozone_platform_wayland_host_wayland_toplevel_window_h patch-ui_ozone_platform_wayland_host_wayland_window_cc patch-ui_ozone_platform_wayland_host_wayland_window_h patch-ui_ozone_platform_wayland_host_xdg_toplevel_wrapper_impl_cc patch-ui_ozone_platform_wayland_ozone_platform_wayland_cc patch-ui_ozone_platform_x11_vulkan_implementation_x11_cc patch-ui_ozone_platform_x11_x11_screen_ozone_cc patch-ui_ozone_platform_x11_x11_screen_ozone_h patch-ui_ozone_platform_x11_x11_window_cc patch-ui_ozone_test_mock_platform_window_delegate_h patch-ui_platform_window_platform_window_delegate_cc patch-ui_platform_window_platform_window_delegate_h patch-ui_platform_window_platform_window_init_properties_h patch-ui_views_controls_textfield_textfield_cc patch-ui_views_controls_textfield_textfield_h patch-ui_views_style_platform_style_cc patch-ui_views_test_ui_controls_factory_desktop_aura_ozone_cc patch-ui_views_widget_desktop_aura_desktop_drag_drop_client_ozone_cc patch-ui_views_widget_desktop_aura_desktop_window_tree_host_platform_cc patch-ui_views_widget_widget_cc patch-ui_views_widget_widget_h patch-v8_BUILD_gn patch-v8_src_api_api_cc patch-v8_src_base_platform_platform-posix_cc patch-v8_src_execution_isolate_cc patch-v8_src_flags_flags_cc patch-v8_src_wasm_baseline_ia32_liftoff-assembler-ia32-inl_h Added files: www/ungoogled-chromium/patches: patch-build_config_clang_BUILD_gn patch-build_config_rust_gni patch-build_rust_std_BUILD_gn patch-chrome_browser_chrome_browser_main_extra_parts_ozone_cc patch-chrome_browser_chrome_browser_main_linux_h patch-chrome_browser_ui_startup_startup_tab_provider_cc patch-chrome_common_media_cdm_registration_h patch-components_constrained_window_constrained_window_views_cc patch-third_party_perfetto_src_tracing_service_tracing_service_impl_cc patch-ui_ozone_platform_wayland_host_wayland_input_method_context_cc Removed files: www/ungoogled-chromium/patches: patch-base_base_switches_cc patch-base_base_switches_h patch-chrome_browser_permissions_chrome_permissions_client_cc patch-chrome_browser_ui_webui_ntp_app_launcher_handler_cc patch-chrome_test_BUILD_gn patch-components_qr_code_generator_BUILD_gn patch-components_qr_code_generator_features_cc patch-components_qr_code_generator_features_h patch-components_qr_code_generator_qr_code_generator_cc patch-services_device_compute_pressure_cpu_probe_cc patch-third_party_blink_renderer_platform_text_text_break_iterator_cc patch-third_party_ffmpeg_configure patch-third_party_perfetto_src_trace_processor_db_column_numeric_storage_cc patch-third_party_perfetto_src_tracing_core_tracing_service_impl_cc Log message: update to 123.0.6312.58 CVSROOT: /cvs Module name: src Changes by: bluhm@cvs.openbsd.org 2024/03/22 15:48:38 Modified files: sys/netinet : in_pcb.c in_pcb.h Log message: Remove padding from union inpaddru. Alignment of IPv4 address with lower part of IPv6 address looks like a leftover from times when IPv6 compatible addresses should contain IPv4 addreses. Better use a simple union for both IPv4 and IPv6 addresses like everywhere else. Use this type also for common zero address. OK mvs@ CVSROOT: /cvs Module name: src Changes by: jan@cvs.openbsd.org 2024/03/22 15:49:52 Modified files: regress/sbin/disklabel: 12000.ok 18000.ok 20000.ok 300000.ok 40000.ok 90000.ok 900000.ok sbin/disklabel : disklabel.8 editor.c Log message: Increase /usr/src partition to 2GB - 5GB ok miod@, deraadt@, otto@ and bluhm@ CVSROOT: /cvs Module name: www Changes by: jsg@cvs.openbsd.org 2024/03/22 17:43:39 Modified files: . : 75.html Log message: add drm changes as requested by benno@ CVSROOT: /cvs Module name: www Changes by: jsg@cvs.openbsd.org 2024/03/22 17:58:24 Modified files: . : 75.html Log message: arm64 now has cd install media CVSROOT: /cvs Module name: src Changes by: mvs@cvs.openbsd.org 2024/03/22 19:35:57 Modified files: regress/sys/kern/unixsockets: unixsock_test.c Log message: Fix main() definition. CVSROOT: /cvs Module name: src Changes by: job@cvs.openbsd.org 2024/03/22 22:18:56 Modified files: etc/rpki : lacnic.constraints Log message: Expand ASN range for LACNIC LACNIC received a new block of ASNs from IANA https://mail.lacnic.net/pipermail/lacnog/2024-March/009690.html OK tb@ CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/23 00:37:15 Modified files: lib/libcrypto/x509: x509_trs.c Log message: Remove unused flags argument from the trust handlers The public X509_check_trust() takes a flag parameter which we must leave in place. However, we can stop passing the flag parameter around without ever looking at it. ok jsing CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/23 00:38:01 Modified files: lib/libcrypto/x509: x509_trs.c Log message: Remove unused flags and arg2 members from X509_TRUST ok jsing CVSROOT: /cvs Module name: ports Changes by: rsadowski@cvs.openbsd.org 2024/03/23 00:51:45 Modified files: security/keepassxc: Makefile distinfo Log message: Update keepassxc to 2.7.7 - Enabled PassKeys in the browser flavor. - CL: https://github.com/keepassxreboot/keepassxc/releases/tag/2.7.7 OK kn @ CVSROOT: /cvs Module name: ports Changes by: rsadowski@cvs.openbsd.org 2024/03/23 00:54:27 Modified files: x11/qt5 : qt5.port.mk x11/qt6 : qt6.port.mk Log message: Make _MODQT6_SETUP and _MODQT5_SETUP optional Enabled by default so that the behavior does not change. CVSROOT: /cvs Module name: ports Changes by: rsadowski@cvs.openbsd.org 2024/03/23 00:57:02 Log message: Import qca-qt6-2.3.8 Comment: Qt Cryptographic Architecture Description: QCA aims to provide a straightforward and cross-platform crypto API, using Qt datatypes and conventions. QCA separates the API from the implementation, using plugins known as Providers. Maintainer: Rafael Sadowski WWW: https://userbase.kde.org/QCA OK landry@ Status: Vendor Tag: rsadowski Release Tags: rsadowski_20240323 N ports/security/qca-qt6/Makefile N ports/security/qca-qt6/distinfo N ports/security/qca-qt6/patches/patch-plugins_qca-ossl_qca-ossl_cpp N ports/security/qca-qt6/patches/patch-unittest_CMakeLists_txt N ports/security/qca-qt6/pkg/DESCR N ports/security/qca-qt6/pkg/PLIST No conflicts created by this import CVSROOT: /cvs Module name: ports Changes by: rsadowski@cvs.openbsd.org 2024/03/23 00:57:28 Modified files: security : Makefile Log message: +qca-qt6 CVSROOT: /cvs Module name: ports Changes by: rsadowski@cvs.openbsd.org 2024/03/23 01:06:58 Modified files: devel/kf5/baloo: Makefile devel/kf5/baloo/pkg: PLIST devel/kf5/kglobalaccel: Makefile devel/kf5/kglobalaccel/pkg: PLIST devel/kf5/kguiaddons: Makefile devel/kf5/kguiaddons/pkg: PLIST devel/kf5/kiconthemes: Makefile devel/kf5/kio : Makefile devel/kf5/kio/pkg: PLIST devel/kf5/kirigami2: Makefile devel/kf5/kwallet: Makefile devel/kf5/kwallet/pkg: PLIST devel/kf5/plasma-framework: Makefile devel/kf5/plasma-framework/pkg: PLIST Log message: Coinstallability changes - kguiaddons: -DBUILD_GEO_SCHEME_HANDLER=OFF - baloo: -DBUILD_INDEXER_SERVICE=OFF - kglobalaccel: -DKF6_COMPAT_BUILD=ON - kwallet: -DBUILD_KWALLETD=OFF and -DBUILD_KWALLET_QUERY=OFF - kio: -DKF6_COMPAT_BUILD=ON - plasma-framework: -DBUILD_DESKTOPTHEMES=OFF (now releases with Plasma6) As described here (Coinstallability) https://community.kde.org/Frameworks/6.0_Release_notes CVSROOT: /cvs Module name: ports Changes by: pascal@cvs.openbsd.org 2024/03/23 01:26:49 Modified files: games/extremetuxracer: Makefile distinfo games/extremetuxracer/pkg: PLIST Log message: Update to extremetuxracer 0.8.3. CVSROOT: /cvs Module name: ports Changes by: rsadowski@cvs.openbsd.org 2024/03/23 01:38:53 Modified files: devel/cmake : Makefile distinfo devel/cmake/patches: patch-Source_cmGlobalGenerator_cxx patch-Source_cmQtAutoGenInitializer_cxx Log message: Update cmake-3.28.4 CVSROOT: /cvs Module name: www Changes by: rsadowski@cvs.openbsd.org 2024/03/23 02:47:18 Modified files: . : 75.html Log message: Add KDE Plasma and Qt5 comes with KDE stable patches Plasma addition pointed by Kevin Williams via misc@ CVSROOT: /cvs Module name: ports Changes by: rsadowski@cvs.openbsd.org 2024/03/23 03:23:05 Modified files: net/nextcloudclient: Makefile distinfo net/nextcloudclient/patches: patch-CMakeLists_txt Log message: Update nextcloudclient to 3.12.2 Changelog: https://github.com/nextcloud/desktop/releases/v3.12.2 Update diff as usual from Adriano (maintainer) Obrigado CVSROOT: /cvs Module name: www Changes by: stsp@cvs.openbsd.org 2024/03/23 03:35:08 Modified files: . : 75.html Log message: fill in wifi sections; requested by benno CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/23 04:24:52 Modified files: mail/dcc : Makefile distinfo mail/dcc/pkg : PLIST Log message: update to dcc-2.3.169 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/23 04:24:57 Modified files: net/arouteserver: Makefile distinfo Log message: update to arouteserver-1.21.7 CVSROOT: /cvs Module name: src Changes by: sthen@cvs.openbsd.org 2024/03/23 04:35:50 Modified files: sys/dev/pci : pcidevs Log message: Add Meinberg PCI510, from Maurice Janssen CVSROOT: /cvs Module name: src Changes by: sthen@cvs.openbsd.org 2024/03/23 04:36:37 Modified files: sys/dev/pci : pcidevs_data.h pcidevs.h Log message: sync CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 04:37:07 Modified files: net/py-botocore: Makefile distinfo net/py-botocore/pkg: PLIST Log message: Update to py3-botocore-1.34.69. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 04:37:16 Modified files: net/py-boto3 : Makefile distinfo Log message: Update to py3-boto3-1.34.69. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 04:37:38 Modified files: sysutils/awscli: Makefile distinfo sysutils/awscli/pkg: PLIST Log message: Update to awscli-1.32.69. CVSROOT: /cvs Module name: src Changes by: sthen@cvs.openbsd.org 2024/03/23 04:38:02 Modified files: sys/dev/pci : mbg.c share/man/man4 : mbg.4 Log message: Recognise Meinberg PCI510, from Maurice Janssen CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 04:48:48 Modified files: astro/calcmysky: Makefile distinfo Log message: Update to calcmysky-0.3.2. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 04:48:59 Modified files: devel/glib2mm : Makefile distinfo Log message: Update to glib2mm-2.66.7. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 04:52:28 Modified files: devel/harfbuzz : Makefile distinfo Log message: Update to harfbuzz-8.3.1. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 04:52:40 Modified files: devel/libpeas2 : Makefile distinfo Log message: Update to libpeas2-2.0.2. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 04:58:03 Modified files: net/bro : Makefile Log message: Ignore 6.2.0 release. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 05:01:40 Modified files: graphics/gthumb: Makefile distinfo Log message: Update to gthumb-3.12.6. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 05:02:40 Modified files: lang/vala : Makefile distinfo Log message: Update to vala-0.56.16. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 05:02:57 Modified files: multimedia/py-chromecast: Makefile distinfo Log message: Update to py3-chromecast-14.0.1. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 05:04:50 Modified files: net/py-s3transfer: Makefile distinfo Log message: Update to py3-s3transfer-0.10.1. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 05:07:46 Modified files: print/a2ps : Makefile distinfo print/a2ps/pkg : PLIST Removed files: print/a2ps/patches: patch-src_a2ps-lpr-wrapper Log message: Update to a2ps-4.15.6. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 05:08:30 Modified files: print/libpaper : Makefile distinfo print/libpaper/pkg: PLIST Log message: Update to libpaper-2.2.5. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 05:22:13 Modified files: productivity/libphonenumber: Makefile distinfo Log message: Update to libphonenumber-8.13.32. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 05:27:09 Modified files: security/gnutls: Makefile distinfo security/gnutls/pkg: PLIST Added files: security/gnutls/patches: patch-lib_compress_c Log message: SECURITY update to gnutls-3.8.4. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 05:27:20 Modified files: sysutils/consul-template: Makefile distinfo Log message: Update to consul-template-0.37.3. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 05:28:26 Modified files: sysutils/exoscale-cli: Makefile distinfo Log message: Update to exoscale-cli-1.76.2. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 05:29:53 Modified files: sysutils/govmomi: Makefile distinfo Log message: Update to govc-0.36.1. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 05:46:38 Modified files: sysutils/google-cloud-sdk: Makefile distinfo sysutils/google-cloud-sdk/pkg: PLIST Log message: Update to google-cloud-sdk-469.0.0. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 05:48:54 Modified files: sysutils/terraform: Makefile distinfo modules.inc Log message: Update to terraform-1.7.5. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 05:52:05 Modified files: sysutils/terragrunt: Makefile distinfo modules.inc Log message: Update to terragrunt-0.55.19. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 05:52:44 Modified files: textproc/enchant2: Makefile distinfo Log message: Update to enchant2-2.6.8. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 05:54:36 Modified files: textproc/libxml: Makefile distinfo Log message: Update to libxml-2.12.6. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 05:57:47 Modified files: x11/gnome/eog : Makefile distinfo Log message: Update to eog-45.3. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 06:00:05 Modified files: x11/gnome/ghex : Makefile distinfo Log message: Update to ghex-45.2. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 06:03:25 Modified files: x11/gnome/libgweather4: Makefile distinfo x11/gnome/libgweather4/patches: patch-libgweather_weather-metar_c Log message: Update to libgweather4-4.4.2. CVSROOT: /cvs Module name: ports Changes by: rsadowski@cvs.openbsd.org 2024/03/23 06:06:37 Modified files: sysutils/kubectl: Makefile distinfo Log message: Update kubectl-1.29.3 CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 06:08:04 Modified files: security/gnutls: Makefile Log message: Add comment. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 06:10:22 Modified files: x11/gnome/librsvg: Makefile distinfo distinfo.old Log message: Update to librsvg-2.57.3. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 06:11:17 Modified files: x11/gnome/mutter: Makefile distinfo Log message: Update to mutter-45.5. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 06:12:38 Modified files: x11/gnome/at-spi2-core: Makefile distinfo x11/gnome/at-spi2-core/pkg: PLIST Log message: Update to at-spi2-core-2.50.2. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 06:18:38 Modified files: net/telepathy/folks: Makefile distinfo Log message: Update to folks-0.15.8. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 06:21:48 Modified files: x11/gnome/shell: Makefile distinfo Log message: Update to gnome-shell-45.5. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 06:22:09 Modified files: meta/gnome : Makefile Log message: Welcome GNOME 45.5. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 06:23:05 Modified files: x11/gnome/online-accounts: Makefile distinfo Log message: Update to gnome-online-accounts-3.48.1. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 06:24:11 Modified files: x11/gnome/tweaks: Makefile distinfo Log message: Update to gnome-tweaks-45.2. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 06:26:28 Modified files: x11/gnome/usage: Makefile distinfo x11/gnome/usage/pkg: PLIST Log message: Update to gnome-usage-45.1. CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/23 06:32:22 Modified files: lang/python/3.10: Makefile lang/python/3.10/files: CHANGES.OpenBSD lang/python/3.11: Makefile lang/python/3.11/files: CHANGES.OpenBSD Added files: lang/python/3.10/patches: patch-Lib_ctypes_util_py lang/python/3.11/patches: patch-Lib_ctypes_util_py Log message: Modify Python ctypes' find_library to pass "libc.so" to dlopen() rather than attempting to resolve a version number by parsing ldconfig -r output, which results in loading an incorrect version in some cases. ok kmos@ CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 06:35:00 Modified files: x11/gnome/user-docs: Makefile distinfo x11/gnome/user-docs/pkg: PLIST Log message: Update to gnome-user-docs-45.5. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 06:35:07 Modified files: x11/gtk3mm : Makefile distinfo Log message: Update to gtk3mm-3.24.9. CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/23 06:35:27 Modified files: lang/python : Makefile.inc lang/python/3.10: Makefile lang/python/3.10/pkg: PLIST-main lang/python/3.11: Makefile Added files: lang/python/3.10/files: EXTERNALLY-MANAGED lang/python/3.11/files: EXTERNALLY-MANAGED Log message: Include an EXTERNALLY-MANAGED file in the Python packages, which triggers a warning if users attempt to install modules system-wide outside the ports/packages system. ok kmos@ CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 06:47:37 Modified files: www/libwpe : Makefile distinfo Log message: Update to libwpe-1.16.0. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 06:53:38 Modified files: x11/gnome/libpanel: Makefile distinfo x11/gnome/libpanel/pkg: PLIST Log message: Update to libpanel-1.6.0. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 06:57:19 Modified files: print/epson-inkjet-printer-escpr: Makefile distinfo print/epson-inkjet-printer-escpr/pkg: PLIST Log message: Update to epson-inkjet-printer-escpr-1.8.5. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 06:57:31 Modified files: sysutils/cloud-sql-proxy: Makefile distinfo Log message: Update to cloud-sql-proxy-2.10.1. CVSROOT: /cvs Module name: www Changes by: sthen@cvs.openbsd.org 2024/03/23 07:01:24 Modified files: faq : faq10.html Log message: talk about SMT being disabled, I got bored of writing replies to forum posts where people say "oh just set sysctl hw.smt". slightly tweaked from a version which reads ok to mlarkin, I made some changes in response to a modified diff from tj though didn't take all of them. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 07:03:14 Modified files: x11/gnome/gucharmap: Makefile distinfo Log message: Update to gucharmap-15.1.3. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 07:03:35 Modified files: x11/gnome/gom : Makefile distinfo x11/gnome/gom/pkg: PLIST Log message: Update to gom-0.5.0. CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/23 07:03:43 Modified files: math/libqalculate: Makefile distinfo Log message: update to libqalculate-5.0.0, from Justin Berthault CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 07:10:16 Modified files: x11/gnome/libcloudproviders: Makefile distinfo Log message: Update to libcloudproviders-0.3.6. CVSROOT: /cvs Module name: ports Changes by: rsadowski@cvs.openbsd.org 2024/03/23 07:10:57 Modified files: audio/musique : Makefile audio/qsynth : Makefile multimedia/shotcut: Makefile net/qbittorrent: Makefile.inc net/transmission: Makefile net/wireshark : Makefile productivity/novprog: Makefile security/qdigidoc4: Makefile security/qtkeychain: Makefile security/web-eid-app: Makefile x11/qt6 : qt6.port.mk x11/qt6/qttools: Makefile x11/qt6ct : Makefile x11/tipp10 : Makefile Log message: Add qt6tools as a build dependency for all qt6 ports Almost all Qt6 ports cannot be built without it, so make it as default like in Qt5. All ports that have explicitly set it have been adjusted. lgtm, OK sthen@ CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 07:13:04 Modified files: x11/libgedit-gtksourceview: Makefile distinfo x11/libgedit-gtksourceview/pkg: PLIST Log message: Update to libgedit-gtksourceview-299.1.0. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 07:15:02 Modified files: multimedia/pipewire/pipewire: Makefile distinfo multimedia/pipewire/pipewire/patches: patch-meson_build patch-src_daemon_pipewire_conf_in patch-src_modules_module-netjack2-manager_c patch-src_modules_module-rtp-sap_c patch-src_pipewire_mem_c patch-src_pipewire_private_h multimedia/pipewire/pipewire/pkg: PLIST-main Log message: Update to pipewire-1.0.4. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 07:20:50 Modified files: x11/yaru : Makefile distinfo x11/yaru/pkg : PLIST Log message: Update to yaru-24.04.0. CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/23 07:20:57 Modified files: productivity/timewarrior: Makefile distinfo productivity/timewarrior/pkg: PLIST Log message: update to timewarrior-1.7.1, from Nils Reuße with tweaks to running tests CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/23 07:26:40 Modified files: security/suricata: Makefile security/suricata/pkg: PLIST Log message: add various @sample to suricata's PLIST that were missed in the 7.0.2 update CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 07:27:36 Modified files: sysutils/nomad : Makefile distinfo Log message: Update to nomad-1.7.6. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 07:29:40 Modified files: devel/spidermonkey115: Makefile distinfo Log message: Update to spidermonkey115-115.9.1. CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/23 07:29:45 Modified files: multimedia/svt-av1: Makefile distinfo Log message: update to svt-av1-2.0.0, from Brad CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/23 07:29:50 Modified files: graphics/jasper: Makefile distinfo Log message: update to jasper-4.2.1, from Brad CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/23 07:31:06 Modified files: www/lighttpd : Makefile distinfo Log message: update to lighttpd-1.4.75, from Brad (maintainer) CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 07:33:05 Modified files: devel/meson : Makefile distinfo meson.port.mk devel/meson/patches: patch-mesonbuild_build_py Log message: Update to meson-1.4.0. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 07:33:20 Modified files: mail/cyrus-imapd: Makefile distinfo mail/cyrus-imapd/pkg: PLIST Log message: Update to cyrus-imapd-3.8.2. CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/23 07:33:51 Modified files: multimedia/aom : Makefile distinfo Log message: update to aom-3.8.2, from Brad (maintainer) CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/23 07:34:46 Modified files: graphics/blender: Makefile distinfo Log message: update to blender-3.3.16, from Brad CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/23 07:35:52 Modified files: audio/cmus : Makefile audio/cmus/patches: patch-ip_ffmpeg_c Log message: cmus: allow building with newer FFmpeg, from Brad CVSROOT: /cvs Module name: www Changes by: dv@cvs.openbsd.org 2024/03/23 08:06:26 Modified files: . : 75.html Log message: Add some vmd/vmm updates for 7.5. CVSROOT: /cvs Module name: ports Changes by: caspar@cvs.openbsd.org 2024/03/23 08:23:27 Modified files: meta/tor-browser: Makefile www/tor-browser: Makefile.inc www/tor-browser/browser: Makefile distinfo Log message: Tor Browser: update to 13.0.13 CVSROOT: /cvs Module name: ports Changes by: caspar@cvs.openbsd.org 2024/03/23 08:24:08 Modified files: meta/tor-browser: Tag: OPENBSD_7_4 Makefile www/tor-browser: Tag: OPENBSD_7_4 Makefile.inc www/tor-browser/browser: Tag: OPENBSD_7_4 Makefile distinfo Log message: Tor Browser: update to 13.0.13 CVSROOT: /cvs Module name: ports Changes by: phessler@cvs.openbsd.org 2024/03/23 08:44:06 Modified files: www/yt-dlp : Makefile distinfo www/yt-dlp/pkg : PLIST Added files: www/yt-dlp/patches: patch-pyproject_toml Removed files: www/yt-dlp/patches: patch-setup_py Log message: Update to 2024.03.10 OK mestre@ (MAINTAINER), sthen@ CVSROOT: /cvs Module name: src Changes by: guenther@cvs.openbsd.org 2024/03/23 10:30:01 Modified files: lib/libc/gen : opendir.3 lib/libskey : skeylogin.c Log message: readdir_r(3) was never necessary and has been deprecated by POSIX. Document that in the manpage and stop using it internally. ok deraadt@ millert@ jmc@ CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2024/03/23 10:54:17 Modified files: geo/qgis : Makefile distinfo Removed files: geo/qgis/patches: patch-src_core_proj_qgscoordinatereferencesystemutils_cpp Log message: geo/qgis: update to 3.36.1 remove patch merged upstream CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2024/03/23 10:58:42 Modified files: www/firefox-esr: Makefile distinfo www/firefox-esr-i18n: Makefile.inc distinfo Log message: www/firefox-esr: update to 115.9.1. see https://www.mozilla.org/en-US/firefox/115.9.1esr/releasenotes/ fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-16/ CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2024/03/23 10:58:45 Modified files: www/firefox-esr: Tag: OPENBSD_7_4 Makefile distinfo Log message: www/firefox-esr: MFC update to 115.9.1. see https://www.mozilla.org/en-US/firefox/115.9.1esr/releasenotes/ fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-16/ CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/23 12:08:31 Modified files: emulators/qemu : Makefile distinfo Log message: update to qemu-8.2.2, from Brad (maintainer) CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/23 12:18:53 Modified files: mail/neomutt : Makefile distinfo Log message: update to neomutt-20240323 CVSROOT: /cvs Module name: www Changes by: djm@cvs.openbsd.org 2024/03/23 12:46:47 Modified files: . : 75.html Log message: add openssh bits CVSROOT: /cvs Module name: ports Changes by: denis@cvs.openbsd.org 2024/03/23 12:51:16 Modified files: sysutils/kopia : Makefile distinfo modules.inc Log message: Update to v0.16.0 Changelog at https://github.com/kopia/kopia/releases/tag/v0.16.0 CVSROOT: /cvs Module name: src Changes by: yasuoka@cvs.openbsd.org 2024/03/23 16:51:49 Modified files: lib/libevent : kqueue.c Log message: In kq_del(), delete matching EV_ADD entries to prevent libevent from passing both EV_ADD and EV_DELETE for the same fd to kevent(). ok visa CVSROOT: /cvs Module name: src Changes by: yasuoka@cvs.openbsd.org 2024/03/23 18:05:01 Modified files: sbin/iked : eap.c Added files: sbin/iked : radius.c Log message: Allow zero-length identity response ok tobhe CVSROOT: /cvs Module name: src Changes by: yasuoka@cvs.openbsd.org 2024/03/23 18:14:19 Removed files: sbin/iked : radius.c Log message: Remove radius.c which is added mistakenly and under review. CVSROOT: /cvs Module name: www Changes by: gnezdo@cvs.openbsd.org 2024/03/23 18:18:15 Modified files: . : 75.html Log message: Fix a typo CVSROOT: /cvs Module name: src Changes by: sthen@cvs.openbsd.org 2024/03/23 18:33:41 Modified files: usr.sbin/traceroute: traceroute.8 Log message: update project-cymru url, from Robert Keizer, slightly tweaked CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/23 18:35:45 Modified files: lib/libcrypto/x509: x509_trs.c Log message: Drop the unused 'name' member from X509_TRUST This used to be exposed via an accessor, but this accessor is no longer part of the library, so nuke it. ok beck CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/23 18:38:58 Modified files: usr.sbin/rpki-client: x509.c Log message: Clamp the manifestNumber to 20 octets value The standards contain somewhat ambiguous language as to what the largest acceptable value for a crlNumber or manifestNumber could be, due to a limitation to 20 octets. The question is what 20 octets specifically are meant... Consensus seems to have emerged that the largest value is 2^159-1 since 2^160-1 would encode to 21 octets due to a padding octet to disambiguate ff .. ff from -7f ff .. ff (iow the top bit of the first octet is a sign bit). Thus, switch from 2^160 - 1 to 2^159 - 1 as an upper bound by checking the length of the value portion of the DER encoded ASN.1 integer to be at most 20 octets. Thanks to Martin Hoffmann, Tom Harrison, and Ben Maddison for raising and discussing the issue. Thanks also to the spec authors for making me waste a few hours of my life on a single bit. ok job CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/23 19:24:26 Modified files: lib/libcrypto/x509: x509_trs.c Log message: Rename arg1 to nid because that's what it is "Yeah, arg1 is always such an imaginative name" ian ok beck CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/23 23:50:20 Modified files: sys/lib/libsa : softraid.c Log message: use LIST_FOREACH_SAFE() to avoid use after free this can't happen in a libsa environment found by smatch, ok jsing@ CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/24 00:05:41 Modified files: lib/libcrypto/ec: ec_curve.c lib/libcrypto/err: err_all.c lib/libcrypto/evp: evp_local.h evp_names.c evp_pbe.c Log message: Bye bye gost, bye, bye turdiness ok beck CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/24 00:15:59 Modified files: lib/libcrypto/evp: evp_names.c Log message: Remove OPENSSL_NO_* #ifdefs from evp_names.c discussed with jsing CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/24 00:22:19 Modified files: usr.sbin/smtpd : smtpd.conf.5 Log message: permament -> permanent CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2024/03/24 00:39:10 Modified files: geo/libosmium : Makefile Log message: geo/libosmium: drop now useless RDEP on utf8cpp inclusion of ut8.h was removed upstream in https://github.com/osmcode/libosmium/commit/68c981313572e960e96d417f42a086d8a2213bff from brad CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/24 00:48:03 Modified files: lib/libcrypto : cryptlib.c lib/libcrypto/evp: evp_pbe.c lib/libcrypto/pkcs12: p12_attr.c p12_crt.c p12_init.c p12_mutl.c p12_sbag.c Log message: Fix namespace build noticed/ok beck