CVSROOT: /cvs Module name: ports Changes by: tb@cvs.openbsd.org 2024/03/10 01:05:58 Modified files: lang/go : go.port.mk Log message: Bump _MODGO_SYSTEM_VERSION after go update CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/10 06:23:57 Modified files: devel/rebar3 : Makefile Log message: bump REVISION, hopefully pkgpath will now be consistent CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/10 07:25:10 Modified files: sys/conf : GENERIC Log message: disable POOL_DEBUG for release ok deraadt@ CVSROOT: /cvs Module name: ports Changes by: kn@cvs.openbsd.org 2024/03/10 08:58:31 Modified files: textproc/goldendict-ng: Makefile Log message: USE_NOBTCFI=Yes due to Qt6 WebEngine; OK sthen Otherwise searching Wictionary results in SIGILL without core dump. CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2024/03/10 09:37:54 Modified files: sys/arch/armv7/stand/efiboot: conf.c exec.c Log message: Invalidating the D-cache after disabling it turned out to be a bad idea and broke Allwinner SoCs with Cortex-A7 cores. So skip that and also invalidate the I-cache before disabling it. This seems to work better on a wide range of boards. ok deraadt@, jmatthew@ CVSROOT: /cvs Module name: www Changes by: tj@cvs.openbsd.org 2024/03/10 12:46:16 Modified files: . : plus.html plus20.html plus21.html plus22.html plus23.html plus24.html plus25.html plus26.html plus27.html plus28.html plus29.html plus30.html plus31.html plus32.html plus33.html plus34.html plus35.html plus36.html plus37.html plus38.html plus39.html plus40.html plus41.html plus42.html plus43.html plus44.html plus45.html plus46.html plus47.html plus48.html plus49.html plus50.html plus51.html plus52.html plus53.html plus54.html plus55.html plus56.html plus57.html plus58.html plus59.html plus60.html plus61.html plus62.html plus63.html plus64.html plus65.html plus66.html plus67.html plus68.html plus69.html plus70.html plus71.html plus72.html plus73.html Log message: reroll plus pages for 7.5 CVSROOT: /cvs Module name: www Changes by: tj@cvs.openbsd.org 2024/03/10 12:46:50 Modified files: . : errata.html errata20.html errata21.html errata22.html errata23.html errata24.html errata25.html errata26.html errata27.html errata28.html errata29.html errata30.html errata31.html errata32.html errata33.html errata34.html errata35.html errata36.html errata37.html errata38.html errata39.html errata40.html errata41.html errata42.html errata43.html errata44.html errata45.html errata46.html errata47.html errata48.html errata49.html errata50.html errata51.html errata52.html errata53.html errata54.html errata55.html errata56.html errata57.html errata58.html errata59.html errata60.html errata61.html errata62.html errata63.html errata64.html errata65.html errata66.html errata67.html errata68.html errata69.html errata70.html errata71.html errata72.html errata73.html errata74.html Added files: . : errata75.html Log message: add 7.5 errata page CVSROOT: /cvs Module name: www Changes by: kmos@cvs.openbsd.org 2024/03/10 22:07:54 Modified files: . : plus.html Log message: Plus through 2024-03-08 From pamela CVSROOT: /cvs Module name: src Changes by: djm@cvs.openbsd.org 2024/03/10 22:59:47 Modified files: usr.bin/ssh : version.h Log message: openssh-9.7 CVSROOT: /cvs Module name: ports Changes by: stsp@cvs.openbsd.org 2024/03/11 02:22:32 Modified files: devel/got : Makefile distinfo Log message: update to got 0.97 see git repository history for per-change authorship information - improve error messages shown upon execv failure - fix 'gotadmin pack' crash upon Ctrl-C due to invalid imsg_free() - significantly speed up deltification of large files - improve error handling in got_privsep_recv_imsg() CVSROOT: /cvs Module name: ports Changes by: semarie@cvs.openbsd.org 2024/03/11 03:07:30 Modified files: sysutils/sysclean: Makefile distinfo Log message: sysutils/sysclean: update to 3.8 - accounting files are expected to be present by default now ok sthen@ CVSROOT: /cvs Module name: www Changes by: djm@cvs.openbsd.org 2024/03/11 04:36:58 Added files: openssh/txt : release-9.7 Log message: release notes for OpenSSH 9.7 CVSROOT: /cvs Module name: www Changes by: djm@cvs.openbsd.org 2024/03/11 04:39:58 Modified files: build : Makefile build/mirrors : openssh-ftp.html.head openssh : ftp.html index.html openbsd.html releasenotes.html openssh/txt : release-9.7 Log message: openssh-9.7 CVSROOT: /cvs Module name: www Changes by: dlg@cvs.openbsd.org 2024/03/11 04:57:38 Modified files: . : want.html Log message: i've got an r6c now, thank you CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2024/03/11 08:25:50 Modified files: telephony/baresip/baresip: Makefile Removed files: telephony/baresip/baresip/patches: patch-cmake_modules_cmake Log message: telephony/baresip/baresip: make sure pipewire isnt picked up drop patch and use -DCMAKE_DISABLE_FIND_PACKAGE_ trick instead (from kn@) build failure reported by ajacoutot@ ok sthen@ kn@ CVSROOT: /cvs Module name: src Changes by: sthen@cvs.openbsd.org 2024/03/11 10:35:48 Modified files: usr.sbin/unbound/util/data: msgencode.c Log message: apply https://nlnetlabs.nl/downloads/unbound/patch_CVE-2024-1931.diff to unbound, fixing an indefinite loop that could be triggered by a client against an unbound server where the (non-default) configuration "ede: yes" is used. https://nlnetlabs.nl/downloads/unbound/CVE-2024-1931.txt ok florian@ CVSROOT: /cvs Module name: ports Changes by: gnezdo@cvs.openbsd.org 2024/03/11 12:31:49 Modified files: textproc/pandoc: Makefile distinfo Log message: Update to pandoc 3.1.12.2 by maintainer from Evan Silberman ok naddy@ CVSROOT: /cvs Module name: src Changes by: deraadt@cvs.openbsd.org 2024/03/11 19:20:30 Modified files: sys/conf : newvers.sh Log message: moving on to 7.5-current CVSROOT: /cvs Module name: src Changes by: guenther@cvs.openbsd.org 2024/03/11 20:31:15 Modified files: sys/arch/amd64/amd64: vmm_machdep.c Log message: Correct handling of cpuid(0xd) subleaves, carefully hiding bits and sizes that the host does not intend to expose, but do expose xsaveopt and xgetbv(1). ok dv@ CVSROOT: /cvs Module name: ports Changes by: aisha@cvs.openbsd.org 2024/03/11 20:31:43 Modified files: security/lego : Makefile distinfo modules.inc Log message: update to 4.16.1 from Horia Racoviceanu maintainer CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/11 23:40:37 Modified files: sys/dev/pci/drm/amd/pm/legacy-dpm: amdgpu_si_dpm.c Log message: Revert "drm/amd/pm: resolve reboot exception for si oland" From Alex Deucher baac292852c0e347626fb5436916947188e5838f in linux-6.6.y/6.6.21 955558030954b9637b41c97b730f9b38c92ac488 in mainline linux CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/11 23:42:37 Modified files: sys/dev/pci/drm: drm_buddy.c Log message: drm/buddy: fix range bias From Matthew Auld 5e476625fa8a36d7483ec3396a2bd124c2c02066 in linux-6.6.y/6.6.21 f41900e4a6ef019d64a70394b0e0c3bd048d4ec8 in mainline linux CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/11 23:46:09 Modified files: sys/dev/pci/drm/amd/display/amdgpu_dm: amdgpu_dm_helpers.c Log message: drm/amd/display: Add monitor patch for specific eDP From Ryan Lin 82dacc26e15cbac7f64a30ad4bc2c414f78eaa8f in linux-6.6.y/6.6.21 b7cdccc6a849568775f738b1e233f751a8fed013 in mainline linux CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2024/03/12 07:32:53 Modified files: sys/arch/arm64/arm64: db_trace.c exception.S Log message: Fix the "fake" frame that we create alongside the trapframe. This fixes backtraces through trap franes. Adjust the code that prints backtraces in ddb as the old code now tries to access a userland address. ok mpi@ CVSROOT: /cvs Module name: src Changes by: job@cvs.openbsd.org 2024/03/12 10:02:30 Modified files: usr.sbin/rpki-client: http.c Log message: Enforce same-origin policy for HTTP redirects Isolate resources from different RRDP servers to avoid inappropriately increasing resource consumption for both RRDP clients and the referenced server. OK claudio@ tb@ CVSROOT: /cvs Module name: src Changes by: job@cvs.openbsd.org 2024/03/12 10:03:56 Modified files: regress/usr.sbin/rpki-client: test-http.c regress/usr.sbin/rpki-client/libressl: Makefile Log message: Add regress for cross-origin HTTP redirection CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2024/03/12 10:26:46 Modified files: sys/dev/mii : ytphy.c Log message: Configure the signal on the CLKOUT pin of the YT8531 PHY when we're instructed to do so by the device tree. ok patrick@ CVSROOT: /cvs Module name: src Changes by: cheloha@cvs.openbsd.org 2024/03/12 11:22:24 Modified files: usr.sbin/btrace: ksyms.c Log message: btrace(8): cache ELF .symtab, .strtab entries in sorted array Currently, every kelf_snprintsym() call performs a linear search through the .symtab for a matching symbol. The search is very costly and causes btrace(8) to drop a lot of profiling events. Storing the STT_FUNC .symtab entries and their corresponding .strtab entries in a sorted array cuts the lookup cost from O(n) to O(lg n). Lower overhead reduces the drop rate for profiling events. With tweaks from mpi@. Thread: https://marc.info/?l=openbsd-tech&m=170830125132105&w=2 probably ok mpi@ CVSROOT: /cvs Module name: ports Changes by: robert@cvs.openbsd.org 2024/03/12 15:30:09 Modified files: net/zabbix : Makefile distinfo net/zabbix/patches: patch-include_zbx_dbversion_constants_h Log message: update to 6.4.11; fixes compatibility with timescaledb from Mark Patruck; ok naddy@ CVSROOT: /cvs Module name: src Changes by: bluhm@cvs.openbsd.org 2024/03/12 15:31:29 Modified files: regress/sys/netinet6/frag6: LICENSE Makefile Added files: regress/sys/netinet6/frag6: frag6_oversize.py frag6_unfragsize.py Log message: Add regress test showing that OpenBSD IPv6 fragment reassembly is not affected by FreeBSD-SA-23:06.ipv6 security advisory. Scapy test frag6_oversize.py reassembles fragments of a packet too big to fit. Test frag6_unfragsize.py also plays games with ECN bits and hop-by-hop extension header to check overflow protection. ICMP6 parameter problem responses are expected. As pf does not generate such ICMP6 error packets, these tests are only run with frag6_input() in the IPv6 stack. CVSROOT: /cvs Module name: ports Changes by: jsg@cvs.openbsd.org 2024/03/12 18:22:15 Modified files: sysutils/firmware/intel: Makefile distinfo sysutils/firmware/intel/pkg: PLIST Log message: update intel microcode to 20240312 release notes: https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240312 ok sthen@ CVSROOT: /cvs Module name: src Changes by: deraadt@cvs.openbsd.org 2024/03/13 04:02:37 Modified files: etc/root : root.mail Log message: mail(1) is very sensitive to spacing in the header, and sometimes when we manually edit this file we forget that. noticed by naddy CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2024/03/13 05:18:42 Modified files: regress/usr.bin/lastcomm: gadget.S Log message: Add endbr64/bti instruction at the start of the gadget, otherwise we'll get a SIGILL when the gadget gets call. Fix the instruction that sets the syscall number on arm64. ok anton@, deraadt@ CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2024/03/13 05:25:50 Modified files: usr.bin/tmux : tmux.1 Log message: Make the attach-session description clearer - do not mention creating a client which is not important, explicitly say the session must exist, and mention new-session and new-session -A. Prompted by Theo. CVSROOT: /cvs Module name: src Changes by: bluhm@cvs.openbsd.org 2024/03/13 07:13:57 Modified files: sys/dev/dt : dt_prov_profile.c Log message: Fix potential NULL pointer dereference in dt(4). When initializing the profiling probes, check if we sucessfully allocated the probe, before registering it. This avoids a NULL pointer dereference when probe allocation has failed. from Christian Ludwig CVSROOT: /cvs Module name: src Changes by: bluhm@cvs.openbsd.org 2024/03/13 08:43:31 Modified files: sys/conf : GENERIC Log message: enable POOL_DEBUG after 7.5 release OK deraadt@ CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2024/03/13 08:57:08 Modified files: sys/arch/arm64/arm64: machdep.c Log message: Expose BTI support to userland. ok deraadt@ CVSROOT: /cvs Module name: ports Changes by: robert@cvs.openbsd.org 2024/03/13 12:48:29 Modified files: www/chromium : Makefile www/iridium : Makefile www/ungoogled-chromium: Makefile Added files: www/chromium/patches: patch-media_base_libaom_thread_wrapper_cc www/ungoogled-chromium/patches: patch-media_base_libaom_thread_wrapper_cc Log message: switch over the chromium ports to use multimedia/aom to pick up endbr64 fixes iridium does not need the thread wrapper patch as it does not include that code yet tested by sthen@ and me, ok naddy@ CVSROOT: /cvs Module name: www Changes by: op@cvs.openbsd.org 2024/03/13 13:58:20 Modified files: . : 75.html Log message: smtpd changes CVSROOT: /cvs Module name: src Changes by: cheloha@cvs.openbsd.org 2024/03/13 18:54:54 Modified files: usr.sbin/btrace: ksyms.c Log message: Revert "btrace(8): cache ELF .symtab, .strtab entries in sorted array" "No it's not okay." mpi@ CVSROOT: /cvs Module name: src Changes by: job@cvs.openbsd.org 2024/03/14 00:23:14 Modified files: usr.bin/ssh : ssh.1 Log message: Clarify how literal IPv6 addresses can be used in -J mode OK djm@ CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2024/03/14 08:29:03 Modified files: regress/sys : Makefile Log message: Hook up the btcfi test. CVSROOT: /cvs Module name: src Changes by: bluhm@cvs.openbsd.org 2024/03/14 11:35:37 Modified files: lib/libexpat/lib: xmlparse.c Log message: Cerry-pick fix for CVE-2024-28757 from libexpat. Detect billion laughs attack with isolated external parser. github commit 1d50b80cf31de87750103656f6eb693746854aa8 OK deraadt@ CVSROOT: /cvs Module name: src Changes by: bluhm@cvs.openbsd.org 2024/03/14 13:37:40 Modified files: lib/libexpat : Changes lib/libexpat/tests: acc_tests.c Log message: Change log and regress test for expat billion laughs attack. CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/14 16:09:40 Modified files: lib/libcrypto/man: CRYPTO_lock.3 Log message: Add back a .Pp CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/14 16:19:12 Modified files: lib/libcrypto/man: X509_STORE_set1_param.3 Log message: Mark up X509_STORE_get1_objects() CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/14 17:54:55 Modified files: lib/libcrypto/man: EVP_CIPHER_do_all.3 Log message: Add missing Nm entries for OBJ_NAME_do_all* CVSROOT: /cvs Module name: src Changes by: job@cvs.openbsd.org 2024/03/14 21:38:59 Modified files: usr.sbin/rpki-client: constraints.c Log message: Log which of the constraints files triggered a violation Requested by Ties de Kock (RIPE NCC) OK tb@ CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/14 23:14:16 Modified files: usr.sbin/rpki-client: constraints.c Log message: whitespace CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2024/03/15 07:26:09 Modified files: sys/arch/arm64/arm64: cpu.c trampoline.S Log message: According to errata AC03_CPU_12, AmpereOne needs the loopy branches with a loop count of 11 to mitigate Spectre-BHB. And it seems Cortex-A57 was missed when Spectre-BHB mitigation support was added, so add it here as well. ok jsg@ CVSROOT: /cvs Module name: src Changes by: kn@cvs.openbsd.org 2024/03/15 10:29:32 Modified files: distrib/miniroot: install.sub Log message: Move code into new stop_watchdog() We have {reset,start}_watchdog() which are only used in unattended upgrade code, but stopping the background timer is done inline for all upgrades, incl. interactive ones. Relocate it out of the very end of do_upgrade() right after its only caller and limit it to unattended upgrades to match where/how the timer is started. OK afresh1 CVSROOT: /cvs Module name: src Changes by: kn@cvs.openbsd.org 2024/03/15 11:31:21 Modified files: distrib/miniroot: install.sub Log message: Backout "Move code into new stop_watchdog()" An upgrade stalled on me, either my testing was flawed or my diff is... Having stop_watchdog() is fine, but calling it in a different place has is apparently too subtle for me to get right. CVSROOT: /cvs Module name: src Changes by: stsp@cvs.openbsd.org 2024/03/15 11:45:36 Modified files: sys/net80211 : ieee80211_input.c Log message: Ignore ADDBA requests if we are not ready to receive data frames. This prevents potential firmware errors in Intel wifi drivers when APs send an ADDBA request before the driver's state machine has settled into RUN state. The driver's addba task would race the driver's newstate task, and the hardware would see an incorrect sequence of commands. Ignoring an early ADDBA request is harmless. The AP will retry later. Reported by zxystd from the OpenIntelWireless project, thanks! ok phessler@ CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/15 15:32:21 Modified files: lib/libz : deflate.c gzguts.h gzlib.c Log message: zlib: sync with upstream More Windows #ifdef shuffling. Only one change relevant for OpenBSD: Make deflateBound() more conservative and handle Z_STREAM_END. CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/15 15:32:54 Modified files: sys/lib/libz : deflate.c Log message: zlib: sync with src CVSROOT: /cvs Module name: src Changes by: op@cvs.openbsd.org 2024/03/15 15:52:20 Modified files: usr.sbin/smtpd : mda_unpriv.c Log message: set ORIGINAL_RECIPIENT in the environment of mda scripts mostly for compatibility with postfix since some mdas (like public-inbox) make use of it. diff from Philipp (philipp+openbsd [at] bureaucracy [dot] de) ok gilles@ CVSROOT: /cvs Module name: src Changes by: op@cvs.openbsd.org 2024/03/15 15:56:22 Modified files: usr.sbin/smtpd : smtpd.conf.5 Log message: add some initial documentation regarding MDAs this adds some initial commentary for how MDAs should behave and in what environment they are executed. diff from Philipp (philipp+openbsd [at] bureaucracy [dot] de) with some tweaks from Richard Toohey and me. ok gilles@ CVSROOT: /cvs Module name: src Changes by: millert@cvs.openbsd.org 2024/03/15 20:00:31 Modified files: usr.bin/whois : whois.1 whois.c Log message: whois: trim output after ">>> Last update of WHOIS database:" Currently, whois(1) displays the full output it receives from the server. With this change, any text after a line starting with ">>> Last update of WHOIS database:" is dropped. This trims a lot of useless text that would otherwise cause the data you care about to scroll off the screen. From FreeBSD. OK deraadt@ CVSROOT: /cvs Module name: src Changes by: job@cvs.openbsd.org 2024/03/15 23:18:01 Modified files: distrib/sets/lists/base: mi distrib/sets/lists/etc: mi Log message: Move RPKI Trust Anchor constraints from etc set to base The cadence of updates being applied to the RPKI Trust Anchor constraints seems sufficiently low, while the required understanding of context to make educated decisions quite high, so centralized coordination of updates through tech@openbsd.org is more appropriate. requested by & OK deraadt@, OK tb@ CVSROOT: /cvs Module name: src Changes by: jmc@cvs.openbsd.org 2024/03/16 00:29:36 Modified files: usr.bin/whois : whois.c Log message: add -S to usage(); CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/16 03:15:04 Modified files: sys/arch/arm64/arm64: cpu.c Log message: recognise Cortex-A520AE (Hayes AE), Cortex-A720AE (Hunter AE) CVSROOT: /cvs Module name: src Changes by: cheloha@cvs.openbsd.org 2024/03/16 11:42:37 Modified files: usr.sbin/btrace: ksyms.c Log message: btrace(8): cache ELF symbols in sorted array Currently, every kelf_snprintsym() call performs a linear search through the .symtab for a symbol matching the given PC. The search is expensive and seems to be a major source of dropped profiling events. Storing all STT_FUNC .symtab entries and their names in a sorted array cuts search time from O(n) to O(lg n). In practice, the faster lookups seem to dramatically reduce the profiling drop rate. With tweaks from mpi@. Thread: https://marc.info/?l=openbsd-tech&m=170830125132105&w=2 ok mpi@ CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/16 14:42:33 Modified files: lib/libcrypto/bn: bn_rand.c Log message: Fix signed integer overflow in bnrand() If more bits than INT_MAX - 7 are requested, the calculation of number of bytes required to store the bignum triggers undefined behavior due to signed integer overflow. This will typically result in bytes becoming negative which will then make malloc() fail. If the ulimit should be high enough to make malloc() succeed, there is a bad out of bounds write in case bottom is set (an odd number was requested). On jsing's request this does not deal with another bug which we could catch with a similar check due to BN_bn2bin() failing later on as the number of words in a BIGNUM is some fraction of INT_MAX. ok jsing CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2024/03/16 14:46:28 Modified files: sys/arch/arm64/arm64: locore.S sys/arch/arm64/include: hypervisor.h Log message: Set the HCR_API and HCR_APK bits in the HCR_EL2 when CPUs boot in EL2. Otherwise using PAC instructions in EL1 will trigger a trap into EL2 that we don't handle. ok jsg@, deraadt@ CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/16 15:42:20 Modified files: lib/libcrypto : cversion.c Log message: Remove ugly parens and thereby fix KNF CVSROOT: /cvs Module name: src Changes by: patrick@cvs.openbsd.org 2024/03/16 18:06:43 Modified files: sys/dev/mii : eephy.c Log message: Some PHYs need board-specific initializations, e.g. to correctly configure LED settings, which might be stored in the marvell,reg-init property. With these applied, the LEDs on the SolidRun ClearFog CN9130 Base work correctly. ok kettenis@ CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/16 19:44:59 Modified files: usr.sbin/rpki-client: extern.h Log message: Remove unused enum rsc_resourceblock_tag This was used in rsc.c prior to the switch to ASN.1 templates. ok job CVSROOT: /cvs Module name: src Changes by: guenther@cvs.openbsd.org 2024/03/16 23:49:41 Modified files: sys/arch/amd64/amd64: cpu.c identcpu.c locore.S vmm_support.S sys/arch/amd64/include: specialreg.h Log message: Use VERW to mitigate the RFDS (Register File Data Sampling) vulnerability present in Intel Atom CPUs, reordering some ASM in return-to-userspace and start/resume-vmx-guest to reduce the number of kernel values still live in registers when VERW is used. This mitigation requires updated firmware which has affected CPUs report RFDS_CLEAR in dmesg. Firmware packaging by jsg@ and sthen@ Logic for interpreting intel's flags by jsg@ after lots of discussion between him, deraadt@, and I ok deraadt@ CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/17 01:10:00 Modified files: lib/libcrypto/rsa: rsa_ameth.c Log message: Annotate RSA-PSS SHA parameter encoding as wrong A historic blunderfest in the ASN.1 module for RSA-PSS led to very confusing text in various RFCs. davidben and my current reading of this is that parameters for SHA-* should be encoded as an ASN.1 NULL rather than omitted. The use of X509_ALGOR_set_evp_md() leads to them being omitted, and is therefore counter to the specification (but allowed. We should fix this. For now, leave a reminder. See https://boringssl-review.googlesource.com/c/boringssl/+/67088 for a lot more details. ok davidben CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2024/03/17 07:05:40 Modified files: sys/arch/arm64/arm64: cpu.c machdep.c sys/arch/arm64/include: armreg.h Log message: The feature is called SSBS instead of SBSS. CVSROOT: /cvs Module name: www Changes by: naddy@cvs.openbsd.org 2024/03/17 13:30:47 Modified files: . : 75.html Log message: 12309 amd64 packages CVSROOT: /cvs Module name: src Changes by: mvs@cvs.openbsd.org 2024/03/17 13:47:08 Modified files: sys/kern : uipc_usrreq.c Log message: Do UNP_CONNECTING and UNP_BINDING flags check in uipc_listen() and return EINVAL if set. This prevents concurrent solisten() thread to make this socket listening while socket is unlocked. Reported-by: syzbot+4acfcd73d15382a3e7cf@syzkaller.appspotmail.com ok mpi CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2024/03/17 14:06:28 Modified files: security/nss : Makefile distinfo Log message: security/nss: update to 3.99, required by gecko 125 see https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_99.html bump minor for some func additions in libsmime3 CVSROOT: /cvs Module name: ports Changes by: kn@cvs.openbsd.org 2024/03/17 14:16:52 Modified files: net/tdesktop : Makefile Log message: complete and sort bundle license markers, tidy up a bit CVSROOT: /cvs Module name: ports Changes by: kn@cvs.openbsd.org 2024/03/17 14:19:07 Modified files: devel/abseil-cpp: Makefile distinfo Log message: update to abseil-cpp 20240116.1 (one macOS change, pure maintainer chore) CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2024/03/17 14:20:33 Modified files: x11/x2goclient : Makefile distinfo x11/x2goclient/patches: patch-Makefile patch-x2goclient_pro x11/x2goclient/pkg: PLIST Log message: x11/x2goclient: update to 4.1.2.3. ok rsadowski@ (MAINTAINER) CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/17 14:25:35 Modified files: x11/icewm : Makefile distinfo x11/icewm/patches: patch-src_default_h Log message: update to icewm-3.4.6 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/17 14:25:38 Modified files: mail/dovecot-fts-flatcurve: Makefile distinfo Log message: update to dovecot-fts-flatcurve-1.0.2 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/17 14:25:41 Modified files: x11/evilwm : Makefile distinfo x11/evilwm/pkg : DESCR Log message: update to evilwm-1.4.3 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/17 14:25:50 Modified files: telephony/pjsua: Makefile distinfo Log message: update to pjsip-2.14.1 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/17 14:25:53 Modified files: sysutils/borgmatic: Makefile distinfo sysutils/borgmatic/pkg: PLIST Log message: update to borgmatic-1.8.9 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/17 14:25:56 Modified files: net/libunbound : Makefile distinfo Log message: update to libunbound-1.19.3 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/17 14:27:11 Modified files: net/eduvpn/vpn-user-portal: Makefile distinfo net/eduvpn/vpn-user-portal/pkg: PLIST Log message: update to vpn-user-portal-3.5.7 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/17 14:27:16 Modified files: lang/php/8.3 : Makefile distinfo Log message: update to php-8.3.4 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/17 14:27:18 Modified files: lang/php/8.2 : Makefile distinfo Log message: update to php-8.2.17 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/17 14:27:59 Modified files: www/tomcat/v9 : Makefile distinfo Log message: update to tomcat-9.0.87 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/17 14:28:40 Modified files: www/tomcat : Makefile Removed files: www/tomcat/v8 : Makefile distinfo www/tomcat/v8/patches: patch-conf_server_xml www/tomcat/v8/pkg: DESCR-examples DESCR-main PLIST-examples PLIST-main README-main tomcat.rc Log message: remove nearly EoL tomcat v8 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/17 14:29:37 Modified files: www/libsass : Makefile distinfo www/libsass/pkg: DESCR Log message: update to libsass-3.6.6 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/17 14:29:40 Modified files: www/py-urllib3 : Makefile distinfo www/py-urllib3/pkg: PLIST Log message: update to py3-urllib3-1.26.18 CVSROOT: /cvs Module name: ports Changes by: tb@cvs.openbsd.org 2024/03/17 14:43:28 Modified files: security/rust-openssl-tests: Makefile crates.inc distinfo security/rust-openssl-tests/patches: patch-openssl-sys_build_main_rs security/rust-openssl-tests/pkg: PLIST Log message: Update to rust-openssl-tests 20240318 CVSROOT: /cvs Module name: ports Changes by: daniel@cvs.openbsd.org 2024/03/17 17:02:36 Modified files: devel/ipython : Makefile distinfo Removed files: devel/ipython/patches: patch-examples_IPython_Kernel_ipython_desktop Log message: update ipython to 8.22.2 CVSROOT: /cvs Module name: ports Changes by: daniel@cvs.openbsd.org 2024/03/17 17:11:31 Modified files: devel/py-jupyter_client: Makefile distinfo devel/py-jupyter_client/patches: patch-jupyter_client_connect_py Log message: update jupyter_client to 8.6.1 CVSROOT: /cvs Module name: ports Changes by: daniel@cvs.openbsd.org 2024/03/17 17:14:01 Modified files: devel/py-jupyter_core: Makefile distinfo Log message: update jupyter_core to 5.7.2 CVSROOT: /cvs Module name: ports Changes by: daniel@cvs.openbsd.org 2024/03/17 17:52:15 Modified files: sysutils/py-watchdog: Makefile distinfo sysutils/py-watchdog/pkg: PLIST Log message: update watchdog to 2.3.1; needed to update werkzeug CVSROOT: /cvs Module name: xenocara Changes by: kettenis@cvs.openbsd.org 2024/03/17 18:15:10 Modified files: lib/mesa/src/gallium/auxiliary/gallivm: lp_bld_init.c lp_bld_misc.cpp lp_bld_misc.h Log message: Tell LLVM to generate code with BTI instructions. "looks ok" jsg@, ok deraadt@ CVSROOT: /cvs Module name: ports Changes by: daniel@cvs.openbsd.org 2024/03/17 21:58:01 Modified files: devel/py-ipykernel: Makefile distinfo devel/py-ipykernel/pkg: PLIST Log message: update ipykernel to 6.29.3 CVSROOT: /cvs Module name: ports Changes by: daniel@cvs.openbsd.org 2024/03/17 22:00:40 Modified files: devel/spyder/py-spyder-kernels: Makefile distinfo Log message: update spyder-kernels to 2.5.1 CVSROOT: /cvs Module name: ports Changes by: daniel@cvs.openbsd.org 2024/03/17 22:04:33 Modified files: devel/spyder/spyder: Makefile distinfo Log message: update spyder to 5.5.3 CVSROOT: /cvs Module name: ports Changes by: bket@cvs.openbsd.org 2024/03/17 22:15:30 Modified files: sysutils/rclone: Makefile distinfo Log message: Update to rclone-1.66.0 Changes: https://rclone.org/changelog/#v1-66-0-2024-03-10 CVSROOT: /cvs Module name: ports Changes by: bket@cvs.openbsd.org 2024/03/17 22:15:45 Modified files: net/ocserv : Makefile distinfo net/ocserv/patches: patch-doc_sample_config patch-src_main-ban_c patch-src_occtl_occtl_c patch-src_occtl_time_c patch-src_ocpasswd_ocpasswd_c Log message: Update to ocserve-1.2.4 Changes: https://ocserv.openconnect-vpn.net/changelog.html CVSROOT: /cvs Module name: ports Changes by: bket@cvs.openbsd.org 2024/03/17 22:16:11 Modified files: mail/notmuch : Makefile.inc mail/notmuch/notmuch: distinfo mail/notmuch/py-notmuch: distinfo Log message: Update to notmuch-0.38.3 Fixes a bug in configuration code that caused the notmuch command to erroneously report "Error: could not locate database" under some circumstances. CVSROOT: /cvs Module name: ports Changes by: bket@cvs.openbsd.org 2024/03/17 22:16:34 Modified files: news/sabnzbd : Makefile distinfo Log message: Update to sabnzbd-4.2.3 Changes: https://github.com/sabnzbd/sabnzbd/releases/tag/4.2.3 CVSROOT: /cvs Module name: ports Changes by: bket@cvs.openbsd.org 2024/03/17 22:16:51 Modified files: devel/git-cola : Makefile distinfo devel/git-cola/patches: patch-cola_app_py Log message: Update to git-cola-4.6.1 Changes: https://github.com/git-cola/git-cola/blob/v4.6.1/CHANGES.rst CVSROOT: /cvs Module name: ports Changes by: daniel@cvs.openbsd.org 2024/03/17 22:31:44 Modified files: devel/py-python-lsp-server: Makefile distinfo Log message: update python-lsp-server to 1.10.1 CVSROOT: /cvs Module name: ports Changes by: tb@cvs.openbsd.org 2024/03/18 00:01:15 Modified files: security/openssl-ruby-tests: Makefile distinfo Log message: Update to openssl-ruby-tests 20240318 CVSROOT: /cvs Module name: src Changes by: dlg@cvs.openbsd.org 2024/03/18 00:05:23 Modified files: sys/net : if_aggr.c Log message: use high bits from the mbuf flowid to pick a port to transmit on. a port here is a physical interface used by an aggr. this leaves the low bits for a physical interface to use to pick a tx ring. without this, aggr used low bits for port selection, which takes bits away from the ring selection, which can lead to uneven distribution of packets over tx rings. ive been running this in production for well over a year now. CVSROOT: /cvs Module name: src Changes by: dlg@cvs.openbsd.org 2024/03/18 00:14:50 Modified files: sys/net : if_aggr.c Log message: expose per port information via kstats. the most interesting information exposed here is the number of times a port changes state according to the lacp state machine. if a port is flapping, it's hard to see if you only look at the current state. getting a count of changes over time makes problems a lot more visible and therefore fixable. this also exposes counters around how the lacp protocol packets. all of these can be useful when trying to line up behaviors with another system (eg, a switch). ok jmatthew@ CVSROOT: /cvs Module name: ports Changes by: otto@cvs.openbsd.org 2024/03/18 00:46:18 Modified files: net/quiche : Makefile distinfo Log message: Update to quiche 0.20.1 This fixes a potential DOS. See https://github.com/cloudflare/quiche/releases/tag/0.20.1 CVSROOT: /cvs Module name: ports Changes by: otto@cvs.openbsd.org 2024/03/18 00:47:53 Modified files: net/dnsdist : Makefile distinfo Log message: Update to dnsdist 1.9.1 CVSROOT: /cvs Module name: ports Changes by: otto@cvs.openbsd.org 2024/03/18 00:50:45 Modified files: net/powerdns : Makefile distinfo Log message: Update to PowerDNS Authoritative Server 4.9.0 CVSROOT: /cvs Module name: src Changes by: op@cvs.openbsd.org 2024/03/18 02:48:50 Modified files: usr.sbin/smtpd : smtpd.conf.5 Log message: improve the MDA documentation - add a pointer to the section when documenting the `mda' keyword - rename the section to MDA COMMANDS - document also what happens when the MDA doesn't exit with status 0 - add the missing environment variables - sort the variables - minor other tweaks to the text with several improvements from jmc, ok jmc CVSROOT: /cvs Module name: src Changes by: op@cvs.openbsd.org 2024/03/18 02:50:54 Modified files: lib/libc/gen : login_cap.3 Log message: fix markup of _PATH_DEFPATH (Li -> Dv); ok jmc CVSROOT: /cvs Module name: ports Changes by: op@cvs.openbsd.org 2024/03/18 03:08:54 Modified files: lang/clojure : Makefile distinfo Log message: update lang/clojure to 1.11.2.1446 CVSROOT: /cvs Module name: ports Changes by: op@cvs.openbsd.org 2024/03/18 03:36:49 Modified files: devel/luarocks : Makefile distinfo devel/luarocks/pkg: PLIST Log message: update devel/luarocks to 3.11.0 changelog: https://github.com/luarocks/luarocks/blob/master/CHANGELOG.md This "skips" over 3.10.0. CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2024/03/18 04:16:50 Modified files: usr.sbin/bgpd : bgpd.conf.5 Log message: Use same markup for origin-set arguments as for roa-set. The maxlen argument is optional. OK tb@ CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2024/03/18 04:49:24 Modified files: usr.sbin/bgpd : bgpd.h Log message: Double PEER_DESCR_LEN to 64 characters since 32 is a bit on the short side. OK sthen@, deraadt@, dlg@, tb@ CVSROOT: /cvs Module name: src Changes by: bluhm@cvs.openbsd.org 2024/03/18 05:02:25 Modified files: lib/libexpat : Tag: OPENBSD_7_4 Changes lib/libexpat/lib: Tag: OPENBSD_7_4 xmlparse.c Log message: Cherry-pick fix for CVE-2024-28757 from libexpat. Detect billion laughs attack with isolated external parser. github commit 1d50b80cf31de87750103656f6eb693746854aa8 OK deraadt@ this is errata/7.4/015_expat.patch.sig CVSROOT: /cvs Module name: src Changes by: bluhm@cvs.openbsd.org 2024/03/18 05:03:04 Modified files: lib/libexpat : Tag: OPENBSD_7_3 Changes lib/libexpat/lib: Tag: OPENBSD_7_3 xmlparse.c Log message: Cherry-pick fix for CVE-2024-28757 from libexpat. Detect billion laughs attack with isolated external parser. github commit 1d50b80cf31de87750103656f6eb693746854aa8 OK deraadt@ this is errata/7.3/027_expat.patch.sig CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/18 06:53:55 Modified files: graphics/ImageMagick: Makefile Log message: remove LIB_DEPENDS on aom, dav1d, libde265, x265 - they're pulled in via libheif and not used directly. from Brad. CVSROOT: /cvs Module name: www Changes by: sthen@cvs.openbsd.org 2024/03/18 08:13:01 Modified files: . : 75.html Log message: i386: 10830 pkgs, aarch64: 12145 pkgs CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/18 08:33:13 Modified files: lang/python : python.port.mk Log message: add python to TEST_DEPENDS if MODPY_PYTEST is set to 'no'. CVSROOT: /cvs Module name: www Changes by: bluhm@cvs.openbsd.org 2024/03/18 08:39:10 Modified files: . : errata73.html errata74.html Log message: Release libexpat errata. CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2024/03/18 08:54:53 Modified files: usr.sbin/bgpd : parse.y Log message: Typecast char argument to isxdigit() to unsigned char since isxdigit() only works that way correctly. OK deraadt@ CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/18 08:59:46 Modified files: net/bird/2 : Makefile distinfo Log message: update to bird-2.15 CVSROOT: /cvs Module name: ports Changes by: fcambus@cvs.openbsd.org 2024/03/18 10:43:39 Modified files: audio/schismtracker: Makefile distinfo audio/schismtracker/patches: patch-configure_ac Log message: Update schismtracker to 20240308. CVSROOT: /cvs Module name: ports Changes by: fcambus@cvs.openbsd.org 2024/03/18 11:23:20 Modified files: graphics/p5-Image-ExifTool: Makefile distinfo graphics/p5-Image-ExifTool/pkg: PLIST Log message: Update p5-Image-ExifTool to 12.79. CVSROOT: /cvs Module name: ports Changes by: jeremy@cvs.openbsd.org 2024/03/18 11:46:37 Modified files: security/suricata: Makefile Added files: security/suricata/patches: patch-src_suricata_c patch-src_util-privs_c patch-src_util-privs_h Log message: Readd privdrop patches "probably automatically removed" by gonzalo@ in the 7.0.2 update OK gonzalo@ CVSROOT: /cvs Module name: ports Changes by: jca@cvs.openbsd.org 2024/03/18 11:50:18 Modified files: graphics/pqiv : Makefile distinfo Removed files: graphics/pqiv/patches: patch-pqiv_c Log message: Update to pqiv-2.13.1 time_t patch addressed upstream. CVSROOT: /cvs Module name: ports Changes by: jca@cvs.openbsd.org 2024/03/18 11:56:00 Modified files: security/libksba: Makefile distinfo Log message: Bugfix update to libksba-1.6.6 CVSROOT: /cvs Module name: ports Changes by: fcambus@cvs.openbsd.org 2024/03/18 12:00:09 Modified files: sysutils/broot : Makefile crates.inc distinfo Log message: Update broot to 1.36.1. CVSROOT: /cvs Module name: ports Changes by: fcambus@cvs.openbsd.org 2024/03/18 12:08:10 Modified files: misc/dialog : Makefile distinfo Log message: Update dialog to 1.3-20240307. CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2024/03/18 12:35:21 Modified files: sys/arch/arm64/arm64: cpu.c sys/arch/arm64/include: armreg.h Log message: Add support for the new layout of the CCSIDR_EL1 register that was introduced in Armv8.3 when the CCIDX feature is advertised. This makes us properly detect the cache size on newer CPU cores like Neoverse N2, at least when emulated by QEMU. ok jsg@ CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2024/03/18 15:20:46 Modified files: sys/dev/pci : pci.c Log message: Reduce dmesg spam and only print about resource conflicts for resources that are actually enabled. ok dlg@, deraadt@ CVSROOT: /cvs Module name: src Changes by: patrick@cvs.openbsd.org 2024/03/18 15:37:44 Modified files: sys/dev/fdt : if_mvpp.c Log message: Pass PHY OF node to the MII layer for use by PHY drivers. CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2024/03/18 15:57:22 Modified files: sys/arch/arm64/arm64: cpu.c sys/dev/fdt : psci.c pscivar.h Log message: Implement Spectre-V4 mitigations. The only real effect of this change is that we now make a firmware call to enable the mitigations if the firmware tells us mitigations are implemented and needed. But according to the specification these mitigations should be enabled by default. The open source TF-A implementation only implements mitigations for older Cortex-A76 cores. Newer Cortex-A76 revisions are not vulnerable and as far as I can tell we only support SoCs with the newer cores. ok patrick@ CVSROOT: /cvs Module name: ports Changes by: lraab@cvs.openbsd.org 2024/03/18 16:36:23 Modified files: sysutils/telegraf: Makefile distinfo modules.inc Log message: sysutils/telegraf: update to 1.30.0 ok landry@ CVSROOT: /cvs Module name: ports Changes by: lraab@cvs.openbsd.org 2024/03/18 16:37:45 Modified files: sysutils/grafana: Makefile distinfo sysutils/grafana/patches: patch-conf_sample_ini sysutils/grafana/pkg: PLIST Log message: sysutils/grafana: update to 10.4.0 CVSROOT: /cvs Module name: ports Changes by: daniel@cvs.openbsd.org 2024/03/18 19:44:14 Modified files: net/py-zmq : Makefile distinfo Log message: update py-zmq to 25.1.1 for Python 3.12 support CVSROOT: /cvs Module name: ports Changes by: daniel@cvs.openbsd.org 2024/03/18 20:18:44 Modified files: devel/py-nbconvert: Makefile distinfo devel/py-nbconvert/pkg: DESCR PLIST textproc/py-mistune: Makefile distinfo textproc/py-mistune/pkg: PLIST Log message: update nbconvert to 7.16.2 and mistune to 2.0.5 CVSROOT: /cvs Module name: src Changes by: dlg@cvs.openbsd.org 2024/03/18 21:49:11 Modified files: sys/net : if_sec.c Log message: count if_enqueue/ifq_enqueue errors as oqdrops. this helps narrow down where some "output failures" on sec interfaces occur. based on discussion with jason tubnor CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/18 23:04:13 Modified files: usr.sbin/rpki-client: cert.c extern.h filemode.c ip.c parser.c validate.c x509.c Log message: Rename parent to issuer in struct auth Parent is confusing and issuer is the appropriate terminology. This is a mechanical diff. The only remaining uses of 'parent' in this code base now mean 'parent process'. discussed with beck and job ok job CVSROOT: /cvs Module name: ports Changes by: op@cvs.openbsd.org 2024/03/19 02:28:40 Modified files: databases/pspg : Makefile distinfo Log message: update databases/pspg to 5.8.2 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/19 02:43:01 Modified files: security/gopass: Makefile distinfo modules.inc Log message: update to gopass-1.15.12 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/19 02:52:05 Modified files: net/p5-Zonemaster/ldns: Makefile distinfo Log message: update to p5-Zonemaster-LDNS-4.0.0 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/19 02:52:39 Modified files: net/p5-Zonemaster/cli: Makefile distinfo Log message: update to zonemaster-6.1.0 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/19 02:52:42 Modified files: net/p5-Zonemaster/engine: Makefile distinfo net/p5-Zonemaster/engine/pkg: PLIST Log message: update to p5-Zonemaster-engine-5.0.0 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/19 06:32:42 Modified files: telephony/asterisk/20: Makefile distinfo telephony/asterisk/20/patches: patch-apps_app_voicemail_c patch-configure_ac patch-third-party_pjproject_source_pjlib_src_pj_ssl_sock_ossl_c patch-third-party_pjproject_source_pjmedia_src_pjmedia_sdp_c telephony/asterisk/20/pkg: PLIST-main Log message: update to asterisk-20.7.0 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/19 06:32:46 Modified files: telephony/asterisk/18: Makefile distinfo telephony/asterisk/18/patches: patch-apps_app_voicemail_c patch-configure_ac patch-third-party_pjproject_source_pjlib_src_pj_ssl_sock_ossl_c patch-third-party_pjproject_source_pjmedia_src_pjmedia_sdp_c telephony/asterisk/18/pkg: PLIST-main Log message: update to asterisk-18.22.0 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/19 06:38:23 Modified files: cad/kicad : Makefile editors/texworks: Makefile net/profanity : Makefile productivity/kmymoney: Makefile www/bluefish : Makefile Log message: replace hardcoded 'python3.10' in WANTLIB with ${MODPY_WANTLIB}. CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2024/03/19 07:33:29 Modified files: www/mozilla-firefox: Makefile distinfo www/mozilla-firefox/files: unveil.main www/firefox-i18n: Makefile.inc distinfo Removed files: www/mozilla-firefox/patches: patch-media_ffvpx_libavcodec_x86_fft_asm patch-third_party_libwebrtc_common_audio_common_audio_c_gn_moz_build patch-third_party_libwebrtc_common_audio_third_party_spl_sqrt_floor_spl_sqrt_floor_gn_moz_build patch-third_party_libwebrtc_modules_audio_processing_aecm_aecm_core_gn_moz_build patch-third_party_libwebrtc_modules_desktop_capture_desktop_capture_gn_moz_build patch-third_party_libwebrtc_modules_video_capture_video_capture_factory_cc patch-xpcom_reflect_xptcall_md_unix_moz_build Log message: www/mozilla-firefox: update to 124.0. see https://www.mozilla.org/en-US/firefox/124.0/releasenotes/ fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-12/ - ffmpeg was updated in #1877221, patch-media_ffvpx_libavcodec_x86_fft_asm doesnt apply anymore and isnt needed - rm riscv64 patches from #1876554 & #1879656, merged upstream - rm patch from #1878010, merged upstream - add ~/.cache/{gvfsd,dconf} to unveil.main, silence some warnings from glib CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2024/03/19 07:35:14 Modified files: www/firefox-esr: Makefile distinfo Log message: www/firefox-esr: update to 115.9.0. see https://www.mozilla.org/en-US/firefox/115.9.0/releasenotes/ fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-13/ CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2024/03/19 07:35:55 Modified files: www/firefox-esr: Tag: OPENBSD_7_4 Makefile distinfo Log message: www/firefox-er: MFC update to 115.9.0. see https://www.mozilla.org/en-US/firefox/115.9.0/releasenotes/ fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-13/ CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2024/03/19 07:39:01 Modified files: www/mozilla-firefox: Tag: OPENBSD_7_4 Makefile distinfo www/mozilla-firefox/pkg: Tag: OPENBSD_7_4 PLIST Removed files: www/mozilla-firefox/patches: Tag: OPENBSD_7_4 patch-build_moz_configure_nss_configure patch-media_ffvpx_libavcodec_x86_fft_asm patch-netwerk_protocol_http_Http2Session_cpp patch-security_manager_ssl_nsNSSCallbacks_cpp patch-security_manager_ssl_nsNSSComponent_cpp patch-security_manager_ssl_nsNSSIOLayer_cpp patch-third_party_libwebrtc_modules_video_capture_video_capture_factory_cc Log message: www/mozilla-firefox: MFC update to 124.0. see https://www.mozilla.org/en-US/firefox/124.0/releasenotes/ fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-12/ - build against bundled nss 3.98, the Xyber tentacles are now everywhere and it's simpler than trying to untangle them - ffmpeg was updated in #1877221, patch-media_ffvpx_libavcodec_x86_fft_asm doesnt apply anymore and isnt needed - rm patch from #1878010, merged upstream CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2024/03/19 07:41:04 Modified files: mail/mozilla-thunderbird: Makefile distinfo mail/thunderbird-i18n: Makefile.inc distinfo Log message: mail/mozilla-thunderbird: update to 115.9.0. see https://www.thunderbird.net/en-US/thunderbird/115.9.0/releasenotes/ fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-14/ CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2024/03/19 07:41:51 Modified files: mail/mozilla-thunderbird: Tag: OPENBSD_7_4 Makefile distinfo Log message: mail/mozilla-thunderbird: MFC update to 115.9.0. see https://www.thunderbird.net/en-US/thunderbird/115.9.0/releasenotes/ fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-14/ CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/19 09:00:58 Modified files: net/unifi/main : Makefile distinfo net/unifi/main/pkg: PLIST Log message: update to unifi-8.1.113 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/19 09:01:23 ports/net/unifi/snappy-java/patches Update of /cvs/ports/net/unifi/snappy-java/patches In directory cvs.openbsd.org:/tmp/cvs-serv87714/patches Log Message: Directory /cvs/ports/net/unifi/snappy-java/patches added to the repository CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/19 09:02:02 Modified files: net/unifi/snappy-java: Makefile distinfo Added files: net/unifi/snappy-java/patches: patch-Makefile Log message: update snappy-java builder to 1.1.10.5 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/19 09:20:19 Modified files: devel/fast-float: Makefile distinfo Log message: update to fast-float-6.1.1, from Jose Maldonado (maintainer) CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/19 11:34:05 Modified files: lib/libcrypto/man: EVP_DigestInit.3 X509_ALGOR_dup.3 evp.3 Log message: Remove X509_ALGOR_set_md() documentation As far as LibreSSL is concerned, this terrible API is pushing up the daisies. CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/19 11:48:57 Modified files: lib/libcrypto/man: OPENSSL_malloc.3 Log message: Remove OPENSSL/CRYPTO_realloc documentation CVSROOT: /cvs Module name: ports Changes by: volker@cvs.openbsd.org 2024/03/19 12:29:55 Modified files: devel/difftastic: Makefile crates.inc distinfo devel/difftastic/patches: patch-Cargo_lock patch-Cargo_toml patch-manual_book_toml Log message: devel/difftastic: Update to 0.56.1 ok op@ CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/19 13:27:33 Modified files: lib/libcrypto : Makefile crypto_init.c Removed files: lib/libcrypto : o_init.c Log message: Move the OPENSSL_init() stub from o_init.c to crypto_init.c CVSROOT: /cvs Module name: ports Changes by: matthieu@cvs.openbsd.org 2024/03/19 14:03:10 Modified files: wayland/wlroots: Makefile distinfo Log message: Update to wlroots 0.17.2. ok landry@ CVSROOT: /cvs Module name: ports Changes by: daniel@cvs.openbsd.org 2024/03/19 17:45:58 Modified files: www/py-flasgger: Makefile distinfo www/py-flasgger/pkg: PLIST Log message: update flasgger to 0.9.7.1; needed for newer flask ok lraab@ CVSROOT: /cvs Module name: ports Changes by: bluhm@cvs.openbsd.org 2024/03/19 18:29:45 Modified files: devel/p5-Devel-MAT-Dumper: Makefile distinfo devel/p5-Devel-MAT-Dumper/patches: patch-t_01header_t Log message: update p5-Devel-MAT-Dumper to 0.48 CVSROOT: /cvs Module name: ports Changes by: bluhm@cvs.openbsd.org 2024/03/19 18:30:01 Modified files: devel/p5-Devel-MAT: Makefile distinfo devel/p5-Devel-MAT/pkg: PLIST Log message: update p5-Devel-MAT to 0.53 CVSROOT: /cvs Module name: ports Changes by: daniel@cvs.openbsd.org 2024/03/19 20:30:15 Modified files: devel/py-traitlets: Makefile distinfo Log message: update traitlets to 5.14.2 CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/19 20:38:35 Modified files: sys/dev/pci/drm: drm_linux.c Log message: in vga_get_uninterruptible() return early if behind a bridge remove KASSERT() that triggered on dg2 CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/19 20:42:17 Modified files: sys/dev/pci/drm: drm_linux.c sys/dev/pci/drm/include/linux: vmalloc.h Log message: add vmap_pfn() CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/19 20:44:57 Modified files: sys/dev/pci/drm/include/linux: io-mapping.h Log message: start implementing io_mapping CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/19 20:47:24 Modified files: sys/dev/pci/drm/i915/gem: i915_gem_stolen.c sys/dev/pci/drm/i915/gt: intel_region_lmem.c sys/dev/pci/drm/i915: intel_memory_region.h Log message: add replacements for io_mapping_init_wc() paths CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/19 20:48:20 Modified files: sys/dev/pci/drm/i915/gem: i915_gem_pages.c Log message: unstub i915_gem_object_map_pfn() CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/19 20:51:06 Modified files: sys/dev/pci/drm/include/linux: bitmap.h Log message: add bitmap_intersects() bitmap_from_arr32() CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/19 20:54:40 Modified files: sys/dev/pci/drm/i915/gt: intel_sseu.c Log message: unstub xehp_load_dss_mask() CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/19 20:56:49 Modified files: sys/dev/pci/drm/i915/gem: i915_gem_lmem.c i915_gem_object.c sys/dev/pci/drm/ttm: ttm_resource.c Log message: enable io_mapping paths for lmem CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/19 20:58:40 Modified files: sys/dev/pci/drm/i915: i915_driver.c i915_drv.h Log message: init bus_space tags in ttm struct CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/19 21:00:21 Modified files: sys/dev/pci/drm/i915/gem: i915_gem_ttm_move.c Log message: unstub i915_ttm_memcpy_init() i915_ttm_move_memcpy() CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/19 21:02:24 Modified files: sys/dev/pci/drm/ttm: ttm_tt.c Log message: handle ttm_sg_tt_init() not being called before ttm_tt_fini() Check that dmamap and segs are non-NULL as not all drivers call ttm_sg_tt_init(). CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/19 22:28:39 Modified files: sys/dev/pci/drm/i915/gem: i915_gem_ttm.c Log message: unstub i915_ttm_io_mem_pfn() CVSROOT: /cvs Module name: src Changes by: job@cvs.openbsd.org 2024/03/19 22:36:30 Modified files: usr.sbin/rpki-client: x509.c Log message: Check whether filename and SIA match Verify whether the filename as presented by the publication point (which is unsigned information) matches the filename in the SIA attribute (which is signed information). Based on RFC 6487 section 4.8.8. with and OK tb@ CVSROOT: /cvs Module name: src Changes by: job@cvs.openbsd.org 2024/03/19 22:39:10 Modified files: regress/usr.sbin/rpki-client: test-aspa.c test-gbr.c test-mft.c test-roa.c test-spl.c test-tak.c Log message: Run most of regress explicitly in filemode to avoid hitting location checks with tb@ CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/19 23:44:19 Modified files: sys/dev/pci/drm/include/linux: io-mapping.h Log message: add io_mapping_map_atomic_wc() CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/20 00:02:20 Modified files: sys/dev/pci/drm/i915: i915_drv.h i915_gem.c i915_vma.c sys/dev/pci/drm/i915/gem: i915_gem_execbuffer.c sys/dev/pci/drm/i915/gt: intel_ggtt.c intel_gtt.h Log message: switch ggtt from agp_map to io_mapping reduces the diff to linux, no functional change CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/20 00:11:41 Modified files: sys/dev/pci/drm/i915/gem: i915_gem_pages.c Log message: remove i915_gem_object_map() removed in linux 5.10 CVSROOT: /cvs Module name: src Changes by: ratchov@cvs.openbsd.org 2024/03/20 02:42:11 Modified files: usr.bin/aucat : aucat.1 aucat.c dsp.c Log message: aucat: Add generic channel mapping in place of -j and -c options. The argument to the -m option specifies the source and destination channel ranges to be mapped. Compatibility is maintained: if -m is not used, the -c and -j options still work. Help and suggestions from Jan Stary , thanks. CVSROOT: /cvs Module name: ports Changes by: benoit@cvs.openbsd.org 2024/03/20 03:03:17 Modified files: devel/p5-Variable-Magic: Makefile distinfo Log message: Update to p5-Variable-Magic-0.64. CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2024/03/20 03:26:42 Modified files: usr.bin/rsync : sender.c Log message: Remove some else statements in if () else if () chains that don't need to be written this way. Makes the code more readable. OK tb@ CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2024/03/20 03:35:46 Modified files: usr.sbin/bgpd : parse.y printconf.c rde.c rde_peer.c session.c util.c Log message: Cleanup AID handling. - Loops over all valid AID should start with AID_MIN and go up to AID_MAX - 1 e.g. for (i = AID_MIN; i < AID_MAX; i++) If for some reason AID_UNSPEC must be handled make that explicit in the for loop. - aid2afi() now returns an error for AID_UNSPEC since there is no valid AFI SAFI combo for AID_UNSPEC. - Add additional checks for AID_MIN where currently only AID_MAX was checked. This affects imsg for route refresh and graceful restart. - Simplify add-path capability handling. Only the negotiated add_path capa sets the flag for AID_UNSPEC to help code to quickly check if any add-path is active. OK tb@ CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2024/03/20 04:38:05 Modified files: regress/lib/libssl/dtls: Makefile regress/lib/libssl/quic: Makefile regress/lib/libssl/server: Makefile regress/lib/libssl/shutdown: Makefile regress/lib/libssl/tls: Makefile regress/lib/libssl/unit: ssl_get_shared_ciphers.c regress/lib/libtls/keypair: Makefile keypairtest.c regress/lib/libtls/tls: Makefile Log message: Use the new certificates/chains in regress. The new certificates are more representative of the real world. The old certificates use weak algorithms and expire in the very near future. Most of our regress has already been switched over, this changes the remainder. Thanks to Bernhard M. Wiedemann for reminding us of the upcoming expiry. ok tb@ CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/20 08:42:05 Modified files: textproc/redland-bindings/patches: patch-configure_ac Log message: use sysconfig.get_config_var("EXT_SUFFIX") not sysconfig.get_config_var("SO"); the latter is deprecated in Pyhton 3.10 and not usable in 3.11 CVSROOT: /cvs Module name: www Changes by: sthen@cvs.openbsd.org 2024/03/20 09:27:52 Modified files: build : mirrors.dat Log message: update notes, mirror.businessconnect.nl switched upstream CVSROOT: /cvs Module name: www Changes by: sthen@cvs.openbsd.org 2024/03/20 09:35:51 Modified files: build : mirrors.dat Log message: add mirror.freedif.org in Singapore, from Kari CVSROOT: /cvs Module name: www Changes by: sthen@cvs.openbsd.org 2024/03/20 09:36:12 Modified files: . : ftp.html ftplist httpslist openbgpd : ftp.html openssh : ftp.html portable.html openntpd : portable.html rpki-client : portable.html Log message: sync CVSROOT: /cvs Module name: www Changes by: sthen@cvs.openbsd.org 2024/03/20 09:37:49 Modified files: build : mirrors.dat Log message: tidy comment CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2024/03/20 09:49:33 Modified files: net/synapse : Makefile distinfo modules.inc Log message: net/synapse: update to 1.103.0, from MAINTAINER Renaud Allard CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/20 10:18:25 Modified files: net/isc-bind : Makefile distinfo Log message: update to isc-bind-9.18.25 various fixes around cache cleaning: "fixes a memory issue in the prior maintenance version that was significant for some very busy resolvers" CVSROOT: /cvs Module name: src Changes by: op@cvs.openbsd.org 2024/03/20 11:52:43 Modified files: usr.sbin/smtpd : smtp_session.c Log message: fix ORCPT handling due to a swapped strlcpy() arguments we don't save the ORCPT argument after validation. There's no buffer overflow since dsn_orcpt is zeroed. Spotted by Tassilo Philipp, thanks! ok millert gilles CVSROOT: /cvs Module name: ports Changes by: fcambus@cvs.openbsd.org 2024/03/20 12:40:03 Modified files: net/swirc : Makefile distinfo Log message: Update swirc to 3.4.7. From maintainer Markus Uhlin, thanks! CVSROOT: /cvs Module name: ports Changes by: fcambus@cvs.openbsd.org 2024/03/20 14:21:12 Modified files: audio/libopenmpt: Makefile distinfo Log message: Update libopenmpt to 0.7.5. CVSROOT: /cvs Module name: ports Changes by: fcambus@cvs.openbsd.org 2024/03/20 14:24:57 Modified files: textproc/ruby-rouge: Makefile distinfo Log message: Update ruby-rouge to 4.2.1. CVSROOT: /cvs Module name: ports Changes by: fcambus@cvs.openbsd.org 2024/03/20 14:43:10 Modified files: textproc/riff : Makefile distinfo Log message: Update riff to 3.1.0. CVSROOT: /cvs Module name: ports Changes by: sebastia@cvs.openbsd.org 2024/03/20 15:17:21 Modified files: databases/puppetdb/8: Makefile distinfo databases/puppetdb/8/patches: patch-Makefile Log message: Update 8.3.0 -> 8.4.1 CVSROOT: /cvs Module name: ports Changes by: sebastia@cvs.openbsd.org 2024/03/20 15:18:23 Modified files: sysutils/puppetserver/8: Makefile distinfo sysutils/puppetserver/8/pkg: README Log message: update 8.4.0 -> 8.5.0 while there, mention to install hiera within puppetserver as well CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/20 15:21:03 Modified files: lib/libcrypto/conf: conf_mod.c Log message: Make module_free() NULL safe ok jsing CVSROOT: /cvs Module name: ports Changes by: sebastia@cvs.openbsd.org 2024/03/20 15:21:14 Modified files: sysutils/ruby-puppet/8: Makefile distinfo sysutils/ruby-puppet/8/patches: patch-lib_puppet_provider_package_openbsd_rb patch-lib_puppet_reference_configuration_rb sysutils/ruby-puppet/8/pkg: PLIST Log message: update 8.4.0 -> 8.5.1 CVSROOT: /cvs Module name: ports Changes by: sebastia@cvs.openbsd.org 2024/03/20 15:24:21 Modified files: sysutils/ruby-puppet-syntax: Makefile distinfo Log message: update 4.0.0 -> 4.1.0 CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/20 15:31:31 Modified files: lib/libcrypto/conf: conf_mod.c Log message: Implement imodule_free() and call it from module_finish() ok jsing CVSROOT: /cvs Module name: ports Changes by: sebastia@cvs.openbsd.org 2024/03/20 15:35:42 Modified files: net/udns : Makefile distinfo net/udns/patches: patch-configure net/udns/pkg : PLIST Log message: update 0.4 -> 0.5 CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/20 15:41:09 Modified files: lib/libcrypto/conf: conf_mod.c Log message: Change return type of module_add() There is one caller of this function which returns module_add() != NULL. Make the function return an int instead. suggested by and ok jsing CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/20 15:49:00 Modified files: lib/libcrypto/conf: conf_mod.c Log message: md -> mod for CONF_MODULEs A CONF_MODULE is no EVP_MD, so call it mod instead of md. CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/20 15:51:23 Modified files: lib/libcrypto/conf: conf_mod.c Log message: md -> imod for CONF_IMODULEs A CONF_IMODULE is neither an EVP_MD nor a CONF_MODULE, so call it imod instead of md or mod. CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/20 15:53:57 Modified files: lib/libcrypto/conf: conf_mod.c Log message: tmod -> mod requested by jsing CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/20 16:08:22 Modified files: lib/libcrypto/conf: conf_mod.c Log message: pmod -> mod in CONF_IMODULE Hungarian notation occasionally helps, but only if it is done consistently. Steve and consistency... cf e.g the last few commits. Accordingly, Hensonian Hungarian notation is a complete disaster. Start cleaning this mess up. CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/20 16:11:07 Modified files: lib/libcrypto/conf: conf_mod.c Log message: Rename the remaining pmod to mod CVSROOT: /cvs Module name: src Changes by: bluhm@cvs.openbsd.org 2024/03/20 16:52:44 Modified files: sys/dev/pci/drm/include/linux: bitmap.h Log message: Fix build with bitmap_copy() on i386 by adding const qualifier. OK jsg@ CVSROOT: /cvs Module name: src Changes by: afresh1@cvs.openbsd.org 2024/03/20 19:02:29 Modified files: usr.sbin/fw_update: fw_update.sh Log message: Clear spinner after each cycle Otherwise we can get left with a piece of the spinner if all firmware gets updates and don't print a "kept" value. While here, replace \010 with the ksh supported \b, as suggested by cheloha@ Noticed by deraadt@ CVSROOT: /cvs Module name: ports Changes by: jeremy@cvs.openbsd.org 2024/03/20 20:43:46 Modified files: x11/ruby-tk : Makefile distinfo x11/ruby-tk/pkg: PLIST Log message: Update to ruby-tk 0.5.0 CVSROOT: /cvs Module name: src Changes by: jmatthew@cvs.openbsd.org 2024/03/20 22:10:37 Modified files: share/man/man4 : mcx.4 Log message: mention that SR-IOV virtual functions work too CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/20 23:06:42 Modified files: sys/dev/pci/drm/i915/gt/uc: intel_uc_fw.c Log message: unstub intel_uc_fw_copy_rsa() CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/20 23:14:35 Modified files: sys/dev/pci/drm/i915/gt: shmem_utils.h shmem_utils.c Log message: add uao_read_to_iosys_map() alternative to shmem_read_to_iosys_map() CVSROOT: /cvs Module name: ports Changes by: pascal@cvs.openbsd.org 2024/03/21 00:35:53 Log message: Import net/matterhorn, ok kili@. Matterhorn is a terminal client for the Mattermost chat system. Features include: * Channel creation, deletion, and membership management commands * Support for multiple teams * Optimized channel-switching modes: M-a, M-s, and C-g * Message posting, editing, replying, and deletion * Markdown rendering * Support for participating in threads via the thread window * Convenient URL-opening with local browser * Yank verbatim content from messages into the system clipboard * Edit messages with $EDITOR * Rebindable keys (see /help keybindings) * Message editor with kill/yank buffer and readline-style keybindings * Support for adding and removing emoji post reactions * Tab-completion * Multiple color themes with color theme customization support * Custom notifications via notification scripts Status: Vendor Tag: pascal Release Tags: pascal_20240321 N ports/net/matterhorn/Makefile N ports/net/matterhorn/distinfo N ports/net/matterhorn/pkg/DESCR N ports/net/matterhorn/pkg/PLIST No conflicts created by this import CVSROOT: /cvs Module name: ports Changes by: pascal@cvs.openbsd.org 2024/03/21 00:37:28 Modified files: net : Makefile Log message: += matterhorn CVSROOT: /cvs Module name: ports Changes by: caspar@cvs.openbsd.org 2024/03/21 01:18:26 Modified files: meta/tor-browser: Makefile www/tor-browser: Makefile.inc www/tor-browser/browser: Makefile distinfo Log message: Tor Browser: update to 13.0.12 CVSROOT: /cvs Module name: ports Changes by: caspar@cvs.openbsd.org 2024/03/21 01:18:59 Modified files: meta/tor-browser: Tag: OPENBSD_7_4 Makefile www/tor-browser: Tag: OPENBSD_7_4 Makefile.inc www/tor-browser/browser: Tag: OPENBSD_7_4 Makefile distinfo Log message: Tor Browser: update to 13.0.12 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/21 01:19:05 Modified files: net/isc-bind : Tag: OPENBSD_7_4 Makefile distinfo Log message: MFC update to isc-bind-9.18.25 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/21 01:21:06 Modified files: lang/php/8.2 : Tag: OPENBSD_7_4 Makefile distinfo Log message: MFC update to php-8.2.17 CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2024/03/21 02:17:23 Removed files: regress/lib/libssl/certs: ca.pem client.pem server.pem Log message: Remove now unused certificates (which are also soon to expire). CVSROOT: /cvs Module name: ports Changes by: martin@cvs.openbsd.org 2024/03/21 03:17:30 Modified files: databases/py-influxdb_client: Makefile distinfo Log message: Updat py-influxdb_client to 1.41.0. CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2024/03/21 04:58:15 Modified files: sbin/nfsd : nfsd.c Log message: Do not exit the master process if a client TCP connection fails to be added. OK millert@ CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2024/03/21 05:26:28 Modified files: usr.bin/tmux : cmd-detach-client.c screen.c window-copy.c Log message: Do not consider a selection present if it is empty, from Michael Grant (GitHub issue 3869). Also a typo fix from GitHub issue 3877. CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2024/03/21 05:27:18 Modified files: usr.bin/tmux : cmd-detach-client.c Log message: Revert detach-client part of last, did not intend this to go in. CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2024/03/21 05:30:42 Modified files: usr.bin/tmux : cmd-display-panes.c cmd-resize-pane.c popup.c resize.c server-fn.c tmux.h window.c Log message: Do not notify window-layout-changed if the window is about to be destroyed (since it may have been freed by the time the notify happens), from Romain Francoise in GitHub issue 3860. CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2024/03/21 05:32:49 Modified files: usr.bin/tmux : tmux.1 window-buffer.c Log message: Use -p for default paste-buffer command in buffer mode, it will only do anything if the application asked for it. From Gregory Anders. CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2024/03/21 05:47:55 Modified files: usr.bin/tmux : tty-keys.c Log message: Look for feature code 21 for DECSLRM and 28 for DECFRA in the device attributes and also accept level 1 (there is no hardware with this but some emulators may use it). Pointed out by James Holderness. CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2024/03/21 05:51:32 Modified files: usr.bin/tmux : cmd-display-menu.c tmux.1 Log message: Add -M to always turn mouse on in a menu, GitHub issue 3779. CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2024/03/21 05:53:11 Modified files: usr.bin/tmux : options-table.c tmux.1 Log message: Reduce escape-time default to 10 milliseconds, 500 is far too long for modern terminals and networks. Case made by Kurtis Rader in GitHub issue 3844. CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2024/03/21 06:10:57 Modified files: usr.bin/tmux : screen-write.c Log message: Write padding character into the right position. CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/21 06:23:59 Modified files: graphics/zbar : Makefile distinfo graphics/zbar/patches: patch-Makefile_in Removed files: graphics/zbar/patches: patch-configure Log message: update to zbar-0.23.93, ok jsg (maintainer) Various fixes including a heap buffer overflow triggerable by crafted QR code, plus fixes build with Python 3.11. https://github.com/mchehab/zbar/releases CVSROOT: /cvs Module name: www Changes by: sthen@cvs.openbsd.org 2024/03/21 06:28:31 Modified files: . : 75.html Log message: sparc64, 9432 pkgs CVSROOT: /cvs Module name: ports Changes by: jca@cvs.openbsd.org 2024/03/21 06:44:41 Modified files: security/gnupg : Makefile distinfo Log message: Update to gnupg-2.4.5 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/21 07:04:57 Modified files: graphics/mypaint: Makefile graphics/mypaint/patches: patch-setup_py Added files: graphics/mypaint/patches: patch-lib_gettext_setup_py Log message: backport upstream py3.11 fixes CVSROOT: /cvs Module name: ports Changes by: op@cvs.openbsd.org 2024/03/21 08:35:25 Modified files: games/taisei : Makefile distinfo Removed files: games/taisei/patches: patch-external_koishi_src_stack_alloc_c Log message: update games/taisei to 1.4.1 disable LTO to fix a crash during the bossfight of the third stage (this issue was already present in 1.4 but not on 1.3.x) CVSROOT: /cvs Module name: ports Changes by: paco@cvs.openbsd.org 2024/03/21 09:52:04 Modified files: net/miniflux : Makefile distinfo modules.inc Log message: update net/miniflux to 2.1.1 CVSROOT: /cvs Module name: src Changes by: bluhm@cvs.openbsd.org 2024/03/21 10:46:04 Modified files: usr.bin/tcpbench: tcpbench.c Log message: Fix white space. OK tobhe@ CVSROOT: /cvs Module name: ports Changes by: paco@cvs.openbsd.org 2024/03/21 11:41:35 Modified files: net/tailscale : Makefile distinfo modules.inc Log message: update net/tailscale to 1.62.0 from Adriano Barbosa (maintainer) CVSROOT: /cvs Module name: ports Changes by: caspar@cvs.openbsd.org 2024/03/21 14:35:55 Modified files: devel/shellcheck: Makefile distinfo devel/shellcheck/files: shellcheck.1 Log message: devel/shellcheck: update to 0.10.0 OK gnezdo@ CVSROOT: /cvs Module name: ports Changes by: caspar@cvs.openbsd.org 2024/03/21 14:39:21 Modified files: net/snowflake_proxy: Makefile distinfo modules.inc Log message: net/snowflake_proxy: update to 2.9.2 CVSROOT: /cvs Module name: ports Changes by: kili@cvs.openbsd.org 2024/03/21 14:52:54 Modified files: lang/ghc : Tag: OPENBSD_7_5 Makefile distinfo Log message: New bootstrap. Reminded by gnezdo@ CVSROOT: /cvs Module name: src Changes by: tobhe@cvs.openbsd.org 2024/03/21 16:08:49 Modified files: sbin/iked : ikev2.c Log message: Avoid redundant allocation in ikev2_prfplus() from markus@ CVSROOT: /cvs Module name: ports Changes by: bluhm@cvs.openbsd.org 2024/03/21 16:37:16 Modified files: www/p5-Test-HTTP-LocalServer: Makefile distinfo Log message: update p5-Test-HTTP-LocalServer to 0.76 CVSROOT: /cvs Module name: ports Changes by: kili@cvs.openbsd.org 2024/03/21 16:57:01 Modified files: lang/ghc : Makefile distinfo Log message: New bootstrap. Reminded by gnezdo@ (now committed to -current, sorry for the mess on OPENBSD_7_5). CVSROOT: /cvs Module name: src Changes by: patrick@cvs.openbsd.org 2024/03/21 17:12:33 Modified files: sys/dev/fdt : if_mvneta.c Log message: Never bindings use the phy-handle property instead of the phy property. ok kettenis@ CVSROOT: /cvs Module name: ports Changes by: bluhm@cvs.openbsd.org 2024/03/21 18:25:08 Modified files: graphics/py-pyqtgraph: Makefile distinfo graphics/py-pyqtgraph/pkg: PLIST Log message: update py-pyqtgraph to 0.13.4 CVSROOT: /cvs Module name: ports Changes by: daniel@cvs.openbsd.org 2024/03/21 18:51:24 Modified files: security/py-requests-aws4auth: Makefile distinfo security/py-requests-aws4auth/pkg: PLIST Log message: update requests-aws4auth to 1.1.2; needed to update urllib3 CVSROOT: /cvs Module name: ports Changes by: daniel@cvs.openbsd.org 2024/03/21 19:07:19 Modified files: devel/py-nbconvert: Makefile distinfo Log message: update nbconvert to 7.16.3 CVSROOT: /cvs Module name: www Changes by: lteo@cvs.openbsd.org 2024/03/21 20:26:52 Modified files: . : 75.html Log message: Update versions for ports CVSROOT: /cvs Module name: src Changes by: job@cvs.openbsd.org 2024/03/21 21:38:12 Modified files: usr.sbin/rpki-client: cert.c extern.h filemode.c http.c main.c repo.c rrdp_delta.c rrdp_notification.c rrdp_snapshot.c rsync.c tal.c x509.c Log message: Replace protocol literal strings and strlen() calls with defined constants OK tb@ claudio@ CVSROOT: /cvs Module name: ports Changes by: kn@cvs.openbsd.org 2024/03/21 23:06:05 Modified files: devel/github-cli: Makefile distinfo modules.inc Log message: update to github-cli 2.46.0 CVSROOT: /cvs Module name: src Changes by: ratchov@cvs.openbsd.org 2024/03/21 23:54:25 Modified files: sys/kern : kern_pledge.c Log message: pledge: Allow the AUDIO_GETDEV ioctl in "audio" ok deraadt, kn, phessler CVSROOT: /cvs Module name: src Changes by: ratchov@cvs.openbsd.org 2024/03/22 00:06:06 Modified files: usr.bin/aucat : aucat.c Log message: aucat: Add a bytes-per-sample argument to allcobuf() No behavior change. CVSROOT: /cvs Module name: src Changes by: ratchov@cvs.openbsd.org 2024/03/22 00:20:48 Modified files: usr.bin/aucat : aucat.c Log message: aucat: Allow any device sample encoding. If the device doesn't support the aucat internal encoding, then setup a conversion layer instead of failing. This allows aucat to be used for audio equipment testing/debugging without involving the full sndiod processing chain. CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/22 00:24:54 Modified files: lib/libcrypto/x509: x509_lu.c Log message: Simplify X509_STORE_free() This had an inlined version of sk_pop_free(). We can just call it the right way. ok jsing CVSROOT: /cvs Module name: ports Changes by: sdk@cvs.openbsd.org 2024/03/22 00:59:11 Modified files: misc/remind : Makefile distinfo misc/remind/pkg: PLIST Log message: update to remind-4.3.3, from Martin Ziemer (maintainer) plus port fixes spotted by kn@ and sdk@ CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2024/03/22 01:15:04 Modified files: sys/nfs : nfs_socket.c nfs_syscalls.c Log message: Limit NFS connections to originate from a reserved port. For TCP connections do the check when adding the socket via nfssvc(2). For UDP do the check early after soreceive(). On top of this limit the sockets added via nfssvc(2) to IPv4 TCP and UDP sockets. OK millert@ deraadt@ CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2024/03/22 01:19:28 Modified files: usr.sbin/bgpd : bgpd.h logmsg.c session.c session.h util.c Log message: Rework parse_notification() to use the ibuf API for everything. While there fix the RFC5492 handling of ERR_OPEN_CAPA (the current code has the logic inversed). ERR_OPEN_CAPA is there to signal that a needed capability is missing in our OPEN message. Just add the handling of ERR_OPEN_CAPA to log_notification(). Also rework the handling of the shutdown reason and move the printing into log_notification(). OK tb@ CVSROOT: /cvs Module name: ports Changes by: martin@cvs.openbsd.org 2024/03/22 02:13:36 Modified files: net/ntfy : Makefile distinfo modules.inc Log message: Update ntfy to 2.9.0. CVSROOT: /cvs Module name: ports Changes by: jsg@cvs.openbsd.org 2024/03/22 02:29:15 Modified files: sysutils/pciutils: Makefile distinfo sysutils/pciutils/patches: patch-lib_names-net_c patch-lib_obsd-device_c sysutils/pciutils/pkg: PLIST Log message: update to pciutils 3.11.1 CVSROOT: /cvs Module name: ports Changes by: benoit@cvs.openbsd.org 2024/03/22 03:11:18 Modified files: textproc/p5-PDF-Table: Makefile distinfo Log message: Update to p5-PDF-Table-1.006 from wen heping. CVSROOT: /cvs Module name: www Changes by: sthen@cvs.openbsd.org 2024/03/22 05:08:09 Modified files: . : 75.html Log message: powerpc64: 8469 packages CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/22 06:05:07 Modified files: graphics/glad : Makefile distinfo graphics/glad/pkg: PLIST Log message: update to glad-2.0.6, from Jose Maldonado (maintainer), plus tweak to use MODPY_EGG_VERSION while there CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/22 06:15:27 Modified files: multimedia/libde265: Makefile distinfo multimedia/libde265/patches: patch-acceleration-speed_Makefile_in patch-dec265_Makefile_in patch-enc265_Makefile_in patch-libde265_pc_in patch-sherlock265_Makefile_in patch-tools_Makefile_in multimedia/libde265/pkg: PLIST-tools Log message: update to libde265-1.0.15, from Brad CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/22 06:15:57 Modified files: sysutils/supuner: Makefile distinfo Log message: update to supuner-0.3, from Laurence Tratt (maintainer) CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/22 06:25:33 Modified files: graphics/openimageio: Makefile distinfo Log message: update to openimageio-2.4.17.0, from Brad, I updated GH_ACCOUNT and GH_PROJECT to avoid some faffing with WRKDIST/PKGNAME CVE-2023-36183, CVE-2023-42295 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/22 06:28:39 Modified files: shells/fish : Makefile distinfo shells/fish/pkg: PLIST Log message: update to fish-3.7.1, from Florian Viehweger (maintainer) CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/22 06:29:33 Modified files: share/man/man4/man4.alpha: mem.4 share/man/man4/man4.amd64: mem.4 share/man/man4/man4.i386: mem.4 share/man/man4/man4.landisk: mem.4 share/man/man4/man4.loongson: mem.4 share/man/man4/man4.luna88k: mem.4 share/man/man4/man4.macppc: mem.4 share/man/man4/man4.sparc64: mem.4 Log message: correct history of /dev/mem and /dev/kmem The history section (added in CSRG) claimed both first appeared in v6. Looking at the manuals in the TUHS archive, /dev/mem was in v1 and /dev/kmem was introduced in v5. ok jan@ CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/22 06:29:43 Modified files: graphics/libplacebo: Makefile Log message: remove workaround no longer needed with newer glad, from Brad (maintainer) CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/22 06:31:08 Modified files: www/darkhttpd : Makefile distinfo Log message: update to darkhttpd-1.16, from Florian Viehweger (taking maintainer) CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/22 06:36:53 Modified files: devel/py-wheel : Makefile distinfo Log message: update to py3-wheel-0.43.0 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/22 06:37:19 Modified files: mail/getmail : Makefile distinfo Log message: update to getmail-6.18.14, from Martin Ziemer (maintainer) CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/22 06:37:53 Modified files: audio/opencore-amr: Makefile distinfo audio/opencore-amr/pkg: PLIST Log message: update to opencore-amr-0.1.6 CVSROOT: /cvs Module name: ports Changes by: pvk@cvs.openbsd.org 2024/03/22 06:40:57 Modified files: www/gitea : Makefile distinfo www/gitea/pkg : PLIST Log message: Update gitea 1.21.7 - > 1.21.9 Changelogs: https://github.com/go-gitea/gitea/releases/tag/v1.21.8 https://github.com/go-gitea/gitea/releases/tag/v1.21.9 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/22 06:42:57 Modified files: security/py-scrypt: Makefile distinfo security/py-scrypt/pkg: PLIST Log message: update to py3-scrypt-0.8.24 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/22 06:43:00 Modified files: www/nghttp2 : Makefile distinfo www/nghttp2/patches: patch-Makefile_in Log message: update to nghttp2-1.60.0 CVSROOT: /cvs Module name: ports Changes by: semarie@cvs.openbsd.org 2024/03/22 06:53:06 Modified files: lang/rust : Makefile distinfo rust.port.mk lang/rust/patches: patch-compiler_rustc_session_src_options_rs patch-src_bootstrap_bootstrap_py patch-src_bootstrap_src_core_build_steps_test_rs patch-src_bootstrap_src_lib_rs patch-vendor_openssl-sys_build_main_rs patch-vendor_openssl_build_rs patch-vendor_openssl_src_lib_rs lang/rust/pkg : PLIST-main PLIST-src Added files: lang/rust/patches: patch-library_std_src_sys_pal_unix_os_rs patch-vendor_openssl-sys-0_9_92_build_main_rs patch-vendor_openssl-sys-0_9_92_src_handwritten_x509_rs Removed files: lang/rust/patches: patch-library_std_src_sys_unix_os_rs patch-library_std_src_sys_unix_thread_rs patch-vendor_openssl-sys-0_9_90_src_handwritten_x509_rs patch-vendor_openssl-sys_build_cfgs_rs patch-vendor_openssl-sys_src_handwritten_x509_rs patch-vendor_openssl-sys_src_handwritten_x509v3_rs patch-vendor_openssl_src_x509_mod_rs Log message: update lang/rust to 1.77.0 Announce: https://blog.rust-lang.org/2024/03/21/Rust-1.77.0.html ReleaseNotes: https://doc.rust-lang.org/nightly/releases.html#version-77-2024-03-21 CVSROOT: /cvs Module name: ports Changes by: semarie@cvs.openbsd.org 2024/03/22 06:55:40 Modified files: devel/rust-analyzer: Makefile Log message: devel/rust-analyzer: mark broken for now (fail to build with lang/rust 1.77.0) CVSROOT: /cvs Module name: ports Changes by: robert@cvs.openbsd.org 2024/03/22 07:10:56 Modified files: www/chromium : Makefile distinfo www/chromium/patches: patch-BUILD_gn patch-base_BUILD_gn patch-base_allocator_partition_allocator_partition_alloc_gni patch-base_allocator_partition_allocator_src_partition_alloc_BUILD_gn patch-base_functional_unretained_traits_h patch-base_i18n_icu_util_cc patch-base_native_library_unittest_cc patch-base_process_process_handle_openbsd_cc patch-base_process_process_metrics_h patch-base_process_process_unittest_cc patch-base_profiler_stack_sampling_profiler_unittest_cc patch-base_rand_util_posix_cc patch-base_synchronization_lock_impl_h patch-base_syslog_logging_cc patch-base_system_sys_info_posix_cc patch-base_test_test_file_util_posix_cc patch-base_threading_hang_watcher_cc patch-base_threading_platform_thread_internal_posix_cc patch-base_trace_event_process_memory_dump_cc patch-build_config_compiler_BUILD_gn patch-build_toolchain_gcc_toolchain_gni patch-build_toolchain_toolchain_gni patch-cc_BUILD_gn patch-chrome_app_chrome_main_cc patch-chrome_app_chrome_main_delegate_cc patch-chrome_browser_BUILD_gn patch-chrome_browser_about_flags_cc patch-chrome_browser_accessibility_pdf_ocr_controller_cc patch-chrome_browser_after_startup_task_utils_cc patch-chrome_browser_background_background_mode_manager_cc patch-chrome_browser_background_background_mode_optimizer_cc patch-chrome_browser_browser_features_cc patch-chrome_browser_browser_process_impl_cc patch-chrome_browser_chrome_browser_interface_binders_cc patch-chrome_browser_chrome_browser_main_cc patch-chrome_browser_chrome_browser_main_linux_cc patch-chrome_browser_chrome_content_browser_client_cc patch-chrome_browser_chrome_content_browser_client_h patch-chrome_browser_component_updater_widevine_cdm_component_installer_cc patch-chrome_browser_download_chrome_download_manager_delegate_cc patch-chrome_browser_download_download_item_model_cc patch-chrome_browser_enterprise_connectors_reporting_browser_crash_event_router_cc patch-chrome_browser_enterprise_connectors_reporting_crash_reporting_context_cc patch-chrome_browser_extensions_BUILD_gn patch-chrome_browser_extensions_api_passwords_private_passwords_private_delegate_impl_cc patch-chrome_browser_extensions_api_runtime_chrome_runtime_api_delegate_cc patch-chrome_browser_extensions_api_settings_private_prefs_util_cc patch-chrome_browser_extensions_api_tabs_tabs_api_cc patch-chrome_browser_flag_descriptions_cc patch-chrome_browser_flag_descriptions_h patch-chrome_browser_headless_headless_mode_util_cc patch-chrome_browser_metrics_chrome_metrics_service_client_cc patch-chrome_browser_net_system_network_context_manager_cc patch-chrome_browser_net_system_network_context_manager_h patch-chrome_browser_password_manager_chrome_password_manager_client_cc patch-chrome_browser_password_manager_password_reuse_manager_factory_cc patch-chrome_browser_policy_configuration_policy_handler_list_factory_cc patch-chrome_browser_prefs_browser_prefs_cc patch-chrome_browser_prefs_pref_service_incognito_allowlist_cc patch-chrome_browser_profiles_chrome_browser_main_extra_parts_profiles_cc patch-chrome_browser_profiles_profile_impl_cc patch-chrome_browser_safe_browsing_download_protection_file_analyzer_cc patch-chrome_browser_screen_ai_screen_ai_install_state_cc patch-chrome_browser_send_tab_to_self_receiving_ui_handler_registry_cc patch-chrome_browser_send_tab_to_self_send_tab_to_self_client_service_cc patch-chrome_browser_sync_chrome_sync_client_cc patch-chrome_browser_sync_sync_service_factory_cc patch-chrome_browser_ui_actions_chrome_action_id_h patch-chrome_browser_ui_browser_command_controller_cc patch-chrome_browser_ui_chrome_pages_cc patch-chrome_browser_ui_passwords_manage_passwords_ui_controller_cc patch-chrome_browser_ui_startup_startup_browser_creator_cc patch-chrome_browser_ui_startup_startup_browser_creator_impl_cc patch-chrome_browser_ui_tab_helpers_cc patch-chrome_browser_ui_ui_features_cc patch-chrome_browser_ui_ui_features_h patch-chrome_browser_ui_views_accelerator_table_cc patch-chrome_browser_ui_views_chrome_browser_main_extra_parts_views_cc patch-chrome_browser_ui_views_compose_compose_dialog_view_cc patch-chrome_browser_ui_views_frame_browser_view_cc patch-chrome_browser_ui_views_frame_picture_in_picture_browser_frame_view_cc patch-chrome_browser_ui_views_frame_picture_in_picture_browser_frame_view_h patch-chrome_browser_ui_views_passwords_password_bubble_view_base_cc patch-chrome_browser_ui_views_profiles_profile_menu_view_base_cc patch-chrome_browser_ui_views_tab_search_bubble_host_cc patch-chrome_browser_ui_views_tabs_tab_drag_controller_cc patch-chrome_browser_ui_views_tabs_tab_hover_card_bubble_view_cc patch-chrome_browser_ui_views_user_education_browser_user_education_service_cc patch-chrome_browser_ui_views_web_apps_web_app_integration_test_driver_cc patch-chrome_browser_ui_webui_app_home_app_home_page_handler_cc patch-chrome_browser_ui_webui_chrome_web_ui_controller_factory_cc patch-chrome_browser_ui_webui_realbox_realbox_handler_cc patch-chrome_browser_ui_webui_settings_settings_localized_strings_provider_cc patch-chrome_browser_web_applications_os_integration_web_app_shortcut_manager_cc patch-chrome_browser_web_applications_policy_web_app_policy_manager_cc patch-chrome_browser_webauthn_chrome_authenticator_request_delegate_cc patch-chrome_common_chrome_features_cc patch-chrome_common_chrome_features_h patch-chrome_common_chrome_paths_cc patch-chrome_common_chrome_switches_cc patch-chrome_common_chrome_switches_h patch-chrome_common_media_cdm_registration_cc patch-chrome_common_media_component_widevine_cdm_hint_file_linux_h patch-chrome_common_pref_names_h patch-chrome_common_url_constants_h patch-chrome_common_webui_url_constants_cc patch-chrome_common_webui_url_constants_h patch-chrome_renderer_chrome_render_frame_observer_cc patch-chrome_services_printing_print_backend_service_impl_cc patch-chrome_utility_services_cc patch-chromecast_browser_cast_content_browser_client_cc patch-components_autofill_core_browser_personal_data_manager_cc patch-components_autofill_core_common_autofill_util_cc patch-components_commerce_core_commerce_feature_list_cc patch-components_crash_core_app_BUILD_gn patch-components_feature_engagement_public_feature_configurations_cc patch-components_feature_engagement_public_feature_constants_cc patch-components_feature_engagement_public_feature_constants_h patch-components_feature_engagement_public_feature_list_cc patch-components_feature_engagement_public_feature_list_h patch-components_gwp_asan_client_gwp_asan_cc patch-components_gwp_asan_crash_handler_crash_analyzer_cc patch-components_live_caption_caption_util_h patch-components_named_mojo_ipc_server_connection_info_h patch-components_password_manager_core_browser_features_password_features_cc patch-components_password_manager_core_browser_features_password_features_h patch-components_password_manager_core_browser_password_form_manager_cc patch-components_password_manager_core_browser_password_manager_cc patch-components_password_manager_core_browser_password_store_login_database_unittest_cc patch-components_password_manager_core_browser_sync_password_sync_bridge_cc patch-components_password_manager_core_common_password_manager_pref_names_h patch-components_policy_core_browser_policy_pref_mapping_test_cc patch-components_policy_core_common_cloud_cloud_policy_client_cc patch-components_policy_core_common_cloud_cloud_policy_util_cc patch-components_safe_browsing_core_common_features_cc patch-components_search_engines_search_engine_choice_search_engine_choice_service_cc patch-components_search_engines_template_url_service_cc patch-components_services_screen_ai_public_cpp_utilities_cc patch-components_signin_public_base_signin_switches_cc patch-components_signin_public_base_signin_switches_h patch-components_supervised_user_core_browser_supervised_user_service_cc patch-components_supervised_user_core_common_features_cc patch-components_supervised_user_core_common_features_h patch-components_sync_base_features_cc patch-components_user_education_views_help_bubble_view_cc patch-components_variations_service_variations_service_cc patch-components_viz_service_display_embedder_skia_output_surface_impl_cc patch-components_viz_service_display_skia_renderer_cc patch-components_viz_service_frame_sinks_root_compositor_frame_sink_impl_cc patch-content_app_content_main_runner_impl_cc patch-content_browser_BUILD_gn patch-content_browser_browser_child_process_host_impl_cc patch-content_browser_browser_main_loop_cc patch-content_browser_child_process_launcher_helper_h patch-content_browser_gpu_gpu_data_manager_impl_private_cc patch-content_browser_gpu_gpu_process_host_cc patch-content_browser_media_media_keys_listener_manager_impl_cc patch-content_browser_renderer_host_delegated_frame_host_cc patch-content_browser_renderer_host_render_process_host_impl_cc patch-content_browser_renderer_host_render_process_host_impl_h patch-content_browser_renderer_host_render_widget_host_view_aura_cc patch-content_browser_renderer_host_render_widget_host_view_aura_h patch-content_browser_utility_process_host_cc patch-content_browser_web_contents_web_contents_view_aura_cc patch-content_common_features_cc patch-content_common_features_h patch-content_gpu_gpu_main_cc patch-content_public_browser_content_browser_client_cc patch-content_public_common_content_features_cc patch-content_renderer_render_thread_impl_cc patch-content_renderer_renderer_blink_platform_impl_cc patch-content_renderer_renderer_blink_platform_impl_h patch-content_shell_BUILD_gn patch-content_shell_app_shell_main_delegate_cc patch-content_test_BUILD_gn patch-content_utility_services_cc patch-content_zygote_zygote_linux_cc patch-device_bluetooth_bluetooth_adapter_cc patch-extensions_browser_api_api_browser_context_keyed_service_factories_cc patch-extensions_browser_api_management_management_api_cc patch-extensions_browser_api_messaging_message_service_cc patch-gpu_command_buffer_service_gles2_cmd_decoder_cc patch-gpu_command_buffer_service_shared_image_external_vk_image_backing_cc patch-gpu_command_buffer_service_shared_image_external_vk_image_backing_factory_cc patch-gpu_command_buffer_service_shared_image_shared_image_factory_cc patch-gpu_command_buffer_service_shared_image_shared_image_manager_cc patch-gpu_command_buffer_service_shared_image_wrapped_sk_image_backing_cc patch-gpu_command_buffer_service_webgpu_decoder_impl_cc patch-gpu_config_gpu_finch_features_cc patch-gpu_ipc_service_gpu_init_cc patch-media_base_libaom_thread_wrapper_cc patch-media_base_libvpx_thread_wrapper_cc patch-media_base_media_switches_cc patch-media_base_media_switches_h patch-media_base_video_frame_cc patch-media_gpu_chromeos_libyuv_image_processor_backend_cc patch-media_gpu_chromeos_mailbox_video_frame_converter_cc patch-media_gpu_chromeos_platform_video_frame_utils_cc patch-media_gpu_chromeos_video_decoder_pipeline_cc patch-media_gpu_sandbox_hardware_video_decoding_sandbox_hook_linux_cc patch-media_gpu_vaapi_vaapi_video_decoder_cc patch-media_gpu_vaapi_vaapi_wrapper_cc patch-media_video_gpu_memory_buffer_video_frame_pool_cc patch-media_video_video_encode_accelerator_adapter_cc patch-media_webrtc_audio_processor_cc patch-media_webrtc_helpers_cc patch-media_webrtc_helpers_unittests_cc patch-mojo_public_c_system_thunks_cc patch-net_BUILD_gn patch-net_base_features_cc patch-net_http_http_auth_handler_negotiate_cc patch-net_socket_udp_socket_posix_cc patch-net_socket_udp_socket_unittest_cc patch-net_url_request_url_request_context_builder_cc patch-remoting_host_policy_watcher_cc patch-remoting_host_remoting_me2me_host_cc patch-sandbox_policy_features_cc patch-sandbox_policy_features_h patch-sandbox_policy_openbsd_sandbox_openbsd_cc patch-services_device_public_mojom_BUILD_gn patch-services_network_BUILD_gn patch-services_network_network_context_cc patch-services_network_network_sandbox_hook_linux_cc patch-services_network_network_service_cc patch-services_network_network_service_h patch-services_network_public_cpp_BUILD_gn patch-services_network_public_mojom_BUILD_gn patch-services_on_device_model_on_device_model_service_h patch-third_party_abseil-cpp_absl_base_config_h patch-third_party_angle_BUILD_gn patch-third_party_angle_src_libANGLE_Display_cpp patch-third_party_blink_public_common_renderer_preferences_renderer_preferences_h patch-third_party_blink_public_common_renderer_preferences_renderer_preferences_mojom_traits_h patch-third_party_blink_public_platform_platform_h patch-third_party_blink_renderer_core_exported_web_view_impl_cc patch-third_party_blink_renderer_core_frame_web_frame_test_cc patch-third_party_blink_renderer_core_layout_layout_view_cc patch-third_party_blink_renderer_core_scroll_scrollbar_theme_aura_cc patch-third_party_blink_renderer_modules_media_audio_audio_renderer_mixer_manager_test_cc patch-third_party_blink_renderer_modules_peerconnection_webrtc_audio_renderer_test_cc patch-third_party_blink_renderer_modules_webgl_webgl_rendering_context_base_cc patch-third_party_blink_renderer_modules_webgpu_gpu_queue_cc patch-third_party_blink_renderer_platform_BUILD_gn patch-third_party_blink_renderer_platform_fonts_font_cache_cc patch-third_party_blink_renderer_platform_fonts_font_cache_h patch-third_party_blink_renderer_platform_fonts_skia_font_cache_skia_cc patch-third_party_blink_renderer_platform_runtime_enabled_features_json5 patch-third_party_boringssl_src_util_generate_build_files_py patch-third_party_cpuinfo_cpuinfo_gni patch-third_party_ffmpeg_chromium_scripts_build_ffmpeg_py patch-third_party_ffmpeg_chromium_scripts_robo_lib_config_py patch-third_party_fontconfig_include_config_h patch-third_party_libaom_source_libaom_aom_ports_aarch64_cpudetect_c patch-third_party_material_color_utilities_src_cpp_palettes_tones_cc patch-third_party_speech-dispatcher_libspeechd_version_h patch-third_party_sqlite_src_amalgamation_sqlite3_c patch-third_party_test_fonts_fontconfig_fontconfig_util_linux_cc patch-third_party_webrtc_rtc_base_physical_socket_server_cc patch-tools_gn_build_gen_py patch-ui_base_cursor_cursor_factory_cc patch-ui_base_ime_fake_text_input_client_cc patch-ui_base_ime_fake_text_input_client_h patch-ui_base_test_ui_controls_h patch-ui_base_ui_base_features_cc patch-ui_base_x_x11_display_manager_cc patch-ui_base_x_x11_display_util_cc patch-ui_color_color_id_h patch-ui_color_color_provider_utils_cc patch-ui_events_event_cc patch-ui_gfx_font_render_params_linux_cc patch-ui_gfx_font_util_cc patch-ui_gfx_gpu_memory_buffer_h patch-ui_gfx_linux_gbm_wrapper_cc patch-ui_gfx_mojom_native_handle_types_mojom_traits_h patch-ui_gfx_platform_font_skia_cc patch-ui_gl_BUILD_gn patch-ui_gl_gl_switches_cc patch-ui_ozone_platform_headless_vulkan_implementation_headless_cc patch-ui_ozone_platform_wayland_emulate_wayland_input_emulate_cc patch-ui_ozone_platform_wayland_emulate_wayland_input_emulate_h patch-ui_ozone_platform_wayland_host_wayland_toplevel_window_cc patch-ui_ozone_platform_wayland_host_wayland_toplevel_window_h patch-ui_ozone_platform_wayland_host_wayland_window_cc patch-ui_ozone_platform_wayland_host_wayland_window_h patch-ui_ozone_platform_wayland_host_xdg_toplevel_wrapper_impl_cc patch-ui_ozone_platform_wayland_ozone_platform_wayland_cc patch-ui_ozone_platform_x11_vulkan_implementation_x11_cc patch-ui_ozone_platform_x11_x11_screen_ozone_cc patch-ui_ozone_platform_x11_x11_screen_ozone_h patch-ui_ozone_platform_x11_x11_window_cc patch-ui_ozone_test_mock_platform_window_delegate_h patch-ui_platform_window_platform_window_delegate_cc patch-ui_platform_window_platform_window_delegate_h patch-ui_platform_window_platform_window_init_properties_h patch-ui_views_controls_textfield_textfield_cc patch-ui_views_controls_textfield_textfield_h patch-ui_views_style_platform_style_cc patch-ui_views_test_ui_controls_factory_desktop_aura_ozone_cc patch-ui_views_widget_desktop_aura_desktop_drag_drop_client_ozone_cc patch-ui_views_widget_desktop_aura_desktop_window_tree_host_platform_cc patch-ui_views_widget_widget_cc patch-ui_views_widget_widget_h patch-v8_BUILD_gn patch-v8_src_api_api_cc patch-v8_src_base_platform_platform-posix_cc patch-v8_src_execution_isolate_cc patch-v8_src_flags_flags_cc patch-v8_src_wasm_baseline_ia32_liftoff-assembler-ia32-inl_h Added files: www/chromium/patches: patch-build_config_clang_BUILD_gn patch-build_config_rust_gni patch-build_rust_std_BUILD_gn patch-chrome_browser_chrome_browser_main_extra_parts_ozone_cc patch-chrome_browser_chrome_browser_main_linux_h patch-chrome_browser_ui_startup_startup_tab_provider_cc patch-chrome_common_media_cdm_registration_h patch-components_constrained_window_constrained_window_views_cc patch-third_party_perfetto_src_tracing_service_tracing_service_impl_cc patch-ui_ozone_platform_wayland_host_wayland_input_method_context_cc Removed files: www/chromium/patches: patch-base_base_switches_cc patch-base_base_switches_h patch-chrome_browser_permissions_chrome_permissions_client_cc patch-chrome_browser_ui_webui_ntp_app_launcher_handler_cc patch-chrome_test_BUILD_gn patch-components_qr_code_generator_BUILD_gn patch-components_qr_code_generator_features_cc patch-components_qr_code_generator_features_h patch-components_qr_code_generator_qr_code_generator_cc patch-services_device_compute_pressure_cpu_probe_cc patch-third_party_blink_renderer_platform_text_text_break_iterator_cc patch-third_party_ffmpeg_configure patch-third_party_perfetto_src_trace_processor_db_column_numeric_storage_cc patch-third_party_perfetto_src_tracing_core_tracing_service_impl_cc Log message: update to 123.0.6312.58 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/22 07:14:32 Modified files: telephony/asterisk-g729: Makefile distinfo Log message: update to asterisk-g729-1.4.4 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/22 07:14:37 Modified files: textproc/mupdf : Makefile distinfo textproc/mupdf/patches: patch-Makefile patch-Makerules patch-Makethird patch-platform_x11_pdfapp_c patch-source_helpers_pkcs7_pkcs7-openssl_c patch-source_tools_mudraw_c patch-source_tools_pdfclean_c patch-source_tools_pdfextract_c patch-source_tools_pdfinfo_c patch-source_tools_pdfpages_c patch-source_tools_pdfposter_c textproc/mupdf/pkg: PLIST Log message: update to mupdf-1.24.0 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/22 07:32:21 Modified files: devel/py-rencode: Makefile distinfo devel/py-rencode/patches: patch-setup_py Log message: update py-rencode to git version, reenabling cython and unbreaking build with python 3.11. CVSROOT: /cvs Module name: ports Changes by: pvk@cvs.openbsd.org 2024/03/22 07:41:49 Modified files: net/mattermost-server: Makefile Log message: Mark mattermost-server as BROKEN after direct syscall(2) removal CVSROOT: /cvs Module name: ports Changes by: pvk@cvs.openbsd.org 2024/03/22 07:43:31 Modified files: security/squealer: Makefile distinfo modules.inc Log message: Update squealer 1.2.1 -> 1.2.2 Changelog: https://github.com/owenrumney/squealer/releases/tag/v1.2.2 CVSROOT: /cvs Module name: ports Changes by: semarie@cvs.openbsd.org 2024/03/22 08:05:57 Modified files: devel/rust-analyzer: Makefile crates.inc distinfo devel/rust-analyzer/patches: patch-crates_sourcegen_src_lib_rs Added files: devel/rust-analyzer/patches: patch-xtask_src_codegen_rs Removed files: devel/rust-analyzer/patches: patch-crates_rust-analyzer_tests_slow-tests_tidy_rs Log message: update devel/rust-analyzer to 2024-03-18 (and unbreak it) CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2024/03/22 08:35:23 Modified files: www/mozilla-firefox: Makefile distinfo www/firefox-i18n: Makefile.inc distinfo Log message: www/mozilla-firefox: update to 124.0.1. see https://www.mozilla.org/en-US/firefox/124.0.1/releasenotes/ fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-15/ CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2024/03/22 08:36:42 Modified files: www/mozilla-firefox: Tag: OPENBSD_7_4 Makefile distinfo Log message: www/mozilla-firefox: MFC update to 124.0.1. see https://www.mozilla.org/en-US/firefox/124.0.1/releasenotes/ fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-15/ CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2024/03/22 09:41:34 Modified files: usr.sbin/bgpd : bgpd.h logmsg.c rtr_proto.c session.c util.c Log message: Rework the cease shutdown reason to work in both directions by looking at the ibuf payload passed to log_notification(). Because of this move ibuf_get_string() and the log_notification() call in parse_notification(). OK tb@ CVSROOT: /cvs Module name: ports Changes by: fcambus@cvs.openbsd.org 2024/03/22 10:27:02 Modified files: fonts/spleen : Makefile distinfo Log message: Update spleen to 2.1.0. CVSROOT: /cvs Module name: ports Changes by: paco@cvs.openbsd.org 2024/03/22 10:40:17 Modified files: audio/ncspot : Makefile crates.inc distinfo Log message: update audio/ncspot to 1.1.0 from lraab@ ok Henrik Friedrichsen (maintainer). While here take maintainer as Henrik asked for it. CVSROOT: /cvs Module name: src Changes by: mvs@cvs.openbsd.org 2024/03/22 11:34:11 Modified files: sys/kern : uipc_socket.c uipc_usrreq.c sys/sys : socketvar.h Log message: Use sorflush() instead of direct unp_scan(..., unp_discard) to discard dead unix(4) sockets. The difference in direct unp_scan() and sorflush() is the mbuf(9) chain. For the first case it is still linked to the `so_rcv', for the second it is not. This is required to make `sb_mtx' mutex(9) the only `so_rcv' sockbuf protection and remove socket re-locking from the most of uipc_*send() paths. The unlinked mbuf(9) chain doesn't require any protection, so this allows to perform sleeping unp_discard() lockless. Also, the mbuf(9) chain of the discarded socket still contains addresses of file descriptors and it is much safer to unlink it before FRELE() them. This is the reason to commit this diff standalone. ok bluhm CVSROOT: /cvs Module name: src Changes by: bluhm@cvs.openbsd.org 2024/03/22 12:05:01 Modified files: sys/netinet : in_pcb.c in_pcb.h sys/netinet6 : in6_pcb.c Log message: Make local port which is bound during connect(2) unique per laddr. in_pcbconnect() did not pass down the address it got from in_pcbselsrc() to in_pcbpickport(). As a consequence local port numbers selected during connect(2) were globally unique although they belong to different addresses. This strict uniqueness is not necessary and wastes usable ports for outgoing connections. To solve this, pass ina from in_pcbconnect() to in_pcbbind_locked(). This does not interfere how wildcard sockets are matched with specific sockets during bind(2). It only allows non-wildcard sockets to share a local port during connect(2). OK mvs@ deraadt@ CVSROOT: /cvs Module name: src Changes by: bluhm@cvs.openbsd.org 2024/03/22 13:14:28 Modified files: usr.sbin/lpd : control.c Log message: Fix chroot(2) call in control process. Use /var/empty as chroot directory. Call chroot(2) before setresuid(2). Do the error check correctly. Call chdir(2) after chroot(2). from spiros thanasoulas; with florian@ tb@; OK millert@ CVSROOT: /cvs Module name: src Changes by: jcs@cvs.openbsd.org 2024/03/22 13:22:23 Modified files: usr.bin/patch : backupfile.c patch.1 patch.c Log message: add "-V none" to prevent making any backups from FreeBSD ok bluhm deraadt CVSROOT: /cvs Module name: ports Changes by: robert@cvs.openbsd.org 2024/03/22 14:13:26 Modified files: www/ungoogled-chromium: Makefile distinfo www/ungoogled-chromium/patches: patch-BUILD_gn patch-base_BUILD_gn patch-base_allocator_partition_allocator_partition_alloc_gni patch-base_allocator_partition_allocator_src_partition_alloc_BUILD_gn patch-base_functional_unretained_traits_h patch-base_i18n_icu_util_cc patch-base_native_library_unittest_cc patch-base_process_process_handle_openbsd_cc patch-base_process_process_metrics_h patch-base_process_process_unittest_cc patch-base_profiler_stack_sampling_profiler_unittest_cc patch-base_rand_util_posix_cc patch-base_synchronization_lock_impl_h patch-base_syslog_logging_cc patch-base_system_sys_info_posix_cc patch-base_test_test_file_util_posix_cc patch-base_threading_hang_watcher_cc patch-base_threading_platform_thread_internal_posix_cc patch-base_trace_event_process_memory_dump_cc patch-build_config_compiler_BUILD_gn patch-build_toolchain_gcc_toolchain_gni patch-build_toolchain_toolchain_gni patch-cc_BUILD_gn patch-chrome_app_chrome_main_cc patch-chrome_app_chrome_main_delegate_cc patch-chrome_browser_BUILD_gn patch-chrome_browser_about_flags_cc patch-chrome_browser_accessibility_pdf_ocr_controller_cc patch-chrome_browser_after_startup_task_utils_cc patch-chrome_browser_background_background_mode_manager_cc patch-chrome_browser_background_background_mode_optimizer_cc patch-chrome_browser_browser_features_cc patch-chrome_browser_browser_process_impl_cc patch-chrome_browser_chrome_browser_interface_binders_cc patch-chrome_browser_chrome_browser_main_cc patch-chrome_browser_chrome_browser_main_linux_cc patch-chrome_browser_chrome_content_browser_client_cc patch-chrome_browser_chrome_content_browser_client_h patch-chrome_browser_component_updater_widevine_cdm_component_installer_cc patch-chrome_browser_download_chrome_download_manager_delegate_cc patch-chrome_browser_download_download_item_model_cc patch-chrome_browser_enterprise_connectors_reporting_browser_crash_event_router_cc patch-chrome_browser_enterprise_connectors_reporting_crash_reporting_context_cc patch-chrome_browser_extensions_BUILD_gn patch-chrome_browser_extensions_api_passwords_private_passwords_private_delegate_impl_cc patch-chrome_browser_extensions_api_runtime_chrome_runtime_api_delegate_cc patch-chrome_browser_extensions_api_settings_private_prefs_util_cc patch-chrome_browser_extensions_api_tabs_tabs_api_cc patch-chrome_browser_flag_descriptions_cc patch-chrome_browser_flag_descriptions_h patch-chrome_browser_headless_headless_mode_util_cc patch-chrome_browser_metrics_chrome_metrics_service_client_cc patch-chrome_browser_net_system_network_context_manager_cc patch-chrome_browser_net_system_network_context_manager_h patch-chrome_browser_password_manager_chrome_password_manager_client_cc patch-chrome_browser_password_manager_password_reuse_manager_factory_cc patch-chrome_browser_policy_configuration_policy_handler_list_factory_cc patch-chrome_browser_prefs_browser_prefs_cc patch-chrome_browser_prefs_pref_service_incognito_allowlist_cc patch-chrome_browser_profiles_chrome_browser_main_extra_parts_profiles_cc patch-chrome_browser_profiles_profile_impl_cc patch-chrome_browser_safe_browsing_download_protection_file_analyzer_cc patch-chrome_browser_screen_ai_screen_ai_install_state_cc patch-chrome_browser_send_tab_to_self_receiving_ui_handler_registry_cc patch-chrome_browser_send_tab_to_self_send_tab_to_self_client_service_cc patch-chrome_browser_sync_chrome_sync_client_cc patch-chrome_browser_sync_sync_service_factory_cc patch-chrome_browser_ui_actions_chrome_action_id_h patch-chrome_browser_ui_browser_command_controller_cc patch-chrome_browser_ui_chrome_pages_cc patch-chrome_browser_ui_passwords_manage_passwords_ui_controller_cc patch-chrome_browser_ui_startup_startup_browser_creator_cc patch-chrome_browser_ui_startup_startup_browser_creator_impl_cc patch-chrome_browser_ui_tab_helpers_cc patch-chrome_browser_ui_ui_features_cc patch-chrome_browser_ui_ui_features_h patch-chrome_browser_ui_views_accelerator_table_cc patch-chrome_browser_ui_views_chrome_browser_main_extra_parts_views_cc patch-chrome_browser_ui_views_compose_compose_dialog_view_cc patch-chrome_browser_ui_views_frame_browser_view_cc patch-chrome_browser_ui_views_frame_picture_in_picture_browser_frame_view_cc patch-chrome_browser_ui_views_frame_picture_in_picture_browser_frame_view_h patch-chrome_browser_ui_views_passwords_password_bubble_view_base_cc patch-chrome_browser_ui_views_profiles_profile_menu_view_base_cc patch-chrome_browser_ui_views_tab_search_bubble_host_cc patch-chrome_browser_ui_views_tabs_tab_drag_controller_cc patch-chrome_browser_ui_views_tabs_tab_hover_card_bubble_view_cc patch-chrome_browser_ui_views_user_education_browser_user_education_service_cc patch-chrome_browser_ui_views_web_apps_web_app_integration_test_driver_cc patch-chrome_browser_ui_webui_app_home_app_home_page_handler_cc patch-chrome_browser_ui_webui_chrome_web_ui_controller_factory_cc patch-chrome_browser_ui_webui_realbox_realbox_handler_cc patch-chrome_browser_ui_webui_settings_accessibility_main_handler_cc patch-chrome_browser_ui_webui_settings_accessibility_main_handler_h patch-chrome_browser_ui_webui_settings_settings_localized_strings_provider_cc patch-chrome_browser_web_applications_os_integration_web_app_shortcut_manager_cc patch-chrome_browser_web_applications_policy_web_app_policy_manager_cc patch-chrome_browser_webauthn_chrome_authenticator_request_delegate_cc patch-chrome_common_chrome_features_cc patch-chrome_common_chrome_features_h patch-chrome_common_chrome_paths_cc patch-chrome_common_chrome_switches_cc patch-chrome_common_chrome_switches_h patch-chrome_common_media_cdm_registration_cc patch-chrome_common_media_component_widevine_cdm_hint_file_linux_h patch-chrome_common_pref_names_h patch-chrome_common_url_constants_h patch-chrome_common_webui_url_constants_cc patch-chrome_common_webui_url_constants_h patch-chrome_renderer_chrome_render_frame_observer_cc patch-chrome_services_printing_print_backend_service_impl_cc patch-chrome_utility_services_cc patch-chromecast_browser_cast_content_browser_client_cc patch-components_autofill_core_browser_personal_data_manager_cc patch-components_autofill_core_common_autofill_util_cc patch-components_commerce_core_commerce_feature_list_cc patch-components_crash_core_app_BUILD_gn patch-components_feature_engagement_public_feature_configurations_cc patch-components_feature_engagement_public_feature_constants_cc patch-components_feature_engagement_public_feature_constants_h patch-components_feature_engagement_public_feature_list_cc patch-components_feature_engagement_public_feature_list_h patch-components_gwp_asan_client_gwp_asan_cc patch-components_gwp_asan_crash_handler_crash_analyzer_cc patch-components_live_caption_caption_util_h patch-components_named_mojo_ipc_server_connection_info_h patch-components_password_manager_core_browser_features_password_features_cc patch-components_password_manager_core_browser_features_password_features_h patch-components_password_manager_core_browser_password_form_manager_cc patch-components_password_manager_core_browser_password_manager_cc patch-components_password_manager_core_browser_password_store_login_database_unittest_cc patch-components_password_manager_core_browser_sync_password_sync_bridge_cc patch-components_password_manager_core_common_password_manager_pref_names_h patch-components_policy_core_browser_policy_pref_mapping_test_cc patch-components_policy_core_common_cloud_cloud_policy_client_cc patch-components_policy_core_common_cloud_cloud_policy_util_cc patch-components_safe_browsing_core_common_features_cc patch-components_search_engines_search_engine_choice_search_engine_choice_service_cc patch-components_search_engines_template_url_service_cc patch-components_services_screen_ai_public_cpp_utilities_cc patch-components_signin_public_base_signin_switches_cc patch-components_signin_public_base_signin_switches_h patch-components_supervised_user_core_browser_supervised_user_service_cc patch-components_supervised_user_core_common_features_cc patch-components_supervised_user_core_common_features_h patch-components_sync_base_features_cc patch-components_user_education_views_help_bubble_view_cc patch-components_variations_service_variations_service_cc patch-components_viz_service_display_embedder_skia_output_surface_impl_cc patch-components_viz_service_display_skia_renderer_cc patch-components_viz_service_frame_sinks_root_compositor_frame_sink_impl_cc patch-content_app_content_main_runner_impl_cc patch-content_browser_BUILD_gn patch-content_browser_browser_child_process_host_impl_cc patch-content_browser_browser_main_loop_cc patch-content_browser_child_process_launcher_helper_h patch-content_browser_gpu_gpu_data_manager_impl_private_cc patch-content_browser_gpu_gpu_process_host_cc patch-content_browser_media_media_keys_listener_manager_impl_cc patch-content_browser_renderer_host_delegated_frame_host_cc patch-content_browser_renderer_host_render_process_host_impl_cc patch-content_browser_renderer_host_render_process_host_impl_h patch-content_browser_renderer_host_render_widget_host_view_aura_cc patch-content_browser_renderer_host_render_widget_host_view_aura_h patch-content_browser_utility_process_host_cc patch-content_browser_web_contents_web_contents_view_aura_cc patch-content_common_features_cc patch-content_common_features_h patch-content_gpu_gpu_main_cc patch-content_public_browser_content_browser_client_cc patch-content_public_common_content_features_cc patch-content_renderer_render_thread_impl_cc patch-content_renderer_renderer_blink_platform_impl_cc patch-content_renderer_renderer_blink_platform_impl_h patch-content_shell_BUILD_gn patch-content_shell_app_shell_main_delegate_cc patch-content_test_BUILD_gn patch-content_utility_services_cc patch-content_zygote_zygote_linux_cc patch-device_bluetooth_bluetooth_adapter_cc patch-extensions_browser_api_api_browser_context_keyed_service_factories_cc patch-extensions_browser_api_management_management_api_cc patch-extensions_browser_api_messaging_message_service_cc patch-gpu_command_buffer_service_gles2_cmd_decoder_cc patch-gpu_command_buffer_service_shared_image_external_vk_image_backing_cc patch-gpu_command_buffer_service_shared_image_external_vk_image_backing_factory_cc patch-gpu_command_buffer_service_shared_image_shared_image_factory_cc patch-gpu_command_buffer_service_shared_image_shared_image_manager_cc patch-gpu_command_buffer_service_shared_image_wrapped_sk_image_backing_cc patch-gpu_command_buffer_service_webgpu_decoder_impl_cc patch-gpu_config_gpu_finch_features_cc patch-gpu_ipc_service_gpu_init_cc patch-media_base_libaom_thread_wrapper_cc patch-media_base_libvpx_thread_wrapper_cc patch-media_base_media_switches_cc patch-media_base_media_switches_h patch-media_base_video_frame_cc patch-media_gpu_chromeos_libyuv_image_processor_backend_cc patch-media_gpu_chromeos_mailbox_video_frame_converter_cc patch-media_gpu_chromeos_platform_video_frame_utils_cc patch-media_gpu_chromeos_video_decoder_pipeline_cc patch-media_gpu_sandbox_hardware_video_decoding_sandbox_hook_linux_cc patch-media_gpu_vaapi_vaapi_video_decoder_cc patch-media_gpu_vaapi_vaapi_wrapper_cc patch-media_video_gpu_memory_buffer_video_frame_pool_cc patch-media_video_video_encode_accelerator_adapter_cc patch-media_webrtc_audio_processor_cc patch-media_webrtc_helpers_cc patch-media_webrtc_helpers_unittests_cc patch-mojo_public_c_system_thunks_cc patch-net_BUILD_gn patch-net_base_features_cc patch-net_http_http_auth_handler_negotiate_cc patch-net_socket_udp_socket_posix_cc patch-net_socket_udp_socket_unittest_cc patch-net_url_request_url_request_context_builder_cc patch-remoting_host_policy_watcher_cc patch-remoting_host_remoting_me2me_host_cc patch-sandbox_policy_features_cc patch-sandbox_policy_features_h patch-sandbox_policy_openbsd_sandbox_openbsd_cc patch-services_device_public_mojom_BUILD_gn patch-services_network_BUILD_gn patch-services_network_network_context_cc patch-services_network_network_sandbox_hook_linux_cc patch-services_network_network_service_cc patch-services_network_network_service_h patch-services_network_public_cpp_BUILD_gn patch-services_network_public_mojom_BUILD_gn patch-services_on_device_model_on_device_model_service_h patch-third_party_abseil-cpp_absl_base_config_h patch-third_party_angle_BUILD_gn patch-third_party_angle_src_libANGLE_Display_cpp patch-third_party_blink_public_common_renderer_preferences_renderer_preferences_h patch-third_party_blink_public_common_renderer_preferences_renderer_preferences_mojom_traits_h patch-third_party_blink_public_platform_platform_h patch-third_party_blink_renderer_core_exported_web_view_impl_cc patch-third_party_blink_renderer_core_frame_web_frame_test_cc patch-third_party_blink_renderer_core_layout_layout_view_cc patch-third_party_blink_renderer_core_scroll_scrollbar_theme_aura_cc patch-third_party_blink_renderer_modules_media_audio_audio_renderer_mixer_manager_test_cc patch-third_party_blink_renderer_modules_peerconnection_webrtc_audio_renderer_test_cc patch-third_party_blink_renderer_modules_webgl_webgl_rendering_context_base_cc patch-third_party_blink_renderer_modules_webgpu_gpu_queue_cc patch-third_party_blink_renderer_platform_BUILD_gn patch-third_party_blink_renderer_platform_fonts_font_cache_cc patch-third_party_blink_renderer_platform_fonts_font_cache_h patch-third_party_blink_renderer_platform_fonts_skia_font_cache_skia_cc patch-third_party_blink_renderer_platform_runtime_enabled_features_json5 patch-third_party_boringssl_src_util_generate_build_files_py patch-third_party_cpuinfo_cpuinfo_gni patch-third_party_ffmpeg_chromium_scripts_build_ffmpeg_py patch-third_party_ffmpeg_chromium_scripts_robo_lib_config_py patch-third_party_fontconfig_include_config_h patch-third_party_libaom_source_libaom_aom_ports_aarch64_cpudetect_c patch-third_party_material_color_utilities_src_cpp_palettes_tones_cc patch-third_party_speech-dispatcher_libspeechd_version_h patch-third_party_sqlite_src_amalgamation_sqlite3_c patch-third_party_test_fonts_fontconfig_fontconfig_util_linux_cc patch-third_party_webrtc_rtc_base_physical_socket_server_cc patch-tools_gn_build_gen_py patch-ui_base_cursor_cursor_factory_cc patch-ui_base_ime_fake_text_input_client_cc patch-ui_base_ime_fake_text_input_client_h patch-ui_base_test_ui_controls_h patch-ui_base_ui_base_features_cc patch-ui_base_x_x11_display_manager_cc patch-ui_base_x_x11_display_util_cc patch-ui_color_color_id_h patch-ui_color_color_provider_utils_cc patch-ui_events_event_cc patch-ui_gfx_font_render_params_linux_cc patch-ui_gfx_font_util_cc patch-ui_gfx_gpu_memory_buffer_h patch-ui_gfx_linux_gbm_wrapper_cc patch-ui_gfx_mojom_native_handle_types_mojom_traits_h patch-ui_gfx_platform_font_skia_cc patch-ui_gl_BUILD_gn patch-ui_gl_gl_switches_cc patch-ui_ozone_platform_headless_vulkan_implementation_headless_cc patch-ui_ozone_platform_wayland_emulate_wayland_input_emulate_cc patch-ui_ozone_platform_wayland_emulate_wayland_input_emulate_h patch-ui_ozone_platform_wayland_host_wayland_toplevel_window_cc patch-ui_ozone_platform_wayland_host_wayland_toplevel_window_h patch-ui_ozone_platform_wayland_host_wayland_window_cc patch-ui_ozone_platform_wayland_host_wayland_window_h patch-ui_ozone_platform_wayland_host_xdg_toplevel_wrapper_impl_cc patch-ui_ozone_platform_wayland_ozone_platform_wayland_cc patch-ui_ozone_platform_x11_vulkan_implementation_x11_cc patch-ui_ozone_platform_x11_x11_screen_ozone_cc patch-ui_ozone_platform_x11_x11_screen_ozone_h patch-ui_ozone_platform_x11_x11_window_cc patch-ui_ozone_test_mock_platform_window_delegate_h patch-ui_platform_window_platform_window_delegate_cc patch-ui_platform_window_platform_window_delegate_h patch-ui_platform_window_platform_window_init_properties_h patch-ui_views_controls_textfield_textfield_cc patch-ui_views_controls_textfield_textfield_h patch-ui_views_style_platform_style_cc patch-ui_views_test_ui_controls_factory_desktop_aura_ozone_cc patch-ui_views_widget_desktop_aura_desktop_drag_drop_client_ozone_cc patch-ui_views_widget_desktop_aura_desktop_window_tree_host_platform_cc patch-ui_views_widget_widget_cc patch-ui_views_widget_widget_h patch-v8_BUILD_gn patch-v8_src_api_api_cc patch-v8_src_base_platform_platform-posix_cc patch-v8_src_execution_isolate_cc patch-v8_src_flags_flags_cc patch-v8_src_wasm_baseline_ia32_liftoff-assembler-ia32-inl_h Added files: www/ungoogled-chromium/patches: patch-build_config_clang_BUILD_gn patch-build_config_rust_gni patch-build_rust_std_BUILD_gn patch-chrome_browser_chrome_browser_main_extra_parts_ozone_cc patch-chrome_browser_chrome_browser_main_linux_h patch-chrome_browser_ui_startup_startup_tab_provider_cc patch-chrome_common_media_cdm_registration_h patch-components_constrained_window_constrained_window_views_cc patch-third_party_perfetto_src_tracing_service_tracing_service_impl_cc patch-ui_ozone_platform_wayland_host_wayland_input_method_context_cc Removed files: www/ungoogled-chromium/patches: patch-base_base_switches_cc patch-base_base_switches_h patch-chrome_browser_permissions_chrome_permissions_client_cc patch-chrome_browser_ui_webui_ntp_app_launcher_handler_cc patch-chrome_test_BUILD_gn patch-components_qr_code_generator_BUILD_gn patch-components_qr_code_generator_features_cc patch-components_qr_code_generator_features_h patch-components_qr_code_generator_qr_code_generator_cc patch-services_device_compute_pressure_cpu_probe_cc patch-third_party_blink_renderer_platform_text_text_break_iterator_cc patch-third_party_ffmpeg_configure patch-third_party_perfetto_src_trace_processor_db_column_numeric_storage_cc patch-third_party_perfetto_src_tracing_core_tracing_service_impl_cc Log message: update to 123.0.6312.58 CVSROOT: /cvs Module name: src Changes by: bluhm@cvs.openbsd.org 2024/03/22 15:48:38 Modified files: sys/netinet : in_pcb.c in_pcb.h Log message: Remove padding from union inpaddru. Alignment of IPv4 address with lower part of IPv6 address looks like a leftover from times when IPv6 compatible addresses should contain IPv4 addreses. Better use a simple union for both IPv4 and IPv6 addresses like everywhere else. Use this type also for common zero address. OK mvs@ CVSROOT: /cvs Module name: src Changes by: jan@cvs.openbsd.org 2024/03/22 15:49:52 Modified files: regress/sbin/disklabel: 12000.ok 18000.ok 20000.ok 300000.ok 40000.ok 90000.ok 900000.ok sbin/disklabel : disklabel.8 editor.c Log message: Increase /usr/src partition to 2GB - 5GB ok miod@, deraadt@, otto@ and bluhm@ CVSROOT: /cvs Module name: www Changes by: jsg@cvs.openbsd.org 2024/03/22 17:43:39 Modified files: . : 75.html Log message: add drm changes as requested by benno@ CVSROOT: /cvs Module name: www Changes by: jsg@cvs.openbsd.org 2024/03/22 17:58:24 Modified files: . : 75.html Log message: arm64 now has cd install media CVSROOT: /cvs Module name: src Changes by: mvs@cvs.openbsd.org 2024/03/22 19:35:57 Modified files: regress/sys/kern/unixsockets: unixsock_test.c Log message: Fix main() definition. CVSROOT: /cvs Module name: src Changes by: job@cvs.openbsd.org 2024/03/22 22:18:56 Modified files: etc/rpki : lacnic.constraints Log message: Expand ASN range for LACNIC LACNIC received a new block of ASNs from IANA https://mail.lacnic.net/pipermail/lacnog/2024-March/009690.html OK tb@ CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/23 00:37:15 Modified files: lib/libcrypto/x509: x509_trs.c Log message: Remove unused flags argument from the trust handlers The public X509_check_trust() takes a flag parameter which we must leave in place. However, we can stop passing the flag parameter around without ever looking at it. ok jsing CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/23 00:38:01 Modified files: lib/libcrypto/x509: x509_trs.c Log message: Remove unused flags and arg2 members from X509_TRUST ok jsing CVSROOT: /cvs Module name: ports Changes by: rsadowski@cvs.openbsd.org 2024/03/23 00:51:45 Modified files: security/keepassxc: Makefile distinfo Log message: Update keepassxc to 2.7.7 - Enabled PassKeys in the browser flavor. - CL: https://github.com/keepassxreboot/keepassxc/releases/tag/2.7.7 OK kn @ CVSROOT: /cvs Module name: ports Changes by: rsadowski@cvs.openbsd.org 2024/03/23 00:54:27 Modified files: x11/qt5 : qt5.port.mk x11/qt6 : qt6.port.mk Log message: Make _MODQT6_SETUP and _MODQT5_SETUP optional Enabled by default so that the behavior does not change. CVSROOT: /cvs Module name: ports Changes by: rsadowski@cvs.openbsd.org 2024/03/23 00:57:02 Log message: Import qca-qt6-2.3.8 Comment: Qt Cryptographic Architecture Description: QCA aims to provide a straightforward and cross-platform crypto API, using Qt datatypes and conventions. QCA separates the API from the implementation, using plugins known as Providers. Maintainer: Rafael Sadowski WWW: https://userbase.kde.org/QCA OK landry@ Status: Vendor Tag: rsadowski Release Tags: rsadowski_20240323 N ports/security/qca-qt6/Makefile N ports/security/qca-qt6/distinfo N ports/security/qca-qt6/patches/patch-plugins_qca-ossl_qca-ossl_cpp N ports/security/qca-qt6/patches/patch-unittest_CMakeLists_txt N ports/security/qca-qt6/pkg/DESCR N ports/security/qca-qt6/pkg/PLIST No conflicts created by this import CVSROOT: /cvs Module name: ports Changes by: rsadowski@cvs.openbsd.org 2024/03/23 00:57:28 Modified files: security : Makefile Log message: +qca-qt6 CVSROOT: /cvs Module name: ports Changes by: rsadowski@cvs.openbsd.org 2024/03/23 01:06:58 Modified files: devel/kf5/baloo: Makefile devel/kf5/baloo/pkg: PLIST devel/kf5/kglobalaccel: Makefile devel/kf5/kglobalaccel/pkg: PLIST devel/kf5/kguiaddons: Makefile devel/kf5/kguiaddons/pkg: PLIST devel/kf5/kiconthemes: Makefile devel/kf5/kio : Makefile devel/kf5/kio/pkg: PLIST devel/kf5/kirigami2: Makefile devel/kf5/kwallet: Makefile devel/kf5/kwallet/pkg: PLIST devel/kf5/plasma-framework: Makefile devel/kf5/plasma-framework/pkg: PLIST Log message: Coinstallability changes - kguiaddons: -DBUILD_GEO_SCHEME_HANDLER=OFF - baloo: -DBUILD_INDEXER_SERVICE=OFF - kglobalaccel: -DKF6_COMPAT_BUILD=ON - kwallet: -DBUILD_KWALLETD=OFF and -DBUILD_KWALLET_QUERY=OFF - kio: -DKF6_COMPAT_BUILD=ON - plasma-framework: -DBUILD_DESKTOPTHEMES=OFF (now releases with Plasma6) As described here (Coinstallability) https://community.kde.org/Frameworks/6.0_Release_notes CVSROOT: /cvs Module name: ports Changes by: pascal@cvs.openbsd.org 2024/03/23 01:26:49 Modified files: games/extremetuxracer: Makefile distinfo games/extremetuxracer/pkg: PLIST Log message: Update to extremetuxracer 0.8.3. CVSROOT: /cvs Module name: ports Changes by: rsadowski@cvs.openbsd.org 2024/03/23 01:38:53 Modified files: devel/cmake : Makefile distinfo devel/cmake/patches: patch-Source_cmGlobalGenerator_cxx patch-Source_cmQtAutoGenInitializer_cxx Log message: Update cmake-3.28.4 CVSROOT: /cvs Module name: www Changes by: rsadowski@cvs.openbsd.org 2024/03/23 02:47:18 Modified files: . : 75.html Log message: Add KDE Plasma and Qt5 comes with KDE stable patches Plasma addition pointed by Kevin Williams via misc@ CVSROOT: /cvs Module name: ports Changes by: rsadowski@cvs.openbsd.org 2024/03/23 03:23:05 Modified files: net/nextcloudclient: Makefile distinfo net/nextcloudclient/patches: patch-CMakeLists_txt Log message: Update nextcloudclient to 3.12.2 Changelog: https://github.com/nextcloud/desktop/releases/v3.12.2 Update diff as usual from Adriano (maintainer) Obrigado CVSROOT: /cvs Module name: www Changes by: stsp@cvs.openbsd.org 2024/03/23 03:35:08 Modified files: . : 75.html Log message: fill in wifi sections; requested by benno CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/23 04:24:52 Modified files: mail/dcc : Makefile distinfo mail/dcc/pkg : PLIST Log message: update to dcc-2.3.169 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/23 04:24:57 Modified files: net/arouteserver: Makefile distinfo Log message: update to arouteserver-1.21.7 CVSROOT: /cvs Module name: src Changes by: sthen@cvs.openbsd.org 2024/03/23 04:35:50 Modified files: sys/dev/pci : pcidevs Log message: Add Meinberg PCI510, from Maurice Janssen CVSROOT: /cvs Module name: src Changes by: sthen@cvs.openbsd.org 2024/03/23 04:36:37 Modified files: sys/dev/pci : pcidevs_data.h pcidevs.h Log message: sync CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 04:37:07 Modified files: net/py-botocore: Makefile distinfo net/py-botocore/pkg: PLIST Log message: Update to py3-botocore-1.34.69. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 04:37:16 Modified files: net/py-boto3 : Makefile distinfo Log message: Update to py3-boto3-1.34.69. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 04:37:38 Modified files: sysutils/awscli: Makefile distinfo sysutils/awscli/pkg: PLIST Log message: Update to awscli-1.32.69. CVSROOT: /cvs Module name: src Changes by: sthen@cvs.openbsd.org 2024/03/23 04:38:02 Modified files: sys/dev/pci : mbg.c share/man/man4 : mbg.4 Log message: Recognise Meinberg PCI510, from Maurice Janssen CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 04:48:48 Modified files: astro/calcmysky: Makefile distinfo Log message: Update to calcmysky-0.3.2. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 04:48:59 Modified files: devel/glib2mm : Makefile distinfo Log message: Update to glib2mm-2.66.7. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 04:52:28 Modified files: devel/harfbuzz : Makefile distinfo Log message: Update to harfbuzz-8.3.1. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 04:52:40 Modified files: devel/libpeas2 : Makefile distinfo Log message: Update to libpeas2-2.0.2. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 04:58:03 Modified files: net/bro : Makefile Log message: Ignore 6.2.0 release. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 05:01:40 Modified files: graphics/gthumb: Makefile distinfo Log message: Update to gthumb-3.12.6. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 05:02:40 Modified files: lang/vala : Makefile distinfo Log message: Update to vala-0.56.16. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 05:02:57 Modified files: multimedia/py-chromecast: Makefile distinfo Log message: Update to py3-chromecast-14.0.1. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 05:04:50 Modified files: net/py-s3transfer: Makefile distinfo Log message: Update to py3-s3transfer-0.10.1. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 05:07:46 Modified files: print/a2ps : Makefile distinfo print/a2ps/pkg : PLIST Removed files: print/a2ps/patches: patch-src_a2ps-lpr-wrapper Log message: Update to a2ps-4.15.6. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 05:08:30 Modified files: print/libpaper : Makefile distinfo print/libpaper/pkg: PLIST Log message: Update to libpaper-2.2.5. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 05:22:13 Modified files: productivity/libphonenumber: Makefile distinfo Log message: Update to libphonenumber-8.13.32. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 05:27:09 Modified files: security/gnutls: Makefile distinfo security/gnutls/pkg: PLIST Added files: security/gnutls/patches: patch-lib_compress_c Log message: SECURITY update to gnutls-3.8.4. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 05:27:20 Modified files: sysutils/consul-template: Makefile distinfo Log message: Update to consul-template-0.37.3. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 05:28:26 Modified files: sysutils/exoscale-cli: Makefile distinfo Log message: Update to exoscale-cli-1.76.2. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 05:29:53 Modified files: sysutils/govmomi: Makefile distinfo Log message: Update to govc-0.36.1. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 05:46:38 Modified files: sysutils/google-cloud-sdk: Makefile distinfo sysutils/google-cloud-sdk/pkg: PLIST Log message: Update to google-cloud-sdk-469.0.0. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 05:48:54 Modified files: sysutils/terraform: Makefile distinfo modules.inc Log message: Update to terraform-1.7.5. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 05:52:05 Modified files: sysutils/terragrunt: Makefile distinfo modules.inc Log message: Update to terragrunt-0.55.19. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 05:52:44 Modified files: textproc/enchant2: Makefile distinfo Log message: Update to enchant2-2.6.8. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 05:54:36 Modified files: textproc/libxml: Makefile distinfo Log message: Update to libxml-2.12.6. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 05:57:47 Modified files: x11/gnome/eog : Makefile distinfo Log message: Update to eog-45.3. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 06:00:05 Modified files: x11/gnome/ghex : Makefile distinfo Log message: Update to ghex-45.2. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 06:03:25 Modified files: x11/gnome/libgweather4: Makefile distinfo x11/gnome/libgweather4/patches: patch-libgweather_weather-metar_c Log message: Update to libgweather4-4.4.2. CVSROOT: /cvs Module name: ports Changes by: rsadowski@cvs.openbsd.org 2024/03/23 06:06:37 Modified files: sysutils/kubectl: Makefile distinfo Log message: Update kubectl-1.29.3 CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 06:08:04 Modified files: security/gnutls: Makefile Log message: Add comment. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 06:10:22 Modified files: x11/gnome/librsvg: Makefile distinfo distinfo.old Log message: Update to librsvg-2.57.3. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 06:11:17 Modified files: x11/gnome/mutter: Makefile distinfo Log message: Update to mutter-45.5. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 06:12:38 Modified files: x11/gnome/at-spi2-core: Makefile distinfo x11/gnome/at-spi2-core/pkg: PLIST Log message: Update to at-spi2-core-2.50.2. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 06:18:38 Modified files: net/telepathy/folks: Makefile distinfo Log message: Update to folks-0.15.8. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 06:21:48 Modified files: x11/gnome/shell: Makefile distinfo Log message: Update to gnome-shell-45.5. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 06:22:09 Modified files: meta/gnome : Makefile Log message: Welcome GNOME 45.5. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 06:23:05 Modified files: x11/gnome/online-accounts: Makefile distinfo Log message: Update to gnome-online-accounts-3.48.1. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 06:24:11 Modified files: x11/gnome/tweaks: Makefile distinfo Log message: Update to gnome-tweaks-45.2. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 06:26:28 Modified files: x11/gnome/usage: Makefile distinfo x11/gnome/usage/pkg: PLIST Log message: Update to gnome-usage-45.1. CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/23 06:32:22 Modified files: lang/python/3.10: Makefile lang/python/3.10/files: CHANGES.OpenBSD lang/python/3.11: Makefile lang/python/3.11/files: CHANGES.OpenBSD Added files: lang/python/3.10/patches: patch-Lib_ctypes_util_py lang/python/3.11/patches: patch-Lib_ctypes_util_py Log message: Modify Python ctypes' find_library to pass "libc.so" to dlopen() rather than attempting to resolve a version number by parsing ldconfig -r output, which results in loading an incorrect version in some cases. ok kmos@ CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 06:35:00 Modified files: x11/gnome/user-docs: Makefile distinfo x11/gnome/user-docs/pkg: PLIST Log message: Update to gnome-user-docs-45.5. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 06:35:07 Modified files: x11/gtk3mm : Makefile distinfo Log message: Update to gtk3mm-3.24.9. CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/23 06:35:27 Modified files: lang/python : Makefile.inc lang/python/3.10: Makefile lang/python/3.10/pkg: PLIST-main lang/python/3.11: Makefile Added files: lang/python/3.10/files: EXTERNALLY-MANAGED lang/python/3.11/files: EXTERNALLY-MANAGED Log message: Include an EXTERNALLY-MANAGED file in the Python packages, which triggers a warning if users attempt to install modules system-wide outside the ports/packages system. ok kmos@ CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 06:47:37 Modified files: www/libwpe : Makefile distinfo Log message: Update to libwpe-1.16.0. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 06:53:38 Modified files: x11/gnome/libpanel: Makefile distinfo x11/gnome/libpanel/pkg: PLIST Log message: Update to libpanel-1.6.0. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 06:57:19 Modified files: print/epson-inkjet-printer-escpr: Makefile distinfo print/epson-inkjet-printer-escpr/pkg: PLIST Log message: Update to epson-inkjet-printer-escpr-1.8.5. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 06:57:31 Modified files: sysutils/cloud-sql-proxy: Makefile distinfo Log message: Update to cloud-sql-proxy-2.10.1. CVSROOT: /cvs Module name: www Changes by: sthen@cvs.openbsd.org 2024/03/23 07:01:24 Modified files: faq : faq10.html Log message: talk about SMT being disabled, I got bored of writing replies to forum posts where people say "oh just set sysctl hw.smt". slightly tweaked from a version which reads ok to mlarkin, I made some changes in response to a modified diff from tj though didn't take all of them. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 07:03:14 Modified files: x11/gnome/gucharmap: Makefile distinfo Log message: Update to gucharmap-15.1.3. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 07:03:35 Modified files: x11/gnome/gom : Makefile distinfo x11/gnome/gom/pkg: PLIST Log message: Update to gom-0.5.0. CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/23 07:03:43 Modified files: math/libqalculate: Makefile distinfo Log message: update to libqalculate-5.0.0, from Justin Berthault CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 07:10:16 Modified files: x11/gnome/libcloudproviders: Makefile distinfo Log message: Update to libcloudproviders-0.3.6. CVSROOT: /cvs Module name: ports Changes by: rsadowski@cvs.openbsd.org 2024/03/23 07:10:57 Modified files: audio/musique : Makefile audio/qsynth : Makefile multimedia/shotcut: Makefile net/qbittorrent: Makefile.inc net/transmission: Makefile net/wireshark : Makefile productivity/novprog: Makefile security/qdigidoc4: Makefile security/qtkeychain: Makefile security/web-eid-app: Makefile x11/qt6 : qt6.port.mk x11/qt6/qttools: Makefile x11/qt6ct : Makefile x11/tipp10 : Makefile Log message: Add qt6tools as a build dependency for all qt6 ports Almost all Qt6 ports cannot be built without it, so make it as default like in Qt5. All ports that have explicitly set it have been adjusted. lgtm, OK sthen@ CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 07:13:04 Modified files: x11/libgedit-gtksourceview: Makefile distinfo x11/libgedit-gtksourceview/pkg: PLIST Log message: Update to libgedit-gtksourceview-299.1.0. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 07:15:02 Modified files: multimedia/pipewire/pipewire: Makefile distinfo multimedia/pipewire/pipewire/patches: patch-meson_build patch-src_daemon_pipewire_conf_in patch-src_modules_module-netjack2-manager_c patch-src_modules_module-rtp-sap_c patch-src_pipewire_mem_c patch-src_pipewire_private_h multimedia/pipewire/pipewire/pkg: PLIST-main Log message: Update to pipewire-1.0.4. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 07:20:50 Modified files: x11/yaru : Makefile distinfo x11/yaru/pkg : PLIST Log message: Update to yaru-24.04.0. CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/23 07:20:57 Modified files: productivity/timewarrior: Makefile distinfo productivity/timewarrior/pkg: PLIST Log message: update to timewarrior-1.7.1, from Nils Reuße with tweaks to running tests CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/23 07:26:40 Modified files: security/suricata: Makefile security/suricata/pkg: PLIST Log message: add various @sample to suricata's PLIST that were missed in the 7.0.2 update CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 07:27:36 Modified files: sysutils/nomad : Makefile distinfo Log message: Update to nomad-1.7.6. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 07:29:40 Modified files: devel/spidermonkey115: Makefile distinfo Log message: Update to spidermonkey115-115.9.1. CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/23 07:29:45 Modified files: multimedia/svt-av1: Makefile distinfo Log message: update to svt-av1-2.0.0, from Brad CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/23 07:29:50 Modified files: graphics/jasper: Makefile distinfo Log message: update to jasper-4.2.1, from Brad CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/23 07:31:06 Modified files: www/lighttpd : Makefile distinfo Log message: update to lighttpd-1.4.75, from Brad (maintainer) CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 07:33:05 Modified files: devel/meson : Makefile distinfo meson.port.mk devel/meson/patches: patch-mesonbuild_build_py Log message: Update to meson-1.4.0. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/23 07:33:20 Modified files: mail/cyrus-imapd: Makefile distinfo mail/cyrus-imapd/pkg: PLIST Log message: Update to cyrus-imapd-3.8.2. CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/23 07:33:51 Modified files: multimedia/aom : Makefile distinfo Log message: update to aom-3.8.2, from Brad (maintainer) CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/23 07:34:46 Modified files: graphics/blender: Makefile distinfo Log message: update to blender-3.3.16, from Brad CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/23 07:35:52 Modified files: audio/cmus : Makefile audio/cmus/patches: patch-ip_ffmpeg_c Log message: cmus: allow building with newer FFmpeg, from Brad CVSROOT: /cvs Module name: www Changes by: dv@cvs.openbsd.org 2024/03/23 08:06:26 Modified files: . : 75.html Log message: Add some vmd/vmm updates for 7.5. CVSROOT: /cvs Module name: ports Changes by: caspar@cvs.openbsd.org 2024/03/23 08:23:27 Modified files: meta/tor-browser: Makefile www/tor-browser: Makefile.inc www/tor-browser/browser: Makefile distinfo Log message: Tor Browser: update to 13.0.13 CVSROOT: /cvs Module name: ports Changes by: caspar@cvs.openbsd.org 2024/03/23 08:24:08 Modified files: meta/tor-browser: Tag: OPENBSD_7_4 Makefile www/tor-browser: Tag: OPENBSD_7_4 Makefile.inc www/tor-browser/browser: Tag: OPENBSD_7_4 Makefile distinfo Log message: Tor Browser: update to 13.0.13 CVSROOT: /cvs Module name: ports Changes by: phessler@cvs.openbsd.org 2024/03/23 08:44:06 Modified files: www/yt-dlp : Makefile distinfo www/yt-dlp/pkg : PLIST Added files: www/yt-dlp/patches: patch-pyproject_toml Removed files: www/yt-dlp/patches: patch-setup_py Log message: Update to 2024.03.10 OK mestre@ (MAINTAINER), sthen@ CVSROOT: /cvs Module name: src Changes by: guenther@cvs.openbsd.org 2024/03/23 10:30:01 Modified files: lib/libc/gen : opendir.3 lib/libskey : skeylogin.c Log message: readdir_r(3) was never necessary and has been deprecated by POSIX. Document that in the manpage and stop using it internally. ok deraadt@ millert@ jmc@ CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2024/03/23 10:54:17 Modified files: geo/qgis : Makefile distinfo Removed files: geo/qgis/patches: patch-src_core_proj_qgscoordinatereferencesystemutils_cpp Log message: geo/qgis: update to 3.36.1 remove patch merged upstream CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2024/03/23 10:58:42 Modified files: www/firefox-esr: Makefile distinfo www/firefox-esr-i18n: Makefile.inc distinfo Log message: www/firefox-esr: update to 115.9.1. see https://www.mozilla.org/en-US/firefox/115.9.1esr/releasenotes/ fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-16/ CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2024/03/23 10:58:45 Modified files: www/firefox-esr: Tag: OPENBSD_7_4 Makefile distinfo Log message: www/firefox-esr: MFC update to 115.9.1. see https://www.mozilla.org/en-US/firefox/115.9.1esr/releasenotes/ fixes https://www.mozilla.org/en-US/security/advisories/mfsa2024-16/ CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/23 12:08:31 Modified files: emulators/qemu : Makefile distinfo Log message: update to qemu-8.2.2, from Brad (maintainer) CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/23 12:18:53 Modified files: mail/neomutt : Makefile distinfo Log message: update to neomutt-20240323 CVSROOT: /cvs Module name: www Changes by: djm@cvs.openbsd.org 2024/03/23 12:46:47 Modified files: . : 75.html Log message: add openssh bits CVSROOT: /cvs Module name: ports Changes by: denis@cvs.openbsd.org 2024/03/23 12:51:16 Modified files: sysutils/kopia : Makefile distinfo modules.inc Log message: Update to v0.16.0 Changelog at https://github.com/kopia/kopia/releases/tag/v0.16.0 CVSROOT: /cvs Module name: src Changes by: yasuoka@cvs.openbsd.org 2024/03/23 16:51:49 Modified files: lib/libevent : kqueue.c Log message: In kq_del(), delete matching EV_ADD entries to prevent libevent from passing both EV_ADD and EV_DELETE for the same fd to kevent(). ok visa CVSROOT: /cvs Module name: src Changes by: yasuoka@cvs.openbsd.org 2024/03/23 18:05:01 Modified files: sbin/iked : eap.c Added files: sbin/iked : radius.c Log message: Allow zero-length identity response ok tobhe CVSROOT: /cvs Module name: src Changes by: yasuoka@cvs.openbsd.org 2024/03/23 18:14:19 Removed files: sbin/iked : radius.c Log message: Remove radius.c which is added mistakenly and under review. CVSROOT: /cvs Module name: www Changes by: gnezdo@cvs.openbsd.org 2024/03/23 18:18:15 Modified files: . : 75.html Log message: Fix a typo CVSROOT: /cvs Module name: src Changes by: sthen@cvs.openbsd.org 2024/03/23 18:33:41 Modified files: usr.sbin/traceroute: traceroute.8 Log message: update project-cymru url, from Robert Keizer, slightly tweaked CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/23 18:35:45 Modified files: lib/libcrypto/x509: x509_trs.c Log message: Drop the unused 'name' member from X509_TRUST This used to be exposed via an accessor, but this accessor is no longer part of the library, so nuke it. ok beck CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/23 18:38:58 Modified files: usr.sbin/rpki-client: x509.c Log message: Clamp the manifestNumber to 20 octets value The standards contain somewhat ambiguous language as to what the largest acceptable value for a crlNumber or manifestNumber could be, due to a limitation to 20 octets. The question is what 20 octets specifically are meant... Consensus seems to have emerged that the largest value is 2^159-1 since 2^160-1 would encode to 21 octets due to a padding octet to disambiguate ff .. ff from -7f ff .. ff (iow the top bit of the first octet is a sign bit). Thus, switch from 2^160 - 1 to 2^159 - 1 as an upper bound by checking the length of the value portion of the DER encoded ASN.1 integer to be at most 20 octets. Thanks to Martin Hoffmann, Tom Harrison, and Ben Maddison for raising and discussing the issue. Thanks also to the spec authors for making me waste a few hours of my life on a single bit. ok job CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/23 19:24:26 Modified files: lib/libcrypto/x509: x509_trs.c Log message: Rename arg1 to nid because that's what it is "Yeah, arg1 is always such an imaginative name" ian ok beck CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/23 23:50:20 Modified files: sys/lib/libsa : softraid.c Log message: use LIST_FOREACH_SAFE() to avoid use after free this can't happen in a libsa environment found by smatch, ok jsing@ CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/24 00:05:41 Modified files: lib/libcrypto/ec: ec_curve.c lib/libcrypto/err: err_all.c lib/libcrypto/evp: evp_local.h evp_names.c evp_pbe.c Log message: Bye bye gost, bye, bye turdiness ok beck CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/24 00:15:59 Modified files: lib/libcrypto/evp: evp_names.c Log message: Remove OPENSSL_NO_* #ifdefs from evp_names.c discussed with jsing CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/24 00:22:19 Modified files: usr.sbin/smtpd : smtpd.conf.5 Log message: permament -> permanent CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2024/03/24 00:39:10 Modified files: geo/libosmium : Makefile Log message: geo/libosmium: drop now useless RDEP on utf8cpp inclusion of ut8.h was removed upstream in https://github.com/osmcode/libosmium/commit/68c981313572e960e96d417f42a086d8a2213bff from brad CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/24 00:48:03 Modified files: lib/libcrypto : cryptlib.c lib/libcrypto/evp: evp_pbe.c lib/libcrypto/pkcs12: p12_attr.c p12_crt.c p12_init.c p12_mutl.c p12_sbag.c Log message: Fix namespace build noticed/ok beck CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/24 02:03:29 Modified files: lib/libcrypto/x509: x509_trs.c Log message: Drop redundant NULL checks around two for loops ok beck CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2024/03/24 02:04:21 Modified files: www/nextcloud_notify_push: Makefile crates.inc distinfo Log message: www/nextcloud_notify_push: update to 0.6.10. CVSROOT: /cvs Module name: ports Changes by: kn@cvs.openbsd.org 2024/03/24 02:15:14 Modified files: net/syncthing : Makefile distinfo net/syncthing/patches: patch-build_go Log message: update to syncthing 1.27.4; OK edd CVSROOT: /cvs Module name: ports Changes by: rsadowski@cvs.openbsd.org 2024/03/24 02:21:14 Modified files: x11/qt6/qtdeclarative: Makefile x11/qt6/qtlanguageserver: Makefile x11/qt6/qtshadertools: Makefile Log message: Add missing MODQT6_DEPS Qt6 is a bit more complicated with the dependencies like Qt5 CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/24 02:27:35 Modified files: lib/libcrypto/x509: x509_trs.c Log message: Rename ax into aux CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/24 02:29:43 Modified files: x11/xkbcommon : Makefile distinfo x11/xkbcommon/pkg: PLIST Log message: Update to libxkbcommon-1.7.0. CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/24 02:50:43 Modified files: lang/python : Makefile.inc Log message: use "if [ ...; then; fi" rather than "[ ..." to avoid an error exit code if the file doesn't exist; unbreaks 2.7/3.9, found by aja@ CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/24 03:25:41 Modified files: net/telepathy/folks: Makefile distinfo net/telepathy/folks/pkg: PLIST Log message: Update to folks-0.15.9. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/24 03:27:25 Modified files: productivity/libphonenumber: Makefile distinfo Log message: Update to libphonenumber-8.13.33. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/24 03:29:51 Modified files: x11/gnome/aisleriot: Makefile distinfo x11/gnome/aisleriot/pkg: PLIST Log message: Update to aisleriot-3.22.31. CVSROOT: /cvs Module name: ports Changes by: kn@cvs.openbsd.org 2024/03/24 03:31:30 Modified files: sysutils/portroach-cli: Makefile sysutils/portroach-cli/files: portroach-cli portroach-cli.1 Log message: tweak wording and capitalisation CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/24 03:38:44 Modified files: lang/python/2.7: Makefile lang/python/2.7/files: CHANGES.OpenBSD Log message: mention ERR_get_state() removal in CHANGES.OpenBSD, spotted by tb@ CVSROOT: /cvs Module name: src Changes by: mpi@cvs.openbsd.org 2024/03/24 04:29:35 Modified files: sys/uvm : uvmexp.h uvm_pdaemon.c Log message: Cleanup uvmpd_tune() & document global variable ownership. - Stop calling uvmpd_tune() inside uvm_pageout(). OpenBSD currently doesn't support adding RAM. `uvmexp.npages' is immutable after boot. - Document that `uvmexp.freemin' and `uvmexp.freetarg' are immutable. - Reduce the scope of the `uvm_pageq_lock' lock. It serializes accesses to `uvmexp.active' and `uvmexp.inactive'. ok kettenis@ CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/24 04:45:40 Modified files: devel/libgdata : Makefile Log message: Disable old uhttpmock (libsoup 2). CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/24 04:51:10 Modified files: net/uhttpmock : Makefile distinfo net/uhttpmock/pkg: DESCR PLIST Log message: Update to uhttpmock-0.10.0. One less libsoup2 user. CVSROOT: /cvs Module name: src Changes by: job@cvs.openbsd.org 2024/03/24 04:53:27 Modified files: usr.sbin/httpd : http.h Log message: Sync with IANA Status Code Registry From https://www.iana.org/assignments/http-status-codes/http-status-codes.xhtml OK sthen@ miod@ CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/24 04:59:05 Log message: Import msgraph-0.2.1. libmsgraph is a GLib-based library for accessing online serive APIs using MS Graph protocol. To be used by the new gvfs for onedrive support. ok robert@ Status: Vendor Tag: ajacoutot Release Tags: ajacoutot_20240324 N ports/x11/gnome/msgraph/Makefile N ports/x11/gnome/msgraph/distinfo N ports/x11/gnome/msgraph/pkg/DESCR N ports/x11/gnome/msgraph/pkg/PLIST No conflicts created by this import CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/24 04:59:30 Modified files: x11/gnome : Makefile Log message: +msgraph CVSROOT: /cvs Module name: src Changes by: beck@cvs.openbsd.org 2024/03/24 05:30:12 Modified files: lib/libcrypto/ocsp: ocsp_cl.c lib/libcrypto/ts: ts_rsp_sign.c lib/libtls : tls_conninfo.c tls_ocsp.c usr.sbin/ocspcheck: ocspcheck.c Log message: Convert libressl to use the BoringSSL style time conversions This gets rid of our last uses of timegm and gmtime in the library and things that ship with it. It includes a bit of refactoring in ocsp_cl.c to remove some obvious ugly. ok tb@ CVSROOT: /cvs Module name: ports Changes by: kn@cvs.openbsd.org 2024/03/24 06:41:49 Modified files: meta/xfce : Makefile Log message: pull in xfce4-xkb panel plugin via xfce-extras; OK landry CVSROOT: /cvs Module name: ports Changes by: kn@cvs.openbsd.org 2024/03/24 06:43:35 Modified files: meta/xfce : Makefile Log message: sort deps CVSROOT: /cvs Module name: ports Changes by: kn@cvs.openbsd.org 2024/03/24 06:43:51 Modified files: x11/xfce4/xfce4-xkb: Makefile x11/xfce4/xfce4-xkb/pkg: DESCR Log message: sync DESCR with upstream; OK landry CVSROOT: /cvs Module name: ports Changes by: fcambus@cvs.openbsd.org 2024/03/24 07:06:15 Modified files: graphics/p5-Image-ExifTool: Makefile distinfo Log message: Update p5-Image-ExifTool to 12.80. CVSROOT: /cvs Module name: src Changes by: jca@cvs.openbsd.org 2024/03/24 07:56:35 Modified files: lib/libcrypto/evp: evp_names.c Log message: Restore EVP_get_cipherbyname(NULL)/EVP_get_digestbyname(NULL) handling The previous implementation used the now defunct OBJ_NAME_get() which bailed out when passed a NULL argument. Difference spotted by the regress tests in ports/net/openvpn (regular openvpn use is fine but openvpn --show-ciphers/--show-digests crashes). ok tb@ CVSROOT: /cvs Module name: src Changes by: jca@cvs.openbsd.org 2024/03/24 08:00:11 Modified files: regress/lib/libcrypto/evp: evp_test.c Log message: Add tests for EVP_get_cipherbyname(NULL) and EVP_get_digestbyname(NULL) Requested by and ok tb@ CVSROOT: /cvs Module name: ports Changes by: jca@cvs.openbsd.org 2024/03/24 08:08:35 Modified files: net/openvpn : Makefile distinfo net/openvpn/patches: patch-configure patch-include_Makefile_in net/openvpn/pkg: PLIST Removed files: net/openvpn/patches: patch-sample_sample-config-files_tls-home_conf patch-sample_sample-config-files_tls-office_conf Log message: Update to openvpn-2.6.10 Release notes: https://github.com/OpenVPN/openvpn/blob/v2.6.10/Changes.rst The CVEs fixed in this release only affect the Windows builds. CVSROOT: /cvs Module name: ports Changes by: jca@cvs.openbsd.org 2024/03/24 10:36:34 Modified files: editors/emacs : Makefile distinfo editors/emacs/patches: patch-lisp_files_el patch-lisp_vc_vc_el Log message: SECURITY update to emacs-29.3 No CVEs assigned yet, please see NEWS (C-h n) for a list of changes that may affect your setup. CVSROOT: /cvs Module name: www Changes by: denis@cvs.openbsd.org 2024/03/24 12:02:14 Modified files: . : 75.html Log message: mention ppp(4) improvement CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2024/03/24 12:41:32 Modified files: www/mozilla-firefox: Makefile www/mozilla-firefox/files: unveil.main Log message: www/mozilla-firefox: set $XDG_CACHE_HOME/dconf rw in unveil.main CVSROOT: /cvs Module name: src Changes by: millert@cvs.openbsd.org 2024/03/24 13:51:47 Modified files: usr.bin/whois : whois.1 whois.c Log message: whois: remove obsolete handle support Contact handles have been obsolete for some time now. The "!handle" InterNic syntax no longer works and core COCO handle queries seems to only return empty records. OK sthen@ job@ CVSROOT: /cvs Module name: src Changes by: patrick@cvs.openbsd.org 2024/03/24 16:34:06 Modified files: sys/dev/fdt : if_cad.c Log message: Implement resetting the PHY via a GPIO pin, like in fec(4). This helps enable the PHY on the Raspberry Pi 5. ok kettenis@ CVSROOT: /cvs Module name: src Changes by: patrick@cvs.openbsd.org 2024/03/24 16:34:48 Modified files: sys/arch/arm64/conf: GENERIC RAMDISK Log message: Enable cad(4). ok kettenis@ CVSROOT: /cvs Module name: ports Changes by: tb@cvs.openbsd.org 2024/03/24 18:01:09 Modified files: security/rust-openssl-tests: Makefile crates.inc distinfo security/rust-openssl-tests/pkg: PLIST Log message: Update to rust-openssl-tests 20240325 CVSROOT: /cvs Module name: src Changes by: beck@cvs.openbsd.org 2024/03/24 18:05:49 Modified files: lib/libcrypto/x509: by_dir.c Log message: Remove unnecessary stat() calls from by_dir When searching for a CA or CRL file in by_dir, this stat() was used to short circuit attempting to open the file with X509_load_cert_file(). This was a deliberate TOCTOU introduced to avoid setting an error on the error stack, when what you really want to say is "we couldn't find a CA" and continue merrily on your way. As it so happens you really do not care why the load_file failed in any of these cases, it all boils down to "I can't find the CA or CRL". Instead we just omit the stat call, and clear the error stack if the load_file fails. The fact that you don't have a CA or CRL is caught later in the callers and is what you want, mimicing the non by_dir behaviour instead of possibly some bizzaro file system error. Based on a similar change in Boring. ok tb@ CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/24 18:46:57 Modified files: lib/libcrypto/x509: x509_trs.c Log message: Pull extension caching into X509_check_trust() This way the trust handlers can stop modifying the certificates. ok beck CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/24 19:00:02 Modified files: lib/libcrypto/x509: x509_trs.c Log message: Pass the nid instead of the entire trust structure This code is so ridiculously overengineered that it is an achievement even by early OpenSSL standards. ok beck CVSROOT: /cvs Module name: src Changes by: dtucker@cvs.openbsd.org 2024/03/24 19:28:29 Modified files: regress/usr.bin/ssh: test-exec.sh Log message: In PuTTY interop test, don't assume the PuTTY major version is 0. Patch from cjwatson at debian.org via bz#3671. CVSROOT: /cvs Module name: src Changes by: dtucker@cvs.openbsd.org 2024/03/24 19:40:47 Modified files: regress/usr.bin/ssh: cfgmatchlisten.sh Log message: Increase timeout. Resyncs with portable where some of the test VMs are slow enough for this to matter. CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/24 19:48:50 Modified files: lib/libcrypto/x509: x509_trs.c Log message: Const correct the trust handlers The certificates no longer need to be modified since we cache the extensions up front. ok beck CVSROOT: /cvs Module name: src Changes by: dtucker@cvs.openbsd.org 2024/03/24 20:07:08 Modified files: regress/usr.bin/ssh: key-options.sh Log message: Save error code from SSH for use inside case statement, from portable. In some shells, "case" will reset the value of $?, so save it first. CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/24 20:18:35 Modified files: lib/libcrypto/x509: x509_trs.c Log message: Add back trust member of X509_TRUST that I accidentally deleted CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/24 21:14:44 Modified files: textproc/mupdf : Makefile Log message: mupdf: add missing BDEP, from kili CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2024/03/24 21:23:59 Modified files: lib/libssl : ssl_tlsext.c Log message: Decouple TLS extension table order from tlsext_randomize_build_order() The PSK extension must be the last extension in the client hello. This is currently implemented by relying on the fact that it is the last extension in the TLS extension table. Remove this dependency so that we can reorder the table as needed. ok tb@ CVSROOT: /cvs Module name: src Changes by: dtucker@cvs.openbsd.org 2024/03/24 21:30:31 Modified files: regress/usr.bin/ssh: sftp-cmds.sh Log message: Improve shell portability: grep -q is not portable so redirect stdout, and use printf instead of relying on echo to do \n substitution. Reduces diff vs Portable. CVSROOT: /cvs Module name: src Changes by: joshua@cvs.openbsd.org 2024/03/24 21:41:16 Modified files: lib/libcrypto/x509: x509_cmp.c Log message: Clean up EVP_MD_CTX_{legacy_clear,cleanup}() usage in x509/x509_cmp.c ok tb@ CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/24 21:57:13 Modified files: lib/libcrypto/x509: x509_trs.c Log message: Kill X509_TRUST After peeling off enough layers, the entire wacky abstraction turns out to be nothing but dispatching from a trust_id to a trust handler and passing the appropriate nid and the cert. ok beck jsing CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2024/03/24 22:02:29 Modified files: lib/libssl : ssl_tlsext.c Log message: Split TLS extension parsing from processing. The TLS extension parsing and processing order is currently dependent on the order of the extensions in the handshake message. This means that the processing order (and callback order) is not under our control. Split the parsing from the processing such that the processing (and callbacks) are run in a defined order. Convert ALPN to the new model - other extensions will be split into separate parse/process in following diffs. ok beck@ tb@ CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/24 22:03:26 Modified files: lib/libcrypto/x509: x509_trs.c Log message: Final tweaks in x509_trs.c for now looked over by jsing CVSROOT: /cvs Module name: src Changes by: joshua@cvs.openbsd.org 2024/03/24 22:05:22 Modified files: lib/libcrypto/evp: bio_enc.c Log message: Clean up EVP_CIPHER_CTX_{legacy_clear,cleanup} usage in evp/bio_enc.c Additionally, this tidies up some surrounding code and replaces usage of free with freezero and malloc with calloc. ok tb@ CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2024/03/24 22:06:41 Modified files: regress/lib/libssl/tlsext: tlsexttest.c Log message: Revise TLS extension regress for parse/process changes. CVSROOT: /cvs Module name: ports Changes by: bket@cvs.openbsd.org 2024/03/24 22:17:50 Modified files: archivers/libdeflate: Makefile distinfo Log message: Update to libdeflate-1.20 Changes: https://github.com/ebiggers/libdeflate/blob/v1.20/NEWS.md CVSROOT: /cvs Module name: ports Changes by: bket@cvs.openbsd.org 2024/03/24 22:18:17 Modified files: devel/bats : Makefile distinfo devel/bats/pkg : PLIST Log message: Update to bats-1.11.0 Changes: https://github.com/bats-core/bats-core/releases/tag/v1.11.0 CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/24 23:48:39 Modified files: lib/libssl : ssl_tlsext.c Log message: Fix typo msg_types -> msg_type from jsing CVSROOT: /cvs Module name: src Changes by: dtucker@cvs.openbsd.org 2024/03/25 00:05:42 Modified files: regress/usr.bin/ssh: sftp-cmds.sh Log message: Verify string returned from local shell command. CVSROOT: /cvs Module name: src Changes by: joshua@cvs.openbsd.org 2024/03/25 00:20:16 Modified files: lib/libcrypto/evp: m_sigver.c Log message: Move custom sigctx handling out of EVP_DigestSignFinal ok tb@ CVSROOT: /cvs Module name: src Changes by: beck@cvs.openbsd.org 2024/03/25 01:02:22 Modified files: lib/libcrypto/ts: ts_rsp_sign.c Log message: Fix time conversion that broke regress. ok tb@ CVSROOT: /cvs Module name: ports Changes by: otto@cvs.openbsd.org 2024/03/25 01:12:30 Modified files: devel/meson : Makefile Added files: devel/meson/patches: patch-mesonbuild_dependencies_boost_py Log message: On OpenBSD we do not have the convention that the .so version numbers are equal to the boost version number. Skip the check filtering on that condition. ok @ajacoutot CVSROOT: /cvs Module name: ports Changes by: landry@cvs.openbsd.org 2024/03/25 01:35:29 Modified files: www/mozilla-firefox: Makefile www/mozilla-firefox/files: unveil.main Log message: www/mozilla-firefox: $XDG_CACHE_HOME/dconf needs rwc to be able to create the user file, tested by volker@ CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/25 04:16:02 Modified files: usr.bin/openssl: ts.c Log message: Clean up create_digest() The ts code is its own kind of special. I only sent this diff out to hear beck squeal. This diff doesn't actually fix anything, apart from (maybe) appeasing some obscure static analyzer. It is decidedly less bad than a similar change in openssl's issue tracker. ok beck CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2024/03/25 04:18:13 Modified files: lib/libssl : ssl_tlsext.c Log message: Simplify TLS extension parsing and processing. Rather than having a separate parse and process step for each TLS extension, do a first pass that parses all of the TLS outer extensions and retains the extension data, before running a second pass that calls the TLS extension processing code. ok beck@ tb@ CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2024/03/25 04:19:14 Modified files: regress/lib/libssl/tlsext: tlsexttest.c Log message: Revise for TLS extension parsing/processing changes. CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2024/03/25 04:41:36 Modified files: regress/lib/libcrypto/exdata: exdata_test.c Log message: Codify more insane CRYPTO_EX_DATA API. The current CRYPTO_EX_DATA implementation allows for data to be set without calling new, indexes can be used without allocation, new can be called without getting an index and dup can be called after new or without calling new. CVSROOT: /cvs Module name: src Changes by: joshua@cvs.openbsd.org 2024/03/25 04:58:06 Modified files: lib/libcrypto/evp: evp_key.c Log message: Clean up use of EVP_MD_CTX_{legacy_clear,cleanup} in EVP_BytesToKey ok tb@ CVSROOT: /cvs Module name: src Changes by: joshua@cvs.openbsd.org 2024/03/25 05:10:17 Modified files: lib/libcrypto/evp: m_sigver.c Log message: Remove unneeded brackets from if statement in EVP_DigestSignFinal ok tb@ CVSROOT: /cvs Module name: src Changes by: job@cvs.openbsd.org 2024/03/25 05:27:01 Modified files: lib/libcrypto/x509: x509rset.c Log message: Error on setting an invalid CSR version Reported by David Benjamin (BoringSSL) OK tb@ CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/25 05:37:18 Modified files: sys/dev/pci/drm/amd/amdgpu: amdgpu_drv.c Log message: fix xbacklight on amdgpu Call amdgpu_init_backlight() after drm_dev_register() otherwise the connector isn't registered yet and dm->backlight_dev is not set. tb@ mentioned this broke with the 6.6 drm update and confirmed this fixes it. Debugged with help from dtucker@ on another machine. CVSROOT: /cvs Module name: src Changes by: joshua@cvs.openbsd.org 2024/03/25 05:38:47 Modified files: lib/libcrypto/evp: evp_pbe.c Log message: Clean up use of EVP_MD_CTX_{legacy_clear,cleanup} in PKCS5_PBE_keyivgen ok tb@ CVSROOT: /cvs Module name: src Changes by: joshua@cvs.openbsd.org 2024/03/25 05:41:40 Modified files: lib/libcrypto/evp: m_sigver.c Log message: Inline sctx in EVP_DigestSignFinal ok tb@ jsing@ CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2024/03/25 06:10:57 Modified files: lib/libcrypto/x509: x509rset.c Log message: Revert r1.13 since it currently breaks openssl-ruby regress tests. ok tb@ CVSROOT: /cvs Module name: ports Changes by: op@cvs.openbsd.org 2024/03/25 06:27:24 Modified files: graphics/shaderc: Makefile distinfo graphics/shaderc/patches: patch-CMakeLists_txt patch-glslc_test_CMakeLists_txt Log message: update graphics/shaderc to 2024.0 CVSROOT: /cvs Module name: src Changes by: mvs@cvs.openbsd.org 2024/03/25 07:01:49 Modified files: sys/dev/wscons : wsevent.c wseventvar.h wskbd.c wsmouse.c wsmux.c wstpad.c Log message: Add 'ws_' prefix to 'wseventvar' structure members. No functional changes. ok miod CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2024/03/25 07:09:13 Modified files: lib/libcrypto/hkdf: hkdf.c Log message: Rewrite HKDF_expand(). Simplify overflow checking and length tracking, use a CBB to handle output and use HMAC_CTX_new() rather than having a HMAC_CTX on the stack. ok tb@ CVSROOT: /cvs Module name: ports Changes by: op@cvs.openbsd.org 2024/03/25 07:24:32 Modified files: devel/meson/patches: patch-mesonbuild_dependencies_boost_py Log message: fix the diff for boos.py; this matches otto@' PR upstream. ok otto@ CVSROOT: /cvs Module name: src Changes by: millert@cvs.openbsd.org 2024/03/25 09:52:39 Modified files: usr.bin/whois : whois.c Log message: whois: use getline(3) instead of fgetln(3) This simplifies the code and fixes a potential out of bounds read. OK op@ mbuhl@ CVSROOT: /cvs Module name: ports Changes by: naddy@cvs.openbsd.org 2024/03/25 10:43:32 Modified files: shells/yash : Makefile distinfo shells/yash/patches: patch-configure patch-variable_c shells/yash/pkg: PLIST Removed files: shells/yash/patches: patch-lineedit_editing_c Log message: shells/yash: update to 2.56.1 CVSROOT: /cvs Module name: src Changes by: patrick@cvs.openbsd.org 2024/03/25 11:24:03 Modified files: sys/arch/arm64/conf: GENERIC RAMDISK files.arm64 Added files: sys/arch/arm64/dev: rpigpio.c Log message: Add rpigpio(4), a driver for the RP1 GPIO controller on the Raspberry Pi 5. With this, GPIOs can be correctly configured and engaged. Complete pinctrl as well as IRQ functionality is yet to be implemented. ok kettenis@ CVSROOT: /cvs Module name: src Changes by: mvs@cvs.openbsd.org 2024/03/25 11:42:34 Modified files: sys/kern : syscalls.master Log message: Unlock shutdown(2). ok bluhm CVSROOT: /cvs Module name: src Changes by: mvs@cvs.openbsd.org 2024/03/25 11:43:10 Modified files: sys/kern : init_sysent.c syscalls.c sys/sys : syscall.h syscallargs.h Log message: regen CVSROOT: /cvs Module name: src Changes by: guenther@cvs.openbsd.org 2024/03/25 11:57:07 Modified files: lib/libc/sys : link.2 sys/kern : vfs_syscalls.c sys/nfs : nfs_serv.c nfs_vnops.c sys/miscfs/fuse: fuse_vnops.c sys/tmpfs : tmpfs_vnops.c sys/ufs/ext2fs : ext2fs_vnops.c sys/ufs/ufs : ufs_vnops.c Log message: Move the "no (hard) linking directories" and "no cross-mount links" checks from all the filesystems that support hardlinks at all into the VFS layer. Simplify, EPERM description in link(2). ok miod@ mpi@ CVSROOT: /cvs Module name: src Changes by: op@cvs.openbsd.org 2024/03/25 13:11:52 Modified files: usr.bin/whois : whois.c Log message: remove possibly bogus length check len is initially the line length, but then the two go out of sync. ok millert@ CVSROOT: /cvs Module name: ports Changes by: gkoehler@cvs.openbsd.org 2024/03/25 13:12:41 Modified files: lang/gambit : Makefile Added files: lang/gambit/patches: patch-include_gambit_h_in Log message: lang/gambit: disable musttail on mips64, powerpc, powerpc64 gambit-4.9.5 has a fatal error in clang at __attribute__((musttail)) on these platforms. Disable musttail if the compiler defines __mips__ or __powerpc__, then I can build gambit and run gsi(1) on powerpc and powerpc64. https://github.com/gambit/gambit/issues/898 ok juanfra@ (maintainer) CVSROOT: /cvs Module name: src Changes by: djm@cvs.openbsd.org 2024/03/25 13:28:09 Modified files: regress/usr.bin/ssh/unittests/kex: test_kex.c Log message: optional debugging CVSROOT: /cvs Module name: www Changes by: jan@cvs.openbsd.org 2024/03/25 13:50:08 Modified files: . : plus.html Log message: typo CVSROOT: /cvs Module name: src Changes by: mbuhl@cvs.openbsd.org 2024/03/25 14:25:13 Modified files: sys/dev/pci : if_igc.c igc_base.h Log message: Add the VLAN_HWTAGGING capability. Big thanks to bket@ for testing, rebasing, refactoring, and addressing feedback for this diff. ok bluhm@, jan@ CVSROOT: /cvs Module name: ports Changes by: kili@cvs.openbsd.org 2024/03/25 14:50:32 Modified files: print/poppler : Makefile distinfo print/poppler/patches: patch-poppler_XRef_cc patch-utils_CMakeLists_txt Log message: Update to poppler-24.03.0. CVSROOT: /cvs Module name: ports Changes by: kili@cvs.openbsd.org 2024/03/25 14:51:09 Added files: graphics/inkscape/patches: patch-src_extension_internal_pdfinput_svg-builder_cpp Log message: Fix build with poppler-24.03.0. CVSROOT: /cvs Module name: ports Changes by: kili@cvs.openbsd.org 2024/03/25 14:52:08 Added files: print/scribus/patches: patch-scribus_plugins_import_pdf_slaoutput_cpp Log message: Fix build with poppler-24.03.0. CVSROOT: /cvs Module name: ports Changes by: pvk@cvs.openbsd.org 2024/03/25 15:26:23 Modified files: sysutils/logstash: Makefile distinfo sysutils/logstash/patches: patch-config_logstash_yml sysutils/logstash/pkg: PLIST Log message: Update logstash 8.11.3 -> 8.12.2 Release notes: https://www.elastic.co/guide/en/logstash/8.12/releasenotes.html CVSROOT: /cvs Module name: ports Changes by: pvk@cvs.openbsd.org 2024/03/25 15:28:54 Modified files: devel/pre-commit: Makefile distinfo Log message: Update pre-commit 3.6.2 -> 3.7.0 Changelogs: https://github.com/pre-commit/pre-commit/releases/tag/v3.7.0 CVSROOT: /cvs Module name: ports Changes by: pvk@cvs.openbsd.org 2024/03/25 15:34:15 Modified files: devel/py-cookiecutter: Makefile distinfo Log message: Update py-cookiecutter 2.5.0 -> 2.6.0 Changelog: https://github.com/cookiecutter/cookiecutter/releases/tag/2.6.0 CVSROOT: /cvs Module name: ports Changes by: daniel@cvs.openbsd.org 2024/03/25 15:39:22 Modified files: textproc/py-black: Makefile distinfo textproc/py-black/pkg: PLIST Log message: update black to 24.3.0 This update includex fixes for CVE-2024-21503. From Justin Berthault with additional testing by Laurent Cheylus; thanks! CVSROOT: /cvs Module name: ports Changes by: daniel@cvs.openbsd.org 2024/03/25 16:26:33 Modified files: www/py-werkzeug: Makefile distinfo www/py-werkzeug/pkg: PLIST Log message: update werkzeug to 2.3.8 with tweaks and ok op@ CVSROOT: /cvs Module name: ports Changes by: daniel@cvs.openbsd.org 2024/03/25 16:27:00 Modified files: www/py-flask : Makefile distinfo www/py-flask/pkg: PLIST Log message: update flask to 2.3.3 with tweaks and ok op@ CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/25 16:27:32 Modified files: x11/gnome/gedit-plugins: Makefile Log message: Temporarily mark BROKEN until I fix the build with newer libgedit-gtksourceview; also spotted by naddy@ CVSROOT: /cvs Module name: ports Changes by: daniel@cvs.openbsd.org 2024/03/25 16:29:48 Modified files: www/py-flask-login: Makefile distinfo www/py-flask-login/pkg: PLIST Log message: update flask-login to 0.6.3 The update is needed to support the newer flask version committed to the tree. CVSROOT: /cvs Module name: ports Changes by: gkoehler@cvs.openbsd.org 2024/03/25 16:31:05 Modified files: devel/arm-none-eabi/gcc: Makefile devel/riscv-elf/gcc: Makefile devel/riscv32-esp-elf/gcc-bootstrap: Makefile devel/xtensa-esp32s2-elf/gcc-bootstrap: Makefile devel/xtensa-esp32s3-elf/gcc-bootstrap: Makefile devel/xtensa-lx106-elf/gcc-bootstrap: Makefile Log message: Mark some cross-gcc ports BROKEN-powerpc64 These are failing to apply patches/vecstep-*; either the patch is rejected, or the patch file is missing. See the powerpc64 bulk build report at https://marc.info/?l=openbsd-ports&m=171109047629941&w=2 CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/25 16:36:18 Modified files: www/webkitgtk4 : Makefile distinfo www/webkitgtk4/patches: patch-Source_JavaScriptCore_assembler_ARM64Assembler_h patch-Source_JavaScriptCore_assembler_ARMv7Assembler_h patch-Source_JavaScriptCore_assembler_RISCV64Assembler_h patch-Source_JavaScriptCore_heap_BlockDirectory_cpp patch-Source_JavaScriptCore_offlineasm_arm64_rb patch-Source_JavaScriptCore_runtime_MachineContext_h patch-Source_JavaScriptCore_runtime_Options_cpp patch-Source_WTF_wtf_InlineASM_h patch-Source_WTF_wtf_PlatformEnable_h patch-Source_WebCore_CMakeLists_txt patch-Source_WebCore_platform_graphics_FontSelectionAlgorithm_h patch-Source_WebCore_rendering_RenderLayerBacking_h patch-Source_cmake_OptionsCommon_cmake patch-Source_cmake_WebKitCommon_cmake patch-Source_cmake_WebKitCompilerFlags_cmake patch-Source_cmake_WebKitFeatures_cmake www/webkitgtk4/pkg: PFRAG.no-webkitgtk60 PFRAG.webkitgtk60 PLIST Added files: www/webkitgtk4/patches: patch-Source_ThirdParty_ANGLE_src_common_system_utils_linux_cpp Removed files: www/webkitgtk4/patches: patch-Source_WebCore_PAL_pal_PlatformGTK_cmake patch-Source_WebCore_crypto_algorithms_CryptoAlgorithmAES_GCM_cpp patch-Source_WebKit_UIProcess_glib_WebProcessPoolGLib_cpp Log message: Update to webkitgtk{40,41,60}-2.44.0. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/25 16:36:55 Modified files: multimedia/gstreamer1: Makefile.inc multimedia/gstreamer1/core: Makefile distinfo multimedia/gstreamer1/core/pkg: PLIST multimedia/gstreamer1/mm: Makefile multimedia/gstreamer1/plugins-bad: Makefile distinfo multimedia/gstreamer1/plugins-bad/pkg: PLIST multimedia/gstreamer1/plugins-base: Makefile distinfo multimedia/gstreamer1/plugins-base/patches: patch-meson_options_txt multimedia/gstreamer1/plugins-base/pkg: PLIST multimedia/gstreamer1/plugins-good: Makefile distinfo multimedia/gstreamer1/plugins-good/patches: patch-ext_soup_gstsouploader_c multimedia/gstreamer1/plugins-good/pkg: PLIST-main multimedia/gstreamer1/plugins-libav: distinfo multimedia/gstreamer1/plugins-ugly: Makefile distinfo multimedia/gstreamer1/py-gstreamer: Makefile distinfo Log message: Update Gstreamer to version 1.24.1. CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/25 16:37:42 Modified files: x11/gnome/yelp : Makefile www/liferea : Makefile Log message: Sync WANTLIB to unbreak after webkitgtk update. CVSROOT: /cvs Module name: www Changes by: bluhm@cvs.openbsd.org 2024/03/25 16:49:20 Modified files: . : 75.html Log message: Add SMP, network, pf, and syslogd improvements. requested by benno@ CVSROOT: /cvs Module name: www Changes by: jan@cvs.openbsd.org 2024/03/25 16:55:11 Modified files: . : 75.html Log message: Add network hardware improvements. CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2024/03/25 17:10:03 Modified files: sys/arch/riscv64/riscv64: locore.S pmap.c Log message: Add missing SFENCE.VMA instructions after switching page tables during early kernel bootstrap. ok jsg@, mlarkin@ CVSROOT: /cvs Module name: ports Changes by: jca@cvs.openbsd.org 2024/03/25 17:16:19 Modified files: editors/emacs : Tag: OPENBSD_7_4 Makefile distinfo editors/emacs/patches: Tag: OPENBSD_7_4 patch-lisp_files_el patch-lisp_vc_vc_el patch-src_emacs_c Log message: SECURITY update to emacs-29.3 Fixes for (at least): CVE-2024-30205, CVE-2024-30204, CVE-2024-30203 and CVE-2024-30202. Please see NEWS (C-h n) for a list of changes that may affect your setup (mostly Org Mode and Gnus). CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/25 18:24:11 Modified files: lib/libcrypto/conf: conf_mod.c Log message: Clean up conf's module_init() Immediately error out when no name or value is passed instead of hiding this in a a combination of ternary operator and strdup error check. Use calloc(). Unindent some stupid, don't pretend this function can return anything but -1 and 1, turn the whole thing into single exit and call the now existing imodule_free() instead of handrolling it. ok jsing CVSROOT: /cvs Module name: src Changes by: beck@cvs.openbsd.org 2024/03/25 18:39:22 Modified files: lib/libcrypto/ts: ts.h ts_conf.c ts_rsp_sign.c Log message: Change ts to only support one second precision. RFC 3631 allows for sub second ASN1 GENERALIZED times, if you choose to support sub second time precison. It does not indicate that an implementation must support them. Supporting sub second timestamps is just silly and unrealistic, so set our maximum to one second of precision. We then simplify this code by removing some nasty eye-bleed that made artisinally hand crafted strings and jammed them into an ASN1_GENERALIZEDTIME. ok tb@, jsing@, with one second precision tested by kn@ CVSROOT: /cvs Module name: src Changes by: joshua@cvs.openbsd.org 2024/03/25 18:50:22 Modified files: lib/libtls : tls.c tls_internal.h Log message: Use errno_value instead of num for readability ok beck@ jsing@ CVSROOT: /cvs Module name: src Changes by: dlg@cvs.openbsd.org 2024/03/25 18:53:51 Modified files: sys/sys : kstat.h Log message: amps and watts types volts felt lonely CVSROOT: /cvs Module name: src Changes by: dlg@cvs.openbsd.org 2024/03/25 18:54:24 Modified files: usr.bin/kstat : kstat.c Log message: print amps and watts CVSROOT: /cvs Module name: src Changes by: joshua@cvs.openbsd.org 2024/03/25 19:15:57 Modified files: lib/libtls : tls.c Log message: Use errno_value instead of num for readability ok jsing@ CVSROOT: /cvs Module name: src Changes by: beck@cvs.openbsd.org 2024/03/25 19:18:16 Modified files: regress/lib/libssl: Makefile Log message: Disable client handshake test for now for pending changes. ok jsing@ CVSROOT: /cvs Module name: ports Changes by: danj@cvs.openbsd.org 2024/03/25 19:20:57 Modified files: sysutils/vultr-cli: Makefile distinfo modules.inc Log message: Update to vultr-cli-3.0.3 From Adriano Barbosa (maintainer) CVSROOT: /cvs Module name: src Changes by: beck@cvs.openbsd.org 2024/03/25 19:21:34 Modified files: lib/libssl : ssl_tlsext.c Log message: Process supported groups before key share. This will allow us to know the client preferences for an upcoming change to key share processing. ok jsing@ CVSROOT: /cvs Module name: src Changes by: dtucker@cvs.openbsd.org 2024/03/25 19:23:11 Modified files: etc : moduli usr.bin/ssh/moduli-gen: moduli.2048 moduli.3072 moduli.4096 moduli.6144 moduli.7680 moduli.8192 Log message: Import regenerated moduli. CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/25 19:28:17 Modified files: sys/dev/pci/drm/i915/gem: i915_gem_mman.c i915_gem_object_types.h i915_gem_ttm.c Log message: adapt ttm fault handler to OpenBSD used by gem objects on dg2 CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/25 19:41:06 Modified files: lib/libcrypto/evp: evp_local.h m_sigver.c Log message: Garbage collect the unused verifyctx() and verifyctx_init() ok joshua jsing CVSROOT: /cvs Module name: www Changes by: jsg@cvs.openbsd.org 2024/03/25 19:44:29 Modified files: . : 75.html Log message: generaton -> generation CVSROOT: /cvs Module name: www Changes by: lteo@cvs.openbsd.org 2024/03/25 20:26:10 Modified files: . : 75.html Log message: Fix typo CVSROOT: /cvs Module name: src Changes by: beck@cvs.openbsd.org 2024/03/25 20:43:56 Modified files: regress/lib/libssl/tlsext: tlsexttest.c Log message: Fix expected client hello value to allow for supported_groups change. ok jsing@ CVSROOT: /cvs Module name: src Changes by: beck@cvs.openbsd.org 2024/03/25 21:44:11 Modified files: lib/libssl : ssl_local.h ssl_tlsext.c ssl_tlsext.h Log message: Add an indicator that an extension has been processed. ok jsing@ CVSROOT: /cvs Module name: ports Changes by: tb@cvs.openbsd.org 2024/03/25 21:56:58 Modified files: security/boringssl/head: Makefile distinfo security/boringssl/head/pkg: PLIST Log message: Update to boringssl 20240326 CVSROOT: /cvs Module name: www Changes by: jsg@cvs.openbsd.org 2024/03/25 21:57:49 Modified files: . : 75.html Log message: add hardware support section CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2024/03/25 22:11:42 Modified files: lib/libcrypto : crypto_internal.h Log message: Fix function guards. CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2024/03/25 22:14:45 Modified files: lib/libcrypto/bn: bn_mont.c Log message: Move bn_montgomery_reduce() and drop prototype. No functional change. CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2024/03/25 22:23:04 Modified files: lib/libcrypto/bn: bn_mont.c Log message: Mark internal functions as static. CVSROOT: /cvs Module name: ports Changes by: tb@cvs.openbsd.org 2024/03/25 22:33:15 Modified files: security/openssl-ruby-tests: Makefile distinfo security/openssl-ruby-tests/pkg: PLIST Log message: Update to openssl-ruby-tests 20240326 CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2024/03/25 23:21:35 Modified files: lib/libcrypto/md5: md5.c Log message: Demacro MD5 and improve data loading. Use static inline functions instead of macros and improve handling of aligned data. Also number rounds as per RFC 1321. ok tb@ CVSROOT: /cvs Module name: src Changes by: joshua@cvs.openbsd.org 2024/03/25 23:22:50 Modified files: lib/libcrypto/evp: p_legacy.c Log message: Clean up use of EVP_CIPHER_CTX_{legacy_clear,cleanup} in EVP_OpenInit ok tb@ CVSROOT: /cvs Module name: src Changes by: joshua@cvs.openbsd.org 2024/03/25 23:26:27 Modified files: lib/libcrypto/rsa: rsa_pss.c Log message: Clean up use of EVP_MD_CTX_{legacy_clear,cleanup} in RSA_verify_PKCS1_PSS_mgf1 ok jsing@ tb@ CVSROOT: /cvs Module name: src Changes by: joshua@cvs.openbsd.org 2024/03/25 23:37:28 Modified files: lib/libcrypto/rsa: rsa_oaep.c Log message: Clean up use of EVP_MD_CTX_{legacy_clear,cleanup} in PKCS1_MGF1 ok tb@ CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/25 23:39:47 Modified files: lib/libcrypto/asn1: p5_pbev2.c lib/libcrypto/x509: x509_local.h Log message: PKCS5_pbe2_set_iv() can be local to p5_pbev2 quoth the muppet "yes I know this is horrible!" CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/25 23:43:22 Modified files: lib/libcrypto/asn1: p5_pbev2.c Log message: Add back x509_local.h for PBKDF2PARAM CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2024/03/25 23:46:13 Modified files: lib/libcrypto/md5: md5.c Log message: Include stdint.h for uintptr_t. CVSROOT: /cvs Module name: src Changes by: joshua@cvs.openbsd.org 2024/03/25 23:50:49 Modified files: lib/libcrypto/evp: p_verify.c Log message: Clean up use of EVP_MD_CTX_{legacy_clear,cleanup} in EVP_VerifyFinal ok tb@ CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2024/03/25 23:55:15 Modified files: lib/libcrypto/md5: md5.c Log message: Stop including md32_common.h in md5.c and remove unused defines. This is now no longer needed. ok tb@ CVSROOT: /cvs Module name: src Changes by: joshua@cvs.openbsd.org 2024/03/26 00:08:51 Modified files: lib/libcrypto/evp: p_sign.c Log message: Clean up use of EVP_MD_CTX_{legacy_clear,cleanup} in EVP_SignFinal ok jsing@ CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2024/03/26 00:09:25 Modified files: lib/libcrypto/bn/arch/amd64: bn_arch.h Log message: Provide an optimised bn_subw() for amd64. bn_subw() will be used more widely in an upcoming change. CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2024/03/26 00:23:07 Modified files: lib/libcrypto/md4: md4.c Log message: Reorder functions. No functional change. CVSROOT: /cvs Module name: src Changes by: joshua@cvs.openbsd.org 2024/03/26 00:24:52 Modified files: lib/libtls : tls.c tls.h tls_bio_cb.c tls_client.c tls_config.c tls_conninfo.c tls_internal.h tls_keypair.c tls_ocsp.c tls_server.c tls_signer.c tls_verify.c Log message: Add error code support to libtls This adds tls_config_error_code() and tls_error_code(), which will become public API at a later date. Additional error codes will be added in follow-up commits. ok jsing@ beck@ CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2024/03/26 00:31:22 Modified files: lib/libtls : tls_conninfo.c Log message: Fix previous commit. CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2024/03/26 00:40:29 Modified files: lib/libcrypto/md4: md4.c Log message: Inline hash functions from md32_common.h. No change to generated assembly. CVSROOT: /cvs Module name: ports Changes by: rsadowski@cvs.openbsd.org 2024/03/26 00:43:49 Modified files: devel/jenkins/devel: Makefile devel/jenkins/stable: Makefile Log message: Update Jenkins -stable and -devel to the latest version CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2024/03/26 00:54:20 Modified files: lib/libcrypto/md4: md4.c Log message: Expand HASH_* defines. No change to generated assembly. CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/26 00:58:21 Modified files: lib/libcrypto/evp: e_rc2.c Log message: Unifdef PBE_PRF_TEST This gets use of the last mention of EVP_CTRL_PBE_PRF_NID outside of evp.h ok jsing CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2024/03/26 00:58:58 Modified files: lib/libcrypto/md4: md4.c Log message: Reorder functions expanded from md32_common.h. No functional change. CVSROOT: /cvs Module name: ports Changes by: rsadowski@cvs.openbsd.org 2024/03/26 01:01:39 Modified files: meta/qt6 : Makefile x11/qt6 : Makefile.version x11/qt6/qt3d : Makefile distinfo x11/qt6/qt5compat: distinfo x11/qt6/qtbase : Makefile distinfo x11/qt6/qtbase/patches: patch-cmake_QtFeature_cmake patch-src_network_ssl_qsslsocket_openssl_symbols_cpp patch-src_plugins_tls_openssl_qx509_openssl_cpp x11/qt6/qtbase/pkg: PLIST-main x11/qt6/qtcharts: distinfo x11/qt6/qtconnectivity: distinfo x11/qt6/qtdatavis3d: distinfo x11/qt6/qtdeclarative: Makefile distinfo x11/qt6/qtgrpc : Makefile distinfo x11/qt6/qthttpserver: distinfo x11/qt6/qtimageformats: Makefile distinfo x11/qt6/qtlanguageserver: distinfo x11/qt6/qtlocation: distinfo x11/qt6/qtlocation/pkg: PLIST x11/qt6/qtlottie: distinfo x11/qt6/qtmultimedia: Makefile distinfo x11/qt6/qtmultimedia/pkg: PLIST x11/qt6/qtnetworkauth: distinfo x11/qt6/qtpositioning: Makefile distinfo x11/qt6/qtquick3d: Makefile distinfo x11/qt6/qtquick3dphysics: Makefile distinfo x11/qt6/qtquick3dphysics/pkg: PLIST x11/qt6/qtquickeffectmaker: Makefile distinfo x11/qt6/qtquicktimeline: distinfo x11/qt6/qtremoteobjects: distinfo x11/qt6/qtscxml: Makefile distinfo x11/qt6/qtsensors: distinfo x11/qt6/qtserialbus: distinfo x11/qt6/qtserialport: distinfo x11/qt6/qtshadertools: Makefile distinfo x11/qt6/qtspeech: Makefile distinfo x11/qt6/qtsvg : distinfo x11/qt6/qttools: Makefile distinfo x11/qt6/qttranslations: Makefile distinfo x11/qt6/qtvirtualkeyboard: distinfo x11/qt6/qtwayland: Makefile distinfo x11/qt6/qtwebchannel: Makefile distinfo x11/qt6/qtwebengine: Makefile distinfo x11/qt6/qtwebengine/patches: patch-cmake_Functions_cmake patch-configure_cmake patch-src_3rdparty_chromium_build_config_linux_pkg-config_py patch-src_3rdparty_chromium_content_browser_web_contents_web_contents_view_aura_cc patch-src_3rdparty_chromium_third_party_sqlite_src_amalgamation_sqlite3_c patch-src_3rdparty_chromium_v8_src_execution_isolate_cc patch-src_core_CMakeLists_txt patch-src_pdf_CMakeLists_txt x11/qt6/qtwebengine/pkg: PLIST x11/qt6/qtwebsockets: distinfo x11/qt6/qtwebview: Makefile distinfo Removed files: x11/qt6/qtwebengine/patches: patch-src_3rdparty_chromium_third_party_blink_renderer_core_xml_xslt_processor_h patch-src_3rdparty_chromium_third_party_blink_renderer_core_xml_xslt_processor_libxslt_cc patch-src_3rdparty_chromium_third_party_blink_renderer_platform_text_text_break_iterator_cc Log message: Update Qt6 to 6.6.2 https://www.qt.io/blog/qt-6.6.2-released CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/26 01:03:10 Modified files: lib/libcrypto/asn1: p5_pbev2.c Log message: Remove PKCS5_pbe2_set_iv() This used to be a generalization of PKCS5_pbe2_set(). Its only caller was the latter, which always passes aiv == NULL and pbe_prf == -1. Thus, the iv would always be random and regarding the pbe_prf, it would always end up being NID_hmacWithSHA1 since the only ctrl grokking EVP_CTRL_PBE_PRF_NID was RC2's control, but only if PBE_PRF_TEST was defined, which it wasn't. ok jsing CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2024/03/26 01:11:29 Modified files: lib/libcrypto/md4: md4.c Log message: Inline HASH_MAKE_STRING. No change to generated assembly. CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2024/03/26 01:12:52 Modified files: lib/libcrypto/md4: md4.c Log message: Remove now unnecessary do {} while (0); CVSROOT: /cvs Module name: ports Changes by: ajacoutot@cvs.openbsd.org 2024/03/26 01:38:44 Modified files: sysutils/terragrunt: Makefile distinfo Log message: Update to terragrunt-0.55.20. CVSROOT: /cvs Module name: src Changes by: dtucker@cvs.openbsd.org 2024/03/26 02:09:16 Modified files: regress/usr.bin/ssh: sftp-cmds.sh Log message: test -h is the POSIXly way of testing for a symlink. Reduces diff vs Portable. CVSROOT: /cvs Module name: ports Changes by: tb@cvs.openbsd.org 2024/03/26 02:34:56 Modified files: security/py-tlsfuzzer: Makefile Added files: security/py-tlsfuzzer/patches: patch-scripts_test-renegotiation-changed-clienthello_py Log message: py-tlsfuzzer: fix compliance issue in reneg modified CH test from beck CVSROOT: /cvs Module name: ports Changes by: kirby@cvs.openbsd.org 2024/03/26 02:37:50 Modified files: graphics/geeqie: Makefile distinfo graphics/geeqie/patches: patch-src_exif-common_cc patch-src_window_cc Removed files: graphics/geeqie/patches: patch-src_layout_cc Log message: update to geeqie-2.4 CVSROOT: /cvs Module name: ports Changes by: tb@cvs.openbsd.org 2024/03/26 02:44:39 Modified files: security/openssl-ruby-tests: Makefile Added files: security/openssl-ruby-tests/patches: patch-test_openssl_test_x509req_rb Log message: Patch openssl-ruby to not set bogus CSR versions from job CVSROOT: /cvs Module name: www Changes by: sashan@cvs.openbsd.org 2024/03/26 02:51:51 Modified files: . : 75.html Log message: add few more notes in pf(4)/pfctl(8) CVSROOT: /cvs Module name: src Changes by: joshua@cvs.openbsd.org 2024/03/26 02:54:48 Modified files: lib/libtls : tls.c tls.h tls_client.c tls_server.c Log message: Add TLS_ERROR_INVALID_CONTEXT error code to libtls ok jsing@ beck@ CVSROOT: /cvs Module name: src Changes by: mvs@cvs.openbsd.org 2024/03/26 03:46:47 Modified files: sys/kern : sys_socket.c uipc_socket.c uipc_socket2.c uipc_usrreq.c sys/miscfs/fifofs: fifo_vnops.c sys/sys : socketvar.h Log message: Use `sb_mtx' to protect `so_rcv' receive buffer of unix(4) sockets. This makes re-locking unnecessary in the uipc_*send() paths, because it's enough to lock one socket to prevent peer from concurrent disconnection. As the little bonus, one unix(4) socket can perform simultaneous transmission and reception with one exception for uipc_rcvd(), which still requires the re-lock for connection oriented sockets. The socket lock is not held while filt_soread() and filt_soexcept() called from uipc_*send() through sorwakeup(). However, the unlocked access to the `so_options', `so_state' and `so_error' is fine. The receiving socket can't be or became listening socket. It also can't be disconnected concurrently. This makes immutable SO_ACCEPTCONN, SS_ISDISCONNECTED and SS_ISCONNECTED bits which are clean and set respectively. `so_error' is set on the peer sockets only by unp_detach(), which also can't be called concurrently on sending socket. This is also true for filt_fiforead() and filt_fifoexcept(). For other callers like kevent(2) or doaccept() the socket lock is still held. ok bluhm CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/26 03:58:11 Modified files: mail/neomutt : Makefile distinfo Log message: downgrade to neomutt-20240201, upstream has retracted 20240323 due to a corruption problem with mbox format mailboxes. CVSROOT: /cvs Module name: src Changes by: bluhm@cvs.openbsd.org 2024/03/26 04:01:57 Modified files: sys/net : rtable.c Log message: Avoid NULL pointer dereference in routing table an_match(). OK mvs@ CVSROOT: /cvs Module name: src Changes by: nicm@cvs.openbsd.org 2024/03/26 04:20:20 Modified files: usr.bin/tmux : window-copy.c Log message: Fix selection present check, reported by M Kelly. CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/26 05:09:02 Modified files: sys/dev/pci/drm/amd/amdgpu: amdgpu_drv.c Log message: test bl_idx instead of the connector type to check for backlight tested by tb@ CVSROOT: /cvs Module name: src Changes by: tb@cvs.openbsd.org 2024/03/26 05:09:37 Modified files: lib/libcrypto/x509: x509_set.c x509cset.c x509rset.c Log message: Reject setting invalid versions for certs, CRLs and CSRs The toolkit aspect bites again. Lots of invalid CRLs and CSRs are produced because people neither read the RFCs nor does the toolkit check anything it is fed. Reviewers apparently also aren't capable of remembering that they have three copy-pasted versions of the same API and that adding a version check to one of the might suggest adding one for the other two. This requires ruby-openssl 20240326p0 to pass ok beck job jsing CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/26 05:15:15 Log message: import devel/sbt, from Kirill A. Korinsky, ok op@ sbt is a build tool for Scala, Java, and more. Status: Vendor Tag: sthen Release Tags: sthen_20240326 N ports/devel/sbt/Makefile N ports/devel/sbt/distinfo N ports/devel/sbt/files/sbt N ports/devel/sbt/patches/patch-bin_sbt N ports/devel/sbt/pkg/DESCR N ports/devel/sbt/pkg/PLIST No conflicts created by this import CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/26 05:16:08 Modified files: devel : Makefile Log message: +sbt CVSROOT: /cvs Module name: src Changes by: jsg@cvs.openbsd.org 2024/03/26 05:17:36 Modified files: sys/dev/pci/drm/amd/amdgpu: amdgpu_drv.c Log message: Temporarily change the connector to unregistered when adding the backlight property to avoid warnings. Matches how inteldrm_native_backlight() handles this. problem reported and fix tested by tb@ CVSROOT: /cvs Module name: ports Changes by: tb@cvs.openbsd.org 2024/03/26 05:22:38 ports/net/rrdpit/files Update of /cvs/ports/net/rrdpit/files In directory cvs.openbsd.org:/tmp/cvs-serv95594/files Log Message: Directory /cvs/ports/net/rrdpit/files added to the repository CVSROOT: /cvs Module name: src Changes by: joshua@cvs.openbsd.org 2024/03/26 05:25:08 Modified files: lib/libcrypto/evp: m_sigver.c Log message: Clean up EVP_DigestSignFinal ok jsing tb CVSROOT: /cvs Module name: ports Changes by: tb@cvs.openbsd.org 2024/03/26 05:26:12 Modified files: net/rrdpit : Makefile crates.inc distinfo Added files: net/rrdpit/files: Cargo.lock Log message: Update to rrdpit 0.0.4 Another rust-ring consumer goes away. Upstream released without Cargo.lock, so we ship it in the ports tree. CVSROOT: /cvs Module name: src Changes by: joshua@cvs.openbsd.org 2024/03/26 06:10:50 Modified files: lib/libcrypto/hmac: hmac.c Log message: Simplify HMAC_CTX_new() There is no need to call HMAC_CTX_init() as the memory has already been initialised to zero. ok tb CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2024/03/26 06:18:23 Modified files: lib/libcrypto/md4: md4.c Log message: Rework input and output handling for md4. Use le32toh(), htole32() and crypto_{load,store}_htole32() as appropriate. ok joshua@ tb@ CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2024/03/26 06:23:02 Modified files: lib/libcrypto/md4: md4.c Log message: Inline initial values. No functional change. CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/26 06:27:51 Modified files: devel/cmake : Makefile distinfo devel/cmake/patches: patch-Source_cmGlobalGenerator_cxx patch-Source_cmQtAutoGenInitializer_cxx Log message: backout to cmake-3.28.3 to unbreak ports depending on tiff. CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2024/03/26 06:45:29 Modified files: usr.sbin/bgpd : session.c Log message: Move the SendHoldTimer code into start_timer_sendholdtime() and ensure the timer is stopped if HoldTime is 0. OK tb@ CVSROOT: /cvs Module name: src Changes by: jsing@cvs.openbsd.org 2024/03/26 06:54:22 Modified files: lib/libcrypto/sha: sha1.c Log message: Rework input and output handling for sha1. Use be32toh(), htobe32() and crypto_{load,store}_htobe32() as appropriate. Also use the same while() loop that is used for other hash functions. ok joshua@ tb@ CVSROOT: /cvs Module name: ports Changes by: op@cvs.openbsd.org 2024/03/26 07:14:12 Log message: import nncmpp-2.1.1 nncmpp is yet another MPD client. Its specialty is running equally well in the terminal, or as an X11 clien it will provide the same keyboard and mouse-friendly interface. port by Kirill A. Korinsky (kirill at korins [dot] ky) ok/tweaks sthen@ -DWITH_PULSE=off added after the ok Status: Vendor Tag: op Release Tags: op_20240326 N ports/audio/nncmpp/Makefile N ports/audio/nncmpp/distinfo N ports/audio/nncmpp/patches/patch-termo_CMakeLists_txt N ports/audio/nncmpp/pkg/DESCR N ports/audio/nncmpp/pkg/PLIST No conflicts created by this import CVSROOT: /cvs Module name: ports Changes by: op@cvs.openbsd.org 2024/03/26 07:14:48 Modified files: audio : Makefile Log message: +nncmpp CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/26 07:25:46 Modified files: editors/vim : Makefile distinfo editors/vim/patches: patch-runtime_filetype_vim editors/vim/pkg: PLIST-lang PLIST-main Log message: update to vim-9.1.205 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/26 07:32:42 Modified files: net/bird/2 : Makefile distinfo Log message: update to bird-2.15.1 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/26 07:32:47 Modified files: graphics/jasper: Makefile distinfo Log message: update to jasper-4.2.2 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/26 07:33:48 Modified files: net/arouteserver: Makefile distinfo Log message: update to arouteserver-1.22.0 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/26 07:35:08 Modified files: devel/py-test-cov: Makefile distinfo Log message: update to py3-test-cov-5.0.0 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/26 07:40:03 Modified files: www/tomcat/v10 : Makefile distinfo www/tomcat/v10/pkg: PLIST-examples Log message: update to tomcat-10.1.20 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/26 08:19:39 Modified files: textproc/py-vobject: Makefile distinfo textproc/py-vobject/pkg: PLIST Log message: update to py3-vobject-0.9.7 (mostly a noop change, but moving to a new github organisation) CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/26 08:22:26 Modified files: devel/py-trove-classifiers: Makefile distinfo Log message: update to py3-trove-classifiers-2024.3.25 CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/26 08:22:27 Modified files: x11/icewm : Makefile distinfo Log message: update to icewm-3.4.7 CVSROOT: /cvs Module name: src Changes by: claudio@cvs.openbsd.org 2024/03/26 08:46:49 Modified files: sys/arch/sparc64/stand/ofwboot: boot.c vers.c Log message: Implement the chmod a-x bsd.upgrade trick in the sparc64 ofwboot bootloader. OK deraadt@ florian@ kn@ CVSROOT: /cvs Module name: ports Changes by: sthen@cvs.openbsd.org 2024/03/26 08:53:48 Modified files: net/termshark : Makefile Log message: mark termshark BROKEN, it's failing with "Unexpected watcher error for /.cache/termshark/pcaps/----