From: "Christopher Hylarides" <hylaride@capybara.org>
Subject: UPDATE: net/znc 1.10.3 w/ security fixes
To: ports@openbsd.org
Cc: aisha@openbsd.org
Date: Mon, 05 Oct 2026 16:01:01 -0400

Update znc to 1.10.3.  Would be nice to get this in before 8.0.

Security fixes:
 - CVE-2026-82373: use-after-free when unloading modules (unprivileged users)
 - CVE-2026-82374: NULL deref in crypt module (triggerable by IRC server)
 - CVE-2020-11022, CVE-2020-11023: bundled jQuery updated to 3.5.1

New saslplainauth module added to PLIST-main.

Note: third-party modules must be rebuilt with znc-buildmod after updating.

Tested on amd64, running with my config, including with clientbuffer and backlog modules.

ok?





Index: net/znc/Makefile
===================================================================
RCS file: /cvs/ports/net/znc/Makefile,v
diff -u -p -u -p -r1.55 Makefile
--- net/znc/Makefile    9 Mar 2026 20:27:30 -0000       1.55
+++ net/znc/Makefile    5 Oct 2026 19:48:48 -0000
@@ -1,8 +1,7 @@
 COMMENT-main=  advanced IRC bouncer
 COMMENT-sasl=  SASL module for ZNC

-DISTNAME=      znc-1.9.1
-REVISION=      0
+DISTNAME=      znc-1.10.3
 CATEGORIES=    net
 SITES=         ${HOMEPAGE}releases/

Index: net/znc/distinfo
===================================================================
RCS file: /cvs/ports/net/znc/distinfo,v
diff -u -p -u -p -r1.25 distinfo
--- net/znc/distinfo    4 Jul 2024 03:32:58 -0000       1.25
+++ net/znc/distinfo    5 Oct 2026 19:48:48 -0000
@@ -1,2 +1,2 @@
-SHA256 (znc-1.9.1.tar.gz) = 6KfPgOGarVELTigur2G1a8MN+I6i4PZPrc3TA8SJTzw=
-SIZE (znc-1.9.1.tar.gz) = 2236498
+SHA256 (znc-1.10.3.tar.gz) = aPP2ZBtIDAQQEMVZbhI0BD4FyRN+2gYjOEUBdgMJX1s=
+SIZE (znc-1.10.3.tar.gz) = 2313669
Index: net/znc/pkg/PLIST-main
===================================================================
RCS file: /cvs/ports/net/znc/pkg/PLIST-main,v
diff -u -p -u -p -r1.4 PLIST-main
--- net/znc/pkg/PLIST-main      4 Jul 2024 03:32:58 -0000       1.4
+++ net/znc/pkg/PLIST-main      5 Oct 2026 19:48:48 -0000
@@ -92,6 +92,7 @@ lib/znc/
 @so lib/znc/sample.so
 @so lib/znc/samplewebapi.so
 @so lib/znc/sasl.so
+@so lib/znc/saslplainauth.so
 @so lib/znc/savebuff.so
 @so lib/znc/schat.so
 @so lib/znc/send_raw.so
@@ -191,8 +192,8 @@ share/znc/webskins/_default_/pub/Externa
 share/znc/webskins/_default_/pub/_default_.css
 share/znc/webskins/_default_/pub/favicon.ico
 share/znc/webskins/_default_/pub/global.css
-share/znc/webskins/_default_/pub/jquery-1.11.2.js
-share/znc/webskins/_default_/pub/jquery-1.11.2.min.js
+share/znc/webskins/_default_/pub/jquery-3.5.1.js
+share/znc/webskins/_default_/pub/jquery-3.5.1.min.js
 share/znc/webskins/_default_/pub/jquery-ui-sortable.1.11.4.css
 share/znc/webskins/_default_/pub/jquery-ui-sortable.1.11.4.js
 share/znc/webskins/_default_/pub/jquery-ui-sortable.1.11.4.min.css