Build date: 1755208803 - Thu Aug 14 22:00:03 UTC 2025
Build cvs date: 1755198549 - Thu Aug 14 19:09:09 UTC 2025
Build id: 2025-08-15.1
Build tags: amd64-regress ports sysupgrade

Applied the following diff(s):
/home/anton/tmp/robsd/src-sys-em.diff
/home/anton/tmp/robsd/src-sys-uhidev-sispm.diff
/home/anton/tmp/robsd/src-sysupgrade.diff

P distrib/special/libstubs/Makefile
U distrib/special/libstubs/aarch64_lse.c
P gnu/usr.bin/binutils-2.17/bfd/coff-m88k.c
P gnu/usr.bin/binutils-2.17/include/coff/internal.h
P lib/libcrypto/Makefile
P lib/libcrypto/arch/amd64/Makefile.inc
P lib/libcrypto/arch/amd64/crypto_arch.h
P lib/libcrypto/arch/amd64/crypto_cpu_caps.c
P lib/libcrypto/asn1/tasn_fre.c
P lib/libcrypto/bn/bn_mul.c
P lib/libcrypto/bn/bn_sqr.c
P lib/libcrypto/bn/arch/amd64/bn_arch.c
P lib/libcrypto/bn/arch/amd64/bn_arch.h
P lib/libcrypto/hidden/openssl/mlkem.h
U lib/libcrypto/mlkem/mlkem.c
P lib/libcrypto/mlkem/mlkem.h
P lib/libcrypto/mlkem/mlkem1024.c
P lib/libcrypto/mlkem/mlkem768.c
P lib/libcrypto/mlkem/mlkem_internal.h
U lib/libcrypto/mlkem/mlkem_key.c
P lib/libcrypto/rc4/rc4.c
P lib/libssl/ssl_rsa.c
P libexec/login_yubikey/login_yubikey.c
P regress/lib/libcrypto/mlkem/mlkem_iteration_tests.c
P regress/lib/libcrypto/mlkem/mlkem_tests.c
P regress/lib/libcrypto/mlkem/mlkem_tests_util.c
P regress/lib/libcrypto/mlkem/mlkem_tests_util.h
P regress/lib/libcrypto/mlkem/mlkem_unittest.c
P share/man/man4/uvideo.4
P share/man/man5/port-modules.5
P sys/dev/dt/dt_prov_kprobe.c
P sys/dev/dt/dtvar.h
P sys/dev/ic/psp.c
P sys/dev/pci/if_bce.c
P sys/dev/usb/ukbd.c
P sys/netinet/tcp_input.c
P sys/netinet6/icmp6.c
P sys/netinet6/nd6.c
P sys/netinet6/nd6.h
P sys/sys/buf.h
P usr.bin/ssh/auth2-hostbased.c
P usr.bin/ssh/auth2-pubkey.c
P usr.bin/ssh/auth2-pubkeyfile.c
P usr.bin/tmux/file.c
P usr.bin/tmux/format.c
P usr.bin/tmux/key-bindings.c
P usr.bin/tmux/options-table.c
P usr.bin/tmux/popup.c
P usr.bin/tmux/screen-redraw.c
P usr.bin/tmux/server-client.c
P usr.bin/tmux/server.c
P usr.bin/tmux/tmux.1
P usr.bin/tmux/tmux.h
M usr.sbin/bgpd/session.c
P usr.sbin/rpki-client/extern.h
P usr.sbin/rpki-client/main.c
P usr.sbin/rpki-client/repo.c
P usr.sbin/vmd/proc.c
P usr.sbin/vmd/proc.h

commit eTnL1Lpkefe7bs6V
Author: tb
Date: 2025/08/14 19:09:09

  login_yubikey: do not syslog OTP secrets

  Until someone earns the right to revert uskbd.c r1.91 by solving the
  yubikey configuration problem via a kernel driver, this isn't needed,
  but it is still wrong. So let's fix it now for this brighter future.

  From Lloyd (ng2d68 () proton.me)

  ok florian

  libexec/login_yubikey/login_yubikey.c

commit MII2i4o8yK4BbapW
Author: tb
Date: 2025/08/14 19:02:17

  Tweak comment in asn1_item_free: KNF, missing comma, wont -> won't.

  lib/libcrypto/asn1/tasn_fre.c

commit AcnMN9i2FdUce0CT
Author: beck
Date: 2025/08/14 16:13:52

  revert previous

  sys/sys/buf.h

commit PyYBMfGI4hkrQKIE
Author: beck
Date: 2025/08/14 16:04:01

  unbreak tree after commiting from wrong place

  lib/libcrypto/mlkem/mlkem.c

commit EZ0WmP7HPUjguAki
Author: tb
Date: 2025/08/14 15:55:54

  revert accidental disabling of ssl_security_cert() in -r1.52

  lib/libssl/ssl_rsa.c

commit bNKXY71nsxodOIgS
Author: beck
Date: 2025/08/14 15:48:48

  Add a reasonable ML-KEM API for public use.

  Adapt the tests to use this API.

  This does not yet make the symbols public in Symbols.list
  which will happen shortly with a bump.

  This includes some partial rototilling of the non-public
  interfaces which will be shortly continued when the internal
  code is deduplicated to not have multiple copies for ML-KEM
  768 and ML-KEM 1024 (which is just an artifact of unravelling
  the boring C++ code).

  ok jsing@, tb@

  lib/libcrypto/Makefile
  lib/libcrypto/hidden/openssl/mlkem.h
  lib/libcrypto/mlkem/mlkem.c
  lib/libcrypto/mlkem/mlkem.h
  lib/libcrypto/mlkem/mlkem1024.c
  lib/libcrypto/mlkem/mlkem768.c
  lib/libcrypto/mlkem/mlkem_internal.h
  lib/libcrypto/mlkem/mlkem_key.c
  lib/libssl/ssl_rsa.c
  regress/lib/libcrypto/mlkem/mlkem_iteration_tests.c
  regress/lib/libcrypto/mlkem/mlkem_tests.c
  regress/lib/libcrypto/mlkem/mlkem_tests_util.c
  regress/lib/libcrypto/mlkem/mlkem_tests_util.h
  regress/lib/libcrypto/mlkem/mlkem_unittest.c
  sys/sys/buf.h

commit LHRaLZ61RZVFSV6y
Author: jsing
Date: 2025/08/14 15:29:17

  Use faster versions of bignum_{mul,sqr}_{4_8,6_12,8_16}() if possible.

  If ADX instructions are available, use the non-_alt version of s2n-bignum's
  bignum_{mul,sqr}_{4_8,6_12,8_16}(), which are faster than the _alt
  non-ADX versions.

  ok tb@

  lib/libcrypto/bn/arch/amd64/bn_arch.c

commit hdoXUh8r6Wix5B91
Author: jsing
Date: 2025/08/14 15:22:54

  Provide amd64 specific versions of bn_mul_comba6() and bn_sqr_comba6().

  These use s2n-bignum's bignum_mul_6_12_alt() and bignum_sqr_6_12_alt()
  functions.

  ok tb@

  lib/libcrypto/bn/arch/amd64/bn_arch.c
  lib/libcrypto/bn/arch/amd64/bn_arch.h

commit DBv1IFDSgzlueCTV
Author: jsing
Date: 2025/08/14 15:17:19

  Provide bn_mod_add_words() and bn_mod_sub_words() on amd64.

  These use s2n-bignum's bignum_modadd() and bignum_modsub() routines.

  ok tb@

  lib/libcrypto/bn/arch/amd64/bn_arch.c
  lib/libcrypto/bn/arch/amd64/bn_arch.h

commit Sc4vhhfKd1c93BLR
Author: jsing
Date: 2025/08/14 15:15:04

  Add special handling for multiplication and squaring of BNs with six words.

  In these cases make use of bn_mul_comba6() or bn_sqr_comba6(), which are
  faster than the normal path.

  ok tb@

  lib/libcrypto/bn/bn_mul.c
  lib/libcrypto/bn/bn_sqr.c

commit ZOutN4pVhkjlk8hd
Author: jsing
Date: 2025/08/14 15:12:53

  Hook additional s2n-bignum routines to the amd64 build.

  lib/libcrypto/arch/amd64/Makefile.inc

commit 1ZhqVXuRgS5XCe4D
Author: claudio
Date: 2025/08/14 15:12:00

  Add a SIGINFO handler which prints the current repository / entityq state.

  Also use the same repo_printinfo() code in the error cases where
  rpki-client aborts because work was not finished.
  OK tb@

  usr.sbin/rpki-client/extern.h
  usr.sbin/rpki-client/main.c
  usr.sbin/rpki-client/repo.c

commit ksrayfWVUKKNkSYk
Author: matthieu
Date: 2025/08/14 15:11:30

  Document the wayland/wlroots module. ok landry@

  share/man/man5/port-modules.5

commit 637PubBjSx44OW8R
Author: jsing
Date: 2025/08/14 15:11:01

  Add CPU feature detection for ADX on amd64.

  Add detection of Multi-Precision Add-Carry Instruction Extensions on amd64.
  s2n-bignum provides a number of fast multiplication routines that can
  leverage these instructions.

  ok tb@

  lib/libcrypto/arch/amd64/crypto_arch.h
  lib/libcrypto/arch/amd64/crypto_cpu_caps.c

commit ICOsT1RtJv9qi2Wb
Author: jsing
Date: 2025/08/14 14:55:43

  Clean up parts of rc4.

  Provide a static inline rc4_step() function that replaces the near
  identical RC4_STEP and RC4_LOOP macros. Simplify the processing loop and
  use for loops with small constants, which the compiler can unroll if it
  wants to do so.

  Inline the SK_LOOP macro in rc4_set_key_internal(), also using a small loop
  that the compiler will most likely unroll.

  ok tb@

  lib/libcrypto/rc4/rc4.c

commit AKIkAVhKtkoHEQ4Q
Author: deraadt
Date: 2025/08/14 14:39:44

  Most Yubikey ship with OTP support enabled out of the box (and generate
  accidental output like cccccblddbkhelgbdjuughbjdcvrddggdcjvricrriuk).
  Yubikey re-configuration requires crazy buggy and fragile tools using crazy
  usb feature support, and therefore OTP disabling is very annoying.  We
  make a policy decision to not attach these as keyboards anymore, because a
  majority of users just want the FIDO functionality.  If you want to use OTP,
  buy a different device from a different vendor or convince Yubikey to
  significantly improve their tooling.
  idea from kettenis

  sys/dev/usb/ukbd.c

commit eqwhOPpHeL8cwj4H
Author: jsg
Date: 2025/08/14 13:58:46

  remove unused struct privsep_fd and PROC_MAX_INSTANCES
  ok dv@

  usr.sbin/vmd/proc.h

commit Y6jfDrJlraFrrvGx
Author: kirill
Date: 2025/08/14 13:14:44

  uvideo.4: Elgato Facecam Pro works (supports 60fps at 4096x2160 H264).

  share/man/man4/uvideo.4

commit 7BBxwNMEQoO2NN8A
Author: mpi
Date: 2025/08/14 13:04:48

  Cleanup ELF entry points patching in preparation for supporting more archs.

  Reviewed & tested by Christian Ludwig.

  sys/dev/dt/dt_prov_kprobe.c
  sys/dev/dt/dtvar.h

commit Lx3qnlOR9iG69XE5
Author: miod
Date: 2025/08/14 12:09:54

  Recognize a few more m88k COFF relocations for interoperability purposes.

  gnu/usr.bin/binutils-2.17/bfd/coff-m88k.c
  gnu/usr.bin/binutils-2.17/include/coff/internal.h

commit mGLFHrkpUG5yQsHK
Author: hshoexer
Date: 2025/08/14 11:18:11

  Set sc_tmr_map to NULL to avoid use after free.  Similar to
  psp_shutdown().

  ok bluhm@

  sys/dev/ic/psp.c

commit 58wlnIBo03TEwvpq
Author: mpi
Date: 2025/08/14 11:13:57

  Call bce_reset() when resuming from suspend/hibernate.

  From Petteri Reunamo on bugs@ via Josef Moore on tech@.

  sys/dev/pci/if_bce.c

commit scgyjmek99ndpGOW
Author: mpi
Date: 2025/08/14 11:08:27

  Use bus_dmamem_alloc_range(9) instead of uvm_km_kmemalloc_pla().

  From dhill@

  sys/dev/pci/if_bce.c

commit QbSfHLy4KlsUrejH
Author: jsg
Date: 2025/08/14 10:50:08

  remove prototypes for removed functions

  usr.sbin/vmd/proc.c
  usr.sbin/vmd/proc.h

commit ZtzrSYg52uuRUpAe
Author: dtucker
Date: 2025/08/14 10:03:44

  Cast serial no for %lld to prevent compiler warnings on some platforms.

  usr.bin/ssh/auth2-pubkeyfile.c

commit gUawJgBPENJM0RAz
Author: dtucker
Date: 2025/08/14 09:44:39

  Cast serial no for %lld to prevent compiler warnings on some platforms.

  usr.bin/ssh/auth2-pubkey.c

commit 6Ww4x7wWmrYzWJj6
Author: kettenis
Date: 2025/08/14 09:31:21

  Prepare ramdisks for outline atomics by providing a fake
  __aarch64_have_lse_atomics variable that avoids pulling in the CPU feature
  detection code from libcompiler-rt that needs elf_aux_info(3).

  ok deraadt@

  distrib/special/libstubs/Makefile
  distrib/special/libstubs/aarch64_lse.c

commit iGHejTGcbwAUs2ej
Author: dtucker
Date: 2025/08/14 09:26:53

  Cast serial no for %lld to prevent compiler warnings on some platforms.

  usr.bin/ssh/auth2-hostbased.c

commit ciMaWvdSIEKgg55V
Author: mvs
Date: 2025/08/14 08:50:25

  Unlock ICMPV6CTL_ND6_MAXNUDHINT case of icmp6_sysctl().

  Load value of `nd6_maxnudhint' to local variable and pass it to
  nd6_nud_hint(). It called in loop in tcp_flush_queue(). Also it
  called multiple times in tcp_input_solocked().

  ok bluhm

  sys/netinet/tcp_input.c
  sys/netinet6/icmp6.c
  sys/netinet6/nd6.c
  sys/netinet6/nd6.h

commit dmw9FIR0mJuvEKS8
Author: nicm
Date: 2025/08/14 07:15:40

  Add a nicer default second and third status line, from Michael Grant in
  GitHub 4490.

  usr.bin/tmux/format.c
  usr.bin/tmux/key-bindings.c
  usr.bin/tmux/options-table.c
  usr.bin/tmux/server-client.c
  usr.bin/tmux/tmux.1

commit YWu2qp4drGG7lfsl
Author: nicm
Date: 2025/08/14 06:49:53

  Add some NULL checks, GitHub issue 4586.

  usr.bin/tmux/popup.c
  usr.bin/tmux/server.c

commit p8dlnzMZzRgjGsrS
Author: nicm
Date: 2025/08/14 06:44:50

  Add pane-border-lines value to use spaces for pane borders, from lukas
  dot 23022005 at gmail dot com in GitHub issue 4587.

  usr.bin/tmux/options-table.c
  usr.bin/tmux/screen-redraw.c
  usr.bin/tmux/tmux.1
  usr.bin/tmux/tmux.h

commit L5qAikb723HiCBmi
Author: nicm
Date: 2025/08/14 06:37:29

  Do not leak opened file, from lg65438805 at gmail dot com in GitHub
  issue 4577.

  usr.bin/tmux/file.c