Build date: 1764025203 - Mon Nov 24 23:00:03 UTC 2025 Build cvs date: 1764018734 - Mon Nov 24 21:12:14 UTC 2025 Build id: 2025-11-25.1 Build tags: amd64-regress ports sysupgrade Applied the following diff(s): /home/anton/tmp/robsd/src-sys-em.diff /home/anton/tmp/robsd/src-sys-uhidev-sispm.diff /home/anton/tmp/robsd/src-sysupgrade.diff P include/login_cap.h P lib/libc/gen/login_cap.3 P lib/libutil/login_fbtab.c P sbin/pfctl/pfctl_parser.c P share/man/man4/gre.4 P share/man/man4/scsi.4 P share/man/man4/veb.4 P share/man/man4/vlan.4 P sys/arch/amd64/amd64/locore0.S P sys/arch/amd64/amd64/machdep.c P sys/arch/m88k/include/mmu.h P sys/dev/ic/qwx.c P sys/dev/pci/pcidevs P sys/dev/pci/pcidevs.h P sys/dev/pci/pcidevs_data.h P sys/dev/pci/drm/amd/amdgpu/amdgpu_devlist.h P sys/dev/pv/if_vio.c M sys/dev/usb/uhidev.c P sys/kern/kern_synch.c M usr.sbin/bgpd/session.c P usr.sbin/vmd/virtio.c commit vnYLeRotGKK0Vwjq Author: dv Date: 2025/11/24 21:12:14 Fix vmd(8) segfault during vmmci timeout firing. Need to pass a pointer to the vmmci device. The timeout handler calls vm_shutdown() so this SIGSEGV exit wasn't being noticed until I attached to the vm process with gdb. usr.sbin/vmd/virtio.c commit yAcILTq5zOFZbef3 Author: miod Date: 2025/11/24 20:57:53 Remove macros which have outlived their usefulness. sys/arch/m88k/include/mmu.h commit bLTAl29zy2jwiBZv Author: sf Date: 2025/11/24 17:20:40 relocate ghcb in machdep.c ghcb_vaddr is not used in locore0.S, no need to do this in assembler. From Sebastian Sturm ok hshoexer sys/arch/amd64/amd64/locore0.S sys/arch/amd64/amd64/machdep.c commit YCoOOSQ2zYTP1FtN Author: sashan Date: 2025/11/24 16:57:19 ifa_load() in pfctl_parser.c may attempt to read beyond the buffer. The current ifa_load() is not paranoid enough when it deals with information which comes from kernel. The function just ignores sa_len member in socket address returned getifaddrs(). The issue has been reported by anton@. The idea for fix here comes fromy claudio@. OK @claudio, @deraadt sbin/pfctl/pfctl_parser.c commit 9UaDCBrOW4oUXAtI Author: bluhm Date: 2025/11/24 14:16:17 Limit number of queues to IF_MAX_VECTORS also in vio(4). OK sf@ sys/dev/pv/if_vio.c commit 0TlaV5H7VwjhAkW9 Author: jca Date: 2025/11/24 12:54:53 Assert that P_SINTR is unset on sleep_setup() entry __set_current_state() from sys/dev/pci/drm/drm_linux.c used to roll parts of sleep_finish() but forgot to clear P_SINTR. This later lead to spurious tsleep(0, INFSLP) early returns and ultimately crashes. This affected me for a few months without being able to get a proper crash trace, so fail early to prevent such hidden errors in the future. ok claudio@ jsg@ sys/kern/kern_synch.c commit lTKjUsDEbK8oGnhE Author: jsg Date: 2025/11/24 12:48:15 regen sys/dev/pci/pcidevs.h sys/dev/pci/pcidevs_data.h commit 8H1HsJLcYitOBeJH Author: jsg Date: 2025/11/24 12:47:43 add AMD "Krackan Point 2" APU device id 1902 rev c6 is Radeon 820M found in AMD Software: Adrenalin Edition 25.11.1 sys/dev/pci/pcidevs sys/dev/pci/drm/amd/amdgpu/amdgpu_devlist.h commit 6mtbldUlKE55prIX Author: jca Date: 2025/11/24 12:44:25 In login_fbtab(3) do first chown(2) then chmod(2) Else previous owner can change permissions between chmod(2) and chown(2). Suggested by guenther@, ok millert@ lib/libutil/login_fbtab.c commit WvOZZQbDeSUSPUs8 Author: jca Date: 2025/11/24 12:42:10 In login_fbtab(3) use getline(3) instead of quirky fgetln(3) ok millert@ lib/libutil/login_fbtab.c commit CP2NCJagSnKAyqxj Author: jca Date: 2025/11/24 12:37:15 Stop doing XDG setup in setusercontext(LOGIN_SETALL) As suggested by kettenis@ and deraadt, including LOGIN_SETXDGENV in LOGIN_SETALL, the latter being used in a bunch of place, appears to be a mistake. The mkdir(2) and fchown(2) / fchmod(2) calls made by setusercontext(LOGIN_SETXDGENV) result in pledge(2) violations in at least calendar(1) and inetd(8), as reported by jmc@ and lucas@ respectively. Also it brings little to no advantage since most of the login managers analyzed so far require an explicit change to export the XDG_RUNTIME_DIR variable. So move LOGIN_SETXDGENV out of LOGIN_SETALL. If you started relying on this in one of your port, please adapt the code to explicitely pass LOGIN_SETXDGENV. xenodm(1) will be fixed shortly, patches for login(1) and sshd(8) are waiting for reviews. ok deraadt@ robert@ include/login_cap.h lib/libc/gen/login_cap.3 commit wAi2bQxtS2C257n0 Author: stsp Date: 2025/11/24 11:01:21 count dropped frames as input errors in qwx_dp_rx_wbm_err() sys/dev/ic/qwx.c commit g2aZYfJHxOB5NK0c Author: stsp Date: 2025/11/24 11:00:04 Improve chances of qwx receiving the initial WPA handshake message. Run some qwx firmware commands earlier during the association sequence. We need to wait for these commands to complete, and timing is much less critical before we have sent our association request. Once we have sent this request, the AP may try to send the first WPA handshake message immediately after sending the association response frame. And we could miss the first WPA message while still setting up firmware state for association. In the case I observed, losing this race would result in a loop of failed attempts to join the network. ok phessler@ sys/dev/ic/qwx.c commit qsGAC689OR7GeFSc Author: jsg Date: 2025/11/24 09:52:11 MACH -> Mach share/man/man4/scsi.4 commit FvtWVXxko1QIhgWE Author: dlg Date: 2025/11/24 03:43:14 you can attach multiple vports to a single veb. share/man/man4/veb.4 commit 8CcUR1xqxtOoSpYN Author: dlg Date: 2025/11/24 03:02:38 fix the STANDARDS section. this was missing the .Sh STANDARDS header between SEE ALSO and the ieee refs. we generally put .Pp between references too. share/man/man4/vlan.4 commit QQnmuHXN5r7hfeEk Author: dlg Date: 2025/11/24 03:01:12 add a STANDARDS section share/man/man4/veb.4 commit KeD9sr0XNkQzG86u Author: dlg Date: 2025/11/24 02:56:31 try to catch veb(4) up with reality. veb is now VLAN and PVLAN aware. share/man/man4/veb.4 commit 0OOIxKR59N07kwpK Author: jsg Date: 2025/11/24 02:32:54 vebe1 -> veb1; ok dlg@ share/man/man4/gre.4 P 3RDPARTY P app/xenodm/xenodm/session.c P distrib/sets/lists/xbase/mi U lib/fontconfig/conf.d/35-lang-normalize.conf P lib/fontconfig/conf.d/Makefile P lib/libpng/.appveyor.yml P lib/libpng/.editorconfig-checker.json P lib/libpng/.gitignore P lib/libpng/ANNOUNCE P lib/libpng/AUTHORS P lib/libpng/CHANGES P lib/libpng/CMakeLists.txt P lib/libpng/README P lib/libpng/configure P lib/libpng/configure.ac P lib/libpng/libpng-manual.txt P lib/libpng/libpng.3 P lib/libpng/libpngpf.3 P lib/libpng/png.5 P lib/libpng/png.c P lib/libpng/png.h P lib/libpng/pngconf.h P lib/libpng/pngdebug.h P lib/libpng/pngerror.c P lib/libpng/pngpriv.h P lib/libpng/pngread.c P lib/libpng/pngrtran.c P lib/libpng/pngstruct.h P lib/libpng/pngtest.c P lib/libpng/pngwrite.c U lib/libpng/.github/workflows/verify-linux.yml U lib/libpng/.github/workflows/verify-macos.yml U lib/libpng/.github/workflows/verify-windows.yml P lib/libpng/ci/ci_verify_configure.sh P lib/libpng/contrib/libtests/pngimage.c P lib/libpng/contrib/libtests/pngstest.c P lib/libpng/contrib/libtests/pngunknown.c P lib/libpng/contrib/libtests/pngvalid.c cvs server: lib/libpng/contrib/riscv-rvv/README is no longer in the repository cvs server: lib/libpng/contrib/riscv-rvv/linux.c is no longer in the repository P lib/libpng/riscv/riscv_init.c P lib/libpng/scripts/libpng-config-head.in P lib/libpng/scripts/libpng.pc.in P lib/libpng/scripts/pnglibconf.h.prebuilt commit ulgGKKu2yAtt5bi5 Author: matthieu Date: 2025/11/24 21:46:01 update 3RDPARTY commit ECjdU9QdDMrwhUjo Author: matthieu Date: 2025/11/24 21:24:23 Update to png 1.6.51. fixes CVE-2025-64505, CVE-2025-64506, CVE-2025-64720 and CVE-2025-65018. ok jca@ lib/libpng/.appveyor.yml lib/libpng/.editorconfig-checker.json lib/libpng/.gitignore lib/libpng/ANNOUNCE lib/libpng/AUTHORS lib/libpng/CHANGES lib/libpng/CMakeLists.txt lib/libpng/README lib/libpng/configure lib/libpng/configure.ac lib/libpng/libpng-manual.txt lib/libpng/libpng.3 lib/libpng/libpngpf.3 lib/libpng/png.5 lib/libpng/png.c lib/libpng/png.h lib/libpng/pngconf.h lib/libpng/pngdebug.h lib/libpng/pngerror.c lib/libpng/pngpriv.h lib/libpng/pngread.c lib/libpng/pngrtran.c lib/libpng/pngstruct.h lib/libpng/pngtest.c lib/libpng/pngwrite.c lib/libpng/.github/workflows/verify-linux.yml lib/libpng/.github/workflows/verify-macos.yml lib/libpng/.github/workflows/verify-windows.yml lib/libpng/ci/ci_verify_configure.sh lib/libpng/contrib/libtests/pngimage.c lib/libpng/contrib/libtests/pngstest.c lib/libpng/contrib/libtests/pngunknown.c lib/libpng/contrib/libtests/pngvalid.c lib/libpng/riscv/riscv_init.c lib/libpng/scripts/libpng-config-head.in lib/libpng/scripts/libpng.pc.in lib/libpng/scripts/pnglibconf.h.prebuilt commit qAkFdkVqigx3egoU Author: matthieu Date: 2025/11/24 21:15:29 sync distrib/sets/lists/xbase/mi commit VaIjkosAqqS5vMfn Author: matthieu Date: 2025/11/24 21:14:56 Install new configuration files, missed in 2.17.1 update. Noticed by Tim van der Molden. While here also remove generated README during make clean. lib/fontconfig/conf.d/35-lang-normalize.conf lib/fontconfig/conf.d/Makefile commit G6BQHWt3zYHZiQl2 Author: jca Date: 2025/11/24 12:40:43 Explicitely pass LOGIN_SETXDGENV LOGIN_SETXDGENV is no longer included in LOGIN_SETALL app/xenodm/xenodm/session.c