Build date: 1770591603 - Sun Feb  8 23:00:03 UTC 2026
Build cvs date: 1770589994 - Sun Feb  8 22:33:14 UTC 2026
Build id: 2026-02-09.1
Build tags: amd64-regress ports sysupgrade

Applied the following diff(s):
/home/anton/tmp/robsd/src-sys-em.diff
/home/anton/tmp/robsd/src-sys-uhidev-sispm.diff
/home/anton/tmp/robsd/src-sysupgrade.diff

P games/fortune/datfiles/fortunes
P lib/libcrypto/asn1/a_bitstr.c
P lib/libcrypto/ec/ecp_methods.c
P sys/arch/amd64/amd64/vmm_machdep.c
M sys/dev/usb/uhidev.c
P usr.bin/openssl/x509.c
P usr.bin/ssh/auth-krb5.c
P usr.bin/ssh/auth2-gss.c
P usr.bin/ssh/auth2.c
P usr.bin/ssh/authfile.c
P usr.bin/ssh/dh.c
P usr.bin/ssh/gss-genr.c
P usr.bin/ssh/gss-serv-krb5.c
P usr.bin/ssh/gss-serv.c
P usr.bin/ssh/kex.c
P usr.bin/ssh/kexgen.c
P usr.bin/ssh/kexgexc.c
P usr.bin/ssh/kexgexs.c
P usr.bin/ssh/monitor.c
P usr.bin/ssh/monitor_fdpass.c
P usr.bin/ssh/monitor_wrap.c
P usr.bin/ssh/packet.c
P usr.bin/ssh/packet.h
P usr.bin/ssh/readconf.c
P usr.bin/ssh/scp.c
P usr.bin/ssh/session.c
P usr.bin/ssh/sftp-client.c
P usr.bin/ssh/sftp-common.c
P usr.bin/ssh/sftp-server.c
P usr.bin/ssh/sftp.c
P usr.bin/ssh/ssh-agent.c
P usr.bin/ssh/sshd.c
P usr.bin/ssh/ssh/Makefile
P usr.bin/ssh/sshd/Makefile
P usr.bin/ssh/sshd-auth/Makefile
P usr.bin/ssh/sshd-session/Makefile
M usr.sbin/bgpd/session.c
P usr.sbin/rpki-client/aspa.c

commit pHtIUAIwKdkUrWPp
Author: kenjiro
Date: 2026/02/08 22:33:14

  openssl x509: Remove legacy call to OBJ_create()

  The OID 2.99999.3 is not required for x509 output handling and
  is not referenced elsewhere. Remove the OBJ_create() call.

  ok tb jsing

  usr.bin/openssl/x509.c

commit S8zvQKSfTr0fUulT
Author: kenjiro
Date: 2026/02/08 22:25:16

  openssl x509: send -text output to the file specified by -out

  In the x509 command, `-text` output is not written to the file specified
  by `-out`, whereas in other OpenSSL/LibreSSL subcommands it is.

  With this change, STDout is removed, and `-text` output is written
  entirely to the file specified by `-out`, making the behavior consistent
  with other subcommands.

  Fix https://github.com/libressl/portable/issues/1228

  ok tb jsing

  usr.bin/openssl/x509.c

commit bZqL4mApSla3nbos
Author: dtucker
Date: 2026/02/08 19:54:31

  Reorder headers according to KNF, and pull in a few we don't have from
  Portable.

  usr.bin/ssh/auth-krb5.c
  usr.bin/ssh/authfile.c
  usr.bin/ssh/dh.c
  usr.bin/ssh/gss-genr.c
  usr.bin/ssh/kex.c
  usr.bin/ssh/kexgen.c
  usr.bin/ssh/kexgexc.c
  usr.bin/ssh/kexgexs.c
  usr.bin/ssh/monitor.c
  usr.bin/ssh/monitor_fdpass.c
  usr.bin/ssh/monitor_wrap.c
  usr.bin/ssh/packet.c
  usr.bin/ssh/readconf.c
  usr.bin/ssh/scp.c
  usr.bin/ssh/sftp-common.c
  usr.bin/ssh/sftp-server.c
  usr.bin/ssh/sftp.c

commit N8jUKSyVfCXPw4JZ
Author: dtucker
Date: 2026/02/08 17:51:43

  Include sys/socket.h to match -portable, eliminating one diff.

  usr.bin/ssh/ssh-agent.c

commit 7hH9LJyy2i7LYdFJ
Author: dtucker
Date: 2026/02/08 17:50:49

  Reorder headers as per KNF.

  usr.bin/ssh/packet.h

commit bnjZbp6Z3eQxTTIo
Author: tb
Date: 2026/02/08 17:17:03

  a_bitstr.c: fix includes

  lib/libcrypto/asn1/a_bitstr.c

commit MeF8FwNwlBUOApOt
Author: dtucker
Date: 2026/02/08 15:28:01

  Make ssh optionally build with Kerberos 5 against the Heimdal port.
  This updates the Makefiles and repairs some bitrot in headers,
  resyncing them against Portable.  To do this, "pkg_add heimdal" then
  "make KERBEROS5=yes".  ok djm@

  usr.bin/ssh/auth2-gss.c
  usr.bin/ssh/gss-serv-krb5.c
  usr.bin/ssh/gss-serv.c
  usr.bin/ssh/session.c
  usr.bin/ssh/sshd.c
  usr.bin/ssh/ssh/Makefile
  usr.bin/ssh/sshd/Makefile
  usr.bin/ssh/sshd-auth/Makefile
  usr.bin/ssh/sshd-session/Makefile

commit EKnV0U3udYyHq3dB
Author: job
Date: 2026/02/08 12:35:07

  Enforce canonical encoding for ASPA eContent

  from draft-ietf-sidrops-aspa-profile-22:

  "An ASID value of 0 can only be encoded in the providers field as
  a single item list, i.e., an element for AS 0 MUST NOT appear
  alongside any other elements."

  with/OK tb@

  usr.sbin/rpki-client/aspa.c

commit 6CITb4pFGuYRWytA
Author: tb
Date: 2026/02/08 12:34:05

  More ec_point_cmp() turd polishing

  jsing prefers doing all computations first and comparing at the end. This
  means we do more work when we fail and no longer (ab)use err as an out label.
  Also split out one more helper.

  ok jsing

  lib/libcrypto/ec/ecp_methods.c

commit 6JQWcG29xgC8UABO
Author: tb
Date: 2026/02/08 10:27:00

  Make truncation in ASN1_BIT_STRING_set_bit() explicit

  Instead of relying on i2c_ASN1_BIT_STRING() to determine the "unused"
  bits on encoding, set them explicitly in abs->flags via a call to
  asn1_abs_set_unused_bits(). This means ASN1_STRING_FLAGS_BITS_LEFT is
  now set on a bit string, which was previously explicitly cleared.

  This also means that the encoding of a non-zero ASN1_BIT_STRING
  populated by setting the bits individually will now go through the
  if (a->flags & ASN1_STRING_FLAG_BITS_LEFT) path in i2c_ASN1_BIT_STRING().

  The most prominent usage of this function is in X.509 for the keyUsage
  extension or the CRL reason codes. There's also the NS cert type, TS
  PKIFailureInfo and general BITLIST config strings.

  The reason for the truncation logic comes from the DER for NamedBitLists
  X.690, 11.2.2 below:

  X.680, 22.7:

  When a "NamedBitList" is used in defining a bitstring type ASN.1
  encoding rules are free to add (or remove) arbitrarily any trailing 0
  bits to (or from) values that are being encoded or decoded. Application
  designers should therefore ensure that different semantics are not
  associated with such values which differ only in the number of trailing
  0 bits.

  X.690, 11.2.2

  Where ITU-T Rec. X.680 | ISO/IEC 8824-1, 22.7, applies, the bitstring
  shall have all trailing 0 bits removed before it is encoded.

  Note 1 - In the case where a size constraint has been applied, the
  abstract value delivered by a decoder to the application will be one of
  those satisfying the size constraint and differing from the transmitted
  value only in the number of trailing zero bits.

  Note 2 - If a bitstring value has no 1 bits, then an encoder shall
  encode the value with a length of 1 and an initial octet set to 0.

  ok kenjiro (on an earlier version) jsing

  lib/libcrypto/asn1/a_bitstr.c

commit oQLLiaarJoad3tBg
Author: sf
Date: 2026/02/08 10:03:13

  vmm: Expose pvclock only if tsc frequency is known

  If the tsc frequency is unknown, tsc_frequency == 0 and vmm will set
  vc_pvclock_system_tsc_mul = 0 which will cause the guest's pvclock to
  not advance until vmm updates the struct pvclock_time_info on the next
  vmentry.  tsc_frequency == 0 can happen in nested virtualization
  setups.

  Therefore, do not expose the pvclock feature bits if tsc_frequency == 0,
  both in the KVM and in the VMM hypervisor signature.

  ok mlarkin

  sys/arch/amd64/amd64/vmm_machdep.c

commit PLCwfB38whSHYmUD
Author: bentley
Date: 2026/02/08 03:45:03

  Fix typo: "never ever stick *you* hand in the toaster" -> "your"

  Verified against "Dave Barry's Greatest Hits".

  games/fortune/datfiles/fortunes

commit RxKCfAw1v6GTEqn9
Author: dtucker
Date: 2026/02/08 03:30:15

  Remove sys/poll.h since we also have poll.h.

  Also removes one line of diff vs portable.

  usr.bin/ssh/sftp-client.c

commit FqH7iO3gfqS3FoPm
Author: dtucker
Date: 2026/02/08 00:16:34

  Move setting of user, service and style earlier since -portable needs to
  use these when setting up PAM.  Removes two diffs vs portable.

  usr.bin/ssh/auth2.c


P 3RDPARTY
P MODULES
P app/xterm/MANIFEST
P app/xterm/Makefile
P app/xterm/Makefile.in
P app/xterm/NEWS
P app/xterm/Tekproc.c
P app/xterm/aclocal.m4
P app/xterm/button.c
P app/xterm/charproc.c
P app/xterm/main.c
P app/xterm/main.h
P app/xterm/misc.c
P app/xterm/print.c
P app/xterm/ptydata.c
P app/xterm/ptyx.h
P app/xterm/screen.c
P app/xterm/trace.c
P app/xterm/util.c
P app/xterm/version.h
P app/xterm/wcwidth.c
P app/xterm/wcwidth.h
P app/xterm/xterm.appdata.xml
P app/xterm/xterm.h
P app/xterm/xterm.log.html
P app/xterm/xterm.man
P app/xterm/xtermcap.c
P app/xterm/package/xterm.spec
P app/xterm/package/debian/changelog
P app/xterm/package/freebsd/Makefile
P app/xterm/package/pkgsrc/Makefile
P app/xterm/vttests/tcapquery.pl
P xserver/ChangeLog
P xserver/configure
P xserver/configure.ac
P xserver/meson.build
P xserver/glamor/Makefile.am
P xserver/glamor/Makefile.in
P xserver/glamor/glamor.c
P xserver/glamor/glamor.h
P xserver/glamor/glamor_egl.c
P xserver/glamor/glamor_priv.h
P xserver/glamor/meson.build
P xserver/hw/xfree86/glamor_egl/Makefile.am
P xserver/hw/xfree86/glamor_egl/Makefile.in
P xserver/hw/xfree86/glamor_egl/meson.build
P xserver/os/Makefile.in

commit P9BES6TgXFym2oTO
Author: matthieu
Date: 2026/02/08 10:06:31

  update

  3RDPARTY
  MODULES

commit nfXcvQ4a8N3QXfhm
Author: matthieu
Date: 2026/02/08 09:45:07

  Update to xserver 21.1.21. ok tb@

  xserver/ChangeLog
  xserver/configure
  xserver/configure.ac
  xserver/meson.build
  xserver/glamor/Makefile.am
  xserver/glamor/Makefile.in
  xserver/glamor/glamor.c
  xserver/glamor/glamor.h
  xserver/glamor/glamor_egl.c
  xserver/glamor/glamor_priv.h
  xserver/glamor/meson.build
  xserver/hw/xfree86/glamor_egl/Makefile.am
  xserver/hw/xfree86/glamor_egl/Makefile.in
  xserver/hw/xfree86/glamor_egl/meson.build
  xserver/os/Makefile.in

commit Dp8ZyooZkM6QW6f0
Author: matthieu
Date: 2026/02/08 09:42:34

  Update to xterm-406. Tested by kirill@ and tb, ok tb@

  app/xterm/MANIFEST
  app/xterm/Makefile
  app/xterm/Makefile.in
  app/xterm/NEWS
  app/xterm/Tekproc.c
  app/xterm/aclocal.m4
  app/xterm/button.c
  app/xterm/charproc.c
  app/xterm/main.c
  app/xterm/main.h
  app/xterm/misc.c
  app/xterm/print.c
  app/xterm/ptydata.c
  app/xterm/ptyx.h
  app/xterm/screen.c
  app/xterm/trace.c
  app/xterm/util.c
  app/xterm/version.h
  app/xterm/wcwidth.c
  app/xterm/wcwidth.h
  app/xterm/xterm.appdata.xml
  app/xterm/xterm.h
  app/xterm/xterm.log.html
  app/xterm/xterm.man
  app/xterm/xtermcap.c
  app/xterm/package/xterm.spec
  app/xterm/package/debian/changelog
  app/xterm/package/freebsd/Makefile
  app/xterm/package/pkgsrc/Makefile
  app/xterm/vttests/tcapquery.pl