Build date: 1775599204 - Tue Apr 7 22:00:04 UTC 2026 Build cvs date: 1775594331 - Tue Apr 7 20:38:51 UTC 2026 Build id: 2026-04-08.1 Build tags: amd64-regress ports sysupgrade Applied the following diff(s): /home/anton/tmp/robsd/src-sys-em.diff /home/anton/tmp/robsd/src-sys-uhidev-sispm.diff /home/anton/tmp/robsd/src-sysupgrade.diff P distrib/sets/lists/man/mi P gnu/usr.bin/perl/Makefile.bsd-wrapper P lib/libcrypto/asn1/x_crl.c P lib/libcrypto/ocsp/ocsp_vfy.c P lib/libcrypto/rsa/rsa_ameth.c P lib/libcrypto/rsa/rsa_pmeth.c P lib/libcrypto/x509/x509_vfy.c P share/man/man4/man4.riscv64/Makefile U share/man/man4/man4.riscv64/smtpmic.4 P sys/arch/riscv64/dev/smtclock.c P sys/arch/riscv64/dev/smtcomphy.c P sys/dev/fdt/dwpcie.c P sys/dev/pci/pcidevs P sys/dev/pci/pcidevs.h P sys/dev/pci/pcidevs_data.h P sys/dev/pci/pciide.c P sys/dev/pci/pcireg.h P sys/dev/pci/drm/drm_linux.c P sys/dev/pci/drm/amd/amdgpu/amdgpu_amdkfd.c P sys/dev/pci/drm/amd/amdgpu/amdgpu_ids.c P sys/dev/pci/drm/amd/amdgpu/amdgpu_ids.h P sys/dev/pci/drm/amd/amdgpu/amdgpu_vm.c P sys/dev/pci/drm/amd/amdgpu/mes_v12_0.c P sys/dev/pci/drm/amd/display/amdgpu_dm/amdgpu_dm.c P sys/dev/pci/drm/amd/display/amdgpu_dm/amdgpu_dm.h P sys/dev/pci/drm/amd/display/amdgpu_dm/amdgpu_dm_mst_types.c P sys/dev/pci/drm/amd/pm/swsmu/amdgpu_smu.c P sys/dev/pci/drm/amd/pm/swsmu/smu11/smu_v11_0.c P sys/dev/pci/drm/amd/pm/swsmu/smu13/smu_v13_0_6_ppt.c P sys/dev/pci/drm/i915/i915_wait_util.h P sys/dev/pci/drm/i915/display/intel_display.c P sys/dev/pci/drm/i915/display/intel_dp_tunnel.c P sys/dev/pci/drm/i915/display/intel_dp_tunnel.h P sys/dev/pci/drm/i915/display/intel_gmbus.c P sys/dev/pci/drm/i915/display/intel_plane.c P sys/dev/pci/drm/include/linux/idr.h P sys/dev/pci/drm/ttm/tests/ttm_bo_test.c M sys/dev/usb/uhidev.c P usr.bin/ssh/sshbuf.h M usr.sbin/bgpd/session.c P usr.sbin/rpki-client/ccr.c P usr.sbin/rpki-client/cert.c P usr.sbin/rpki-client/constraints.c P usr.sbin/rpki-client/extern.h P usr.sbin/rpki-client/rpki-asn1.h P usr.sbin/rpki-client/x509.c P usr.sbin/vmd/i8253.c commit yTaEGUY4FjJR4Feq Author: kettenis Date: 2026/04/07 20:38:51 Add SpacemiT K1 support. sys/dev/fdt/dwpcie.c commit uEtH6bjzfo5iKGqt Author: jca Date: 2026/04/07 16:41:33 Respect DEBUG so we can build perl with debug symbols Adding -DEBUGGING in CONFIGURE_ARGS activates debug code, -DEBUGGING=-g passes -g in CFLAGS (only -g is supported), and -DEBUGGING=both does... both. This is a bit confusing. IMO DEBUG=-g should only add -g and disable executable stripping, but not change the code that is built. So use -Doptimize which lets us pass arbitrary compiler flags (eg -g3), just like DEBUG does in our system Makefiles. Hints and ok afresh1@ gnu/usr.bin/perl/Makefile.bsd-wrapper commit PbbS2GMpaF2q4myq Author: job Date: 2026/04/07 14:38:04 Sync - CCR uses an IANA assigned codepoint nowadays OK tb@ usr.sbin/rpki-client/ccr.c usr.sbin/rpki-client/x509.c commit Yw3C3IRCxcznluZ5 Author: tb Date: 2026/04/07 13:16:41 Rename labellen to label_len Requested by jsing, ok beck lib/libcrypto/rsa/rsa_ameth.c lib/libcrypto/rsa/rsa_pmeth.c commit 52EzlRsMYjIqjGn9 Author: tb Date: 2026/04/07 13:15:29 Fix NULL deref for malformed OAEP parameters in CMS decryption This converts rsa_cms_decrypt() to use X509_ALGOR_get0() and fixes a NULL deref when a parameter is (invalidly) omitted similar to the fix in ec/ec_ameth.c r1.66 from a couple years back. There is currently an XXX annotating a hairy leak due to trying to be smart and stealing the parameters from the oaep object. Instead, just make a copy of the label string and free it in the exit path. The diff adds an error for labellen == 0 since that is an invalid encoding of pSpecifiedEmpty (see RFC 8017) -- per the DER the default must be omitted. This way we avoid a malloc(0) implementation-defined behavior. This minor issue was assigned CVE-2026-28390 by OpenSSL and was reported by too many to list. The fix is my own. It is similar to OpenSSL's fix only because I rewiewed theirs and suggested an improvement or two. This is the last of the "security fixes" in today's OpenSSL release that "affect" LibreSSL. All the other bugs were already fixed a few years back or we didn't have the code/bugs in the first place. ok beck jsing lib/libcrypto/rsa/rsa_ameth.c lib/libcrypto/rsa/rsa_pmeth.c commit sIjBgxPMVxD0Jswl Author: tb Date: 2026/04/07 13:02:50 Refactor and fix ocsp_find_signer_sk() Instead of reaching deep inside the OCSP_BASICRESP and ignoring its semantics and then try to untangle things in ocsp_find_signer_sk(), pass the OCSP_BASICRESP and use OCSP_resp_get0_id() which has the logic built in. Avoids a crash if you call OCSP_basic_verify() after OCSP_BASICRESP_new() without OCSP_basic_sign(). This cannot happen on a deserialized OCSP object. Prompted by a report by Kamil Frankowicz, Jan Kaminski, Bartosz Michalowski. ok jsing lib/libcrypto/ocsp/ocsp_vfy.c commit ESluABbhziunvgWI Author: tb Date: 2026/04/07 12:52:19 Add a few to-do items to the crl_cb() Prompted by the "fix" fighting symptoms of misdesign in Delta CRL processing rather than addressing the root cause. Probably the best fix is to remove support for Indirect CRLs and Delta CRLs outright. ok jsing lib/libcrypto/asn1/x_crl.c commit gLEBTOnHGZidGzuv Author: tb Date: 2026/04/07 12:48:37 Stop Delta CRL processing if a CRL number is misssing A malformed Delta CRL could cause a crash. Funnily enough the deserializer recognizes this and marks such a CRL as invalid, but nothing ever checks the EXFLAG_INVALID for CRLs. For certificates this would usually result in verification failure due to x509v3_cache_extensions() failing. This is only reachable if the X509_V_FLAG_USE_DELTAS is used, which only a handful of ports do, plus openssl(1) does if you use the undocumented -use_deltas flag. Reported by Igor Morgenstern to OpenSSL who then sat on this since Jan 8 and assigned CVE-2026-28388. ok jsing lib/libcrypto/x509/x509_vfy.c commit Fb0fQ0WjMKBm8B11 Author: job Date: 2026/04/07 11:52:21 sync comment usr.sbin/rpki-client/rpki-asn1.h commit GC2NAkqs1KKR3ooJ Author: tb Date: 2026/04/07 10:59:19 rpki-client: clean up ipAddrBlocks and autonomousSysIds naming mess OpenSSL called these NID_sbgp_ipAddrBlock and NID_sbgp_autonomousSysNum from which rpki-client derived its own fantasy names. Use the official names in RFC 3779 instead: id-pe-ipAddrBlocks and id-pe-autonomousSysIds. ipaddrblk is ugly and can be expanded in the API. Use addrs for the variable to avoid overlong lines. There's precedent in the constraints code. The doubled s in assysnum makes no sense and since autonomoussysids is long and unreadable, I used asids in the API. ok claudio usr.sbin/rpki-client/cert.c usr.sbin/rpki-client/constraints.c usr.sbin/rpki-client/extern.h usr.sbin/rpki-client/x509.c commit wz673OEcddWOAd1W Author: jsg Date: 2026/04/07 10:04:54 drm/amd/pm: fix amdgpu_irq enabled counter unbalanced on smu v11.0 From Yang Wang 5eeba3a7bf496d5c24379305d47933c6061e462a in linux-6.18.y/6.18.21 e12603bf2c3d571476a21debfeab80bb70d8c0cc in mainline linux sys/dev/pci/drm/amd/pm/swsmu/amdgpu_smu.c sys/dev/pci/drm/amd/pm/swsmu/smu11/smu_v11_0.c commit KqHLfobbarEMWrbn Author: jsg Date: 2026/04/07 10:02:36 drm/amd/pm: Return -EOPNOTSUPP for unsupported OD_MCLK on smu_v13_0_6 From Asad Kamal 54c143028eb45baec385e8731eb42e22b9c25333 in linux-6.18.y/6.18.21 2f0e491faee43181b6a86e90f34016b256042fe1 in mainline linux sys/dev/pci/drm/amd/pm/swsmu/smu13/smu_v13_0_6_ppt.c commit LbhPX0zzdS2JXhfi Author: jsg Date: 2026/04/07 10:00:26 drm/i915: Unlink NV12 planes earlier From Ville Syrjala 70e2eb91cb6310a3508439f6f2539dfffa0abf77 in linux-6.18.y/6.18.21 bfa71b7a9dc6b5b8af157686e03308291141d00c in mainline linux sys/dev/pci/drm/i915/display/intel_plane.c commit g9BFL5XnTMVPuEHn Author: jsg Date: 2026/04/07 09:57:46 drm/i915: Order OP vs. timeout correctly in __wait_for() From Ville Syrjala 859b14e0be9e7b0f26630510d337413c7747be51 in linux-6.18.y/6.18.21 6ad2a661ff0d3d94884947d2a593311ba46d34c2 in mainline linux sys/dev/pci/drm/i915/i915_wait_util.h commit HlZjfL7LEQ0w3WT8 Author: jsg Date: 2026/04/07 09:54:43 drm/i915/dp_tunnel: Fix error handling when clearing stream BW in atomic state From Imre Deak 8581466b827fdf0300a3e2e93900ddefd8240053 in linux-6.18.y/6.18.21 77fcf58df15edcf3f5b5421f24814fb72796def9 in mainline linux sys/dev/pci/drm/i915/display/intel_display.c sys/dev/pci/drm/i915/display/intel_dp_tunnel.c sys/dev/pci/drm/i915/display/intel_dp_tunnel.h commit UoAofUloMNcDByWU Author: jsg Date: 2026/04/07 09:52:19 drm/amd/display: Fix drm_edid leak in amdgpu_dm From Alex Hung eb95595194e4755b62360aa821f40a79b0953105 in linux-6.18.y/6.18.21 37c2caa167b0b8aca4f74c32404c5288b876a2a3 in mainline linux sys/dev/pci/drm/amd/display/amdgpu_dm/amdgpu_dm.c commit CTwfto13uhkRBqlp Author: jsg Date: 2026/04/07 09:50:17 drm/amdgpu: prevent immediate PASID reuse case From Eric Huang 51ccaf0e30c303149244c34820def83d74c86288 in linux-6.18.y/6.18.21 14b81abe7bdc25f8097906fc2f91276ffedb2d26 in mainline linux This requires a further change to avoid a sleeping alloc while holding a mutex. Not yet in 6.18.y drm/amdgpu: fix the idr allocation flags From Prike Liang 62f553d60a801384336f5867967c26ddf3b17038 in mainline linux sys/dev/pci/drm/amd/amdgpu/amdgpu_ids.c sys/dev/pci/drm/amd/amdgpu/amdgpu_ids.h sys/dev/pci/drm/amd/amdgpu/amdgpu_vm.c commit SYdQrw0k8lIScmyZ Author: jsg Date: 2026/04/07 09:38:36 drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib From Srinivasan Shanmugam 39820864eacd886f1a6f817414fb8f9ea3e9a2b4 in linux-6.18.y/6.18.21 7150850146ebfa4ca998f653f264b8df6f7f85be in mainline linux sys/dev/pci/drm/amd/amdgpu/amdgpu_amdkfd.c commit R3KGNICLbiQRbPTp Author: jsg Date: 2026/04/07 09:36:22 drm/amd/display: Do not skip unrelated mode changes in DSC validation From Yussuf Khalil 8a5edc97fd9c6415ff2eff872748439a97e3c3d8 in linux-6.18.y/6.18.21 aed3d041ab061ec8a64f50a3edda0f4db7280025 in mainline linux sys/dev/pci/drm/amd/display/amdgpu_dm/amdgpu_dm.c sys/dev/pci/drm/amd/display/amdgpu_dm/amdgpu_dm.h sys/dev/pci/drm/amd/display/amdgpu_dm/amdgpu_dm_mst_types.c commit NhcHw137oNQUQVOp Author: jsg Date: 2026/04/07 09:32:15 drm/i915/gmbus: fix spurious timeout on 512-byte burst reads From Samasth Norway Ananda 842aa6103b6f286e2bcee395b38807d3ae0d0b26 in linux-6.18.y/6.18.21 08441f10f4dc09fdeb64529953ac308abc79dd38 in mainline linux sys/dev/pci/drm/i915/display/intel_gmbus.c commit JZOarIIQoPAZAUaK Author: jsg Date: 2026/04/07 09:30:23 drm/amdgpu: fix gpu idle power consumption issue for gfx v12 From Yang Wang ad696758a45ca0c70fa60b7fd2f921edec7fc600 in linux-6.18.y/6.18.21 a6571045cf06c4aa749b4801382ae96650e2f0e1 in mainline linux sys/dev/pci/drm/amd/amdgpu/mes_v12_0.c commit 2j4NMHDMYKkhiMYD Author: jsg Date: 2026/04/07 09:27:59 drm/ttm/tests: Fix build failure on PREEMPT_RT From Maarten Lankhorst be0c2255d717c8c548cba3b78c6d3c33ecd1feb8 in linux-6.18.y/6.18.21 a58d487fb1a52579d3c37544ea371da78ed70c45 in mainline linux sys/dev/pci/drm/ttm/tests/ttm_bo_test.c commit x1zTgklfugCtdUUF Author: jsg Date: 2026/04/07 09:11:15 add idr_alloc_cyclic() for 6.18.21 drm sys/dev/pci/drm/drm_linux.c sys/dev/pci/drm/include/linux/idr.h commit jCvop9jpugKbWcCT Author: jsg Date: 2026/04/07 09:04:16 add DEFINE_IDR() for 6.18.21 drm sys/dev/pci/drm/include/linux/idr.h commit gj6emcqe9xrsZl7Q Author: kettenis Date: 2026/04/07 08:29:30 Add PCIe PHY support. ok mlarkin@, deraadt@ sys/arch/riscv64/dev/smtcomphy.c commit 01b5MNlYik3G1vuH Author: kettenis Date: 2026/04/07 08:28:34 Add a few more PCIe related clocks and resets. ok mlarkin@, deraadt@ sys/arch/riscv64/dev/smtclock.c commit wzezwn9SxJ535wBH Author: kettenis Date: 2026/04/07 08:20:40 Add ASPM bits for PCIe link capabilities register. ok mlarkin@, deraadt@ sys/dev/pci/pcireg.h commit g3CeMqDTG1H9l23M Author: djm Date: 2026/04/07 07:40:40 want stdint.h here now that we've switched from u_intXX_t -> uintXX_t usr.bin/ssh/sshbuf.h commit MgwPev62A6mmvDVb Author: bcook Date: 2026/04/07 03:21:10 fix timer emulation-related VM hangs This fixes state machine issues that resulted in hangs with OpenBSD-i386 VMs when using the i8254 hardware timecounter with vmm. This also manifested in incorrect i8254 calibration (wrong CPU speed in dmesg). tested with Debian 12 amd64, i386 Apine Linux 3.23 x86 (with 4GB memory), x86_64 OpenBSD 7.9 beta amd64, i386 ok mlarkin@ usr.sbin/vmd/i8253.c commit TCZ7r5Wn5m4IJQpJ Author: deraadt Date: 2026/04/07 03:20:31 sycn distrib/sets/lists/man/mi commit 3FHyhRmA2GgrNeV8 Author: jsg Date: 2026/04/07 00:15:41 match VT8261 SATA and another VT8251 SATA from Andrius V sys/dev/pci/pciide.c commit Nx9DUgewcRsACnbS Author: jsg Date: 2026/04/07 00:10:24 match more VIA ISA bridges when determining IDE DMA modes from Andrius V sys/dev/pci/pciide.c commit KIn5ywcspjB9k2WZ Author: jsg Date: 2026/04/07 00:00:13 regen sys/dev/pci/pcidevs.h sys/dev/pci/pcidevs_data.h commit Qs6gX4NLZTIe5kTh Author: jsg Date: 2026/04/06 23:59:43 add more VIA SATA and ISA ids from Andrius V sys/dev/pci/pcidevs commit R0JBej49aQfax9cQ Author: kettenis Date: 2026/04/06 21:49:50 smtpmic(4) share/man/man4/man4.riscv64/Makefile share/man/man4/man4.riscv64/smtpmic.4