Build date: 1783461602 - Tue Jul  7 22:00:02 UTC 2026
Build cvs date: 1783456820 - Tue Jul  7 20:40:20 UTC 2026
Build id: 2026-07-08.1
Build tags: amd64-regress ports sysupgrade

Applied the following diff(s):
/home/anton/tmp/robsd/src-sys-em.diff
/home/anton/tmp/robsd/src-sys-ptrace-revert.diff
/home/anton/tmp/robsd/src-sys-uhidev-sispm.diff
/home/anton/tmp/robsd/src-sysupgrade.diff

P distrib/sets/lists/base/mi
P etc/examples/login_ldap.conf
P gnu/usr.bin/perl/cpan/Socket/Socket.pm
P gnu/usr.bin/perl/cpan/Socket/Socket.xs
P gnu/usr.bin/perl/cpan/Socket/t/sockaddr.t
P lib/libevent/Makefile
P lib/libevent/event.h
cvs server: lib/libevent/event_tagging.c is no longer in the repository
U lib/libevent/shlib_version
P regress/lib/libevent/event_regress.c
P sys/arch/arm64/arm64/machdep.c
P sys/arch/arm64/include/cpu.h
P sys/arch/riscv64/conf/GENERIC
P sys/arch/riscv64/include/cpu.h
P sys/arch/riscv64/riscv64/machdep.c
P sys/dev/acpi/amltypes.h
P sys/dev/acpi/dsdt.c
P sys/dev/fdt/gpioleds.c
P sys/dev/ic/qwx.c
P sys/dev/pci/if_ice.c
M sys/dev/usb/uhidev.c
P sys/net/pipex.c
P sys/uvm/uvm_pager.c
P sys/uvm/uvm_pager.h
P sys/uvm/uvm_pdaemon.c
P usr.bin/ssh/auth2-gss.c
P usr.bin/ssh/authfile.c
P usr.bin/ssh/servconf.c
P usr.bin/ssh/servconf.h
P usr.bin/tmux/cmd-break-pane.c
P usr.bin/tmux/cmd-display-menu.c
P usr.bin/tmux/cmd-join-pane.c
P usr.bin/tmux/cmd-resize-pane.c
P usr.bin/tmux/key-bindings.c
P usr.bin/tmux/layout-custom.c
P usr.bin/tmux/layout-set.c
P usr.bin/tmux/layout.c
P usr.bin/tmux/menu.c
P usr.bin/tmux/resize.c
P usr.bin/tmux/spawn.c
P usr.bin/tmux/tmux.1
P usr.bin/tmux/tmux.h
P usr.bin/tmux/window.c
M usr.sbin/bgpd/session.c
P usr.sbin/rpki-client/ccr.c
P usr.sbin/rpki-client/cert.c
P usr.sbin/rpki-client/filemode.c
P usr.sbin/rpki-client/output-bgpd.c
P usr.sbin/rpki-client/output-bird.c
P usr.sbin/rpki-client/output-json.c
P usr.sbin/rpki-client/print.c
P usr.sbin/rpki-client/tak.c

commit KF3X4abpgf7Ss9bH
Author: claudio
Date: 2026/07/07 20:40:20

  In cert_ca_sia() use the right notify string in error message.
  At that point cert->notify has not yet been set.

  OK tb@

  usr.sbin/rpki-client/cert.c

commit rVvLGFJ1jp8f1wXj
Author: jan
Date: 2026/07/07 19:01:10

  ice(4): set link state to full duplex as all other nics

  tested by bluhm@

  try it stsp@
  ok bluhm@

  sys/dev/pci/if_ice.c

commit DO2I85S5leNyMnGC
Author: kettenis
Date: 2026/07/07 18:26:28

  Avoid potential out-of-bounds access while parsing AML byte stream
  opcodes.  Found by gnezdo@ using KASAN.

  ok gnezdo@

  sys/dev/acpi/amltypes.h
  sys/dev/acpi/dsdt.c

commit 9ZFgCqOolpFrKOag
Author: kettenis
Date: 2026/07/07 18:20:58

  Use M_WAITOK and BUS_DMA_WAITOK instead of M_NOWAIT and BUS_DMA_NOWAIT in
  places where we're allowed to sleep.  Hopefully this fixes the

  qwx0: failed to init DP: 12

  issue that some of us occasionally experience.

  ok stsp@

  sys/dev/ic/qwx.c

commit 8E3sBrgKwg01TeDk
Author: kettenis
Date: 2026/07/07 17:32:56

  Allocate the psegs that are reserved for the pagedeamon only if no other
  psegs are available.  Let the pagedeamon only start a new swap cluster
  if there are still at least two reserved slots available.  This goes a
  long way towards guaranteeing that we have the resources to actually
  write out the swap cluster once it is filled.  This is important since
  the code that drops a cluster may need to acquire an rwlock, which means
  the pagedaemon could sleep.  This is undesirable and may even lead to
  deadlocks.

  Note that there still is a possibility that we may fail to allocate a buf
  from the bufpool, which would lead us to the same undesirable path.  So
  far I've not been able to hit that case.

  ok claudio@

  sys/uvm/uvm_pager.c
  sys/uvm/uvm_pager.h
  sys/uvm/uvm_pdaemon.c

commit JpywGgFrFSIc9vEk
Author: bluhm
Date: 2026/07/07 15:57:23

  sync libevent major bump

  distrib/sets/lists/base/mi

commit l5309MQfUfr7MM64
Author: bluhm
Date: 2026/07/07 15:44:11

  Delete tests for code that has been removed in base libevent.

  regress/lib/libevent/event_regress.c

commit BNfZAnDFOLlMMGp9
Author: bluhm
Date: 2026/07/07 15:38:39

  Do not ship evtag functions in base libevent.

  Upstream libevent 2.1.13-stable contains several security fixes.
  Our reduced libevent 1.4.15-stable does not contain the affected
  code.  The functions in event_tagging.c are only used by evrpc which
  we have removed from libevent.  As the attack vectors for the
  upstream fixes go through evrpc to evtag, better remove this dead
  code and do not export it in our libevent.  Major library bump
  needed.

  OK dlg@ claudio@ sthen@

  lib/libevent/Makefile
  lib/libevent/event.h
  lib/libevent/shlib_version

commit pXgkmP7MkAP4Wd5h
Author: claudio
Date: 2026/07/07 14:24:22

  der_len needs to be int so that the error check around i2d_X509_PUBKEY()
  works. Only positive der_len values make it to base64_encode() where it
  is promoted to size_t which is fine.

  OK tb@

  usr.sbin/rpki-client/ccr.c

commit 1nK6734EszWcdrci
Author: claudio
Date: 2026/07/07 13:56:10

  Add missing spl_free() in the proc_parser_file() spaghetti

  OK tb@

  usr.sbin/rpki-client/filemode.c

commit N2N0wDycoxhZd4SI
Author: tb
Date: 2026/07/07 13:48:44

  ccr: use uint32_t and %u for AS numbers

  ok claudio

  usr.sbin/rpki-client/ccr.c

commit 2IEHwepOpQZTQ8Ga
Author: claudio
Date: 2026/07/07 13:45:59

  Tak files should use RTYPE_TAK not RTYPE_SPL.

  OK tb@

  usr.sbin/rpki-client/tak.c

commit UphZKvlibGH5ABvT
Author: claudio
Date: 2026/07/07 13:38:54

  ASnum are unsigned 32bit values. Use %u to print them not %d.

  Also use json_do_uint() just to be consistent. The json encoder operates
  with 64bit values so it does not matter there as much as it does for printf.

  With and OK tb@

  usr.sbin/rpki-client/output-bgpd.c
  usr.sbin/rpki-client/output-bird.c
  usr.sbin/rpki-client/output-json.c
  usr.sbin/rpki-client/print.c

commit TTVDPpCeVjti0ARr
Author: nicm
Date: 2026/07/07 12:30:36

  Fix . and ; bindings, reported by tb.

  usr.bin/tmux/key-bindings.c
  usr.bin/tmux/tmux.1

commit liGAeqRPqqzsL1Wh
Author: kettenis
Date: 2026/07/07 12:12:44

  Implement the machdep.led_blink sysctl on arm64 and riscv64 and add support
  for it to gpioleds(4).  Enable gpioleds(4) on riscv64.

  sys/arch/arm64/arm64/machdep.c
  sys/arch/arm64/include/cpu.h
  sys/arch/riscv64/conf/GENERIC
  sys/arch/riscv64/include/cpu.h
  sys/arch/riscv64/riscv64/machdep.c
  sys/dev/fdt/gpioleds.c

commit BnSIwcofZO7po6Gn
Author: sthen
Date: 2026/07/07 10:07:41

  - fix syntax in example login_ldap.conf file, it had :\\ on a line
  presumably when converted from getcap in the ports version

  - switch to a more unix-y sample filter, and add a commented-out example
  for ActiveDirectory

  based on a diff from Chaz Kettleson which was ok with tweaks by claudio@,
  and incorporating feedback from Andrew Daugherity

  etc/examples/login_ldap.conf

commit FTEEAO3r8iS42vD9
Author: nicm
Date: 2026/07/07 09:45:09

  Add C-b g , and C-b g . for move and resize menus, also add to pane menu
  (and fix to make them work).

  usr.bin/tmux/cmd-display-menu.c
  usr.bin/tmux/key-bindings.c
  usr.bin/tmux/menu.c
  usr.bin/tmux/tmux.1
  usr.bin/tmux/tmux.h

commit xkBCNzh7QkmANCOZ
Author: nicm
Date: 2026/07/07 08:07:26

  Add a layout_geometry container struct, from Dane Jensen.

  usr.bin/tmux/cmd-break-pane.c
  usr.bin/tmux/cmd-join-pane.c
  usr.bin/tmux/cmd-resize-pane.c
  usr.bin/tmux/layout-custom.c
  usr.bin/tmux/layout-set.c
  usr.bin/tmux/layout.c
  usr.bin/tmux/resize.c
  usr.bin/tmux/spawn.c
  usr.bin/tmux/tmux.h

commit M2d1M79vLvMSIjZO
Author: nicm
Date: 2026/07/07 07:47:03

  Set initial scrollbar state, from Michael Grant.

  usr.bin/tmux/key-bindings.c
  usr.bin/tmux/window.c

commit 5wfF932N04NlYBNz
Author: nicm
Date: 2026/07/07 07:43:07

  Restore { and } to swap-pane and for floating panes and use a separate
  key table accessed by g (short for "gove and/or gesize") for floating
  panes. So "C-b g Up" moves the pane to top-centre, "C-b g M-Up" moves
  and resizes it. This means we not only do not lose the surprisingly
  popular { and } bindings, but we can have more than four keys for moving
  and resizing panes.

  usr.bin/tmux/key-bindings.c
  usr.bin/tmux/tmux.1

commit o5k1buHk596At8EY
Author: dlg
Date: 2026/07/07 05:39:05

  don't assume an ipv4 header is always 20 bytes.

  as reported by SecBuddyF, Tencent KeenLab:

  > OpenBSD's pipex PPTP GRE packet handling uses a fixed GRE/IP header
  > length check before later reading the GRE header at an offset derived
  > from the actual IPv4 header length.
  >
  > When IPv4 options are present, the dynamic IPv4 header length can
  > be larger than 20 bytes. A short GRE packet can therefore pass the
  > fixed 28-byte PIPEX_IPGRE_HDRLEN check while still being too short
  > for the later m_copydata(m0, hlen, sizeof(gre), &gre) read.
  >
  > This can trigger:
  >
  >   panic: m_copydata: null mbuf
  >
  > The issue is remotely triggerable when GRE and pipex are enabled
  > and inbound IPv4 GRE packets with IP options are allowed to reach
  > the target.

  they identified the problem in pipex_pptp_lookup_session() and
  suggested a minimal fix, but i reimplemented it to make it more
  like other code in the tree. also, there were similar issues in
  pipex_pptp_input() which i'm also fixing while here.

  testing and ok yasuoak@

  sys/net/pipex.c

commit A9xxEr9pUhGWMuQo
Author: djm
Date: 2026/07/07 04:04:16

  prefer fstat to stat when it's trivial to do so

  usr.bin/ssh/authfile.c

commit uu2Yw7fXEPGLHpz3
Author: djm
Date: 2026/07/07 02:17:18

  unused variables

  usr.bin/ssh/auth2-gss.c

commit RxAXLAEsIFhCyIhp
Author: djm
Date: 2026/07/07 01:00:22

  fix GSSAPI option names, that I somehow screwed up while refactoring
  servconf.c bz3974 patch from Colin Watson

  usr.bin/ssh/servconf.c
  usr.bin/ssh/servconf.h

commit S2wrnPpKBiild8tf
Author: afresh1
Date: 2026/07/07 00:11:56

  Update Socket to 2.041

  CVE-2026-12087:
  Socket versions before 2.041 for Perl have an out-of-bounds heap read

  From security.metacpan.org

  gnu/usr.bin/perl/cpan/Socket/Socket.pm
  gnu/usr.bin/perl/cpan/Socket/Socket.xs
  gnu/usr.bin/perl/cpan/Socket/t/sockaddr.t