Build date: 1784844003 - Thu Jul 23 22:00:03 UTC 2026 Build cvs date: 1784816013 - Thu Jul 23 14:13:33 UTC 2026 Build id: 2026-07-24.1 Build tags: amd64-regress ports sysupgrade Applied the following diff(s): /home/anton/tmp/robsd/src-sys-em.diff /home/anton/tmp/robsd/src-sys-uhidev-sispm.diff /home/anton/tmp/robsd/src-sysupgrade.diff P distrib/sets/lists/comp/md.armv7 P gnu/usr.bin/perl/pp_pack.c P gnu/usr.bin/perl/regcomp_study.c P gnu/usr.bin/perl/dist/Storable/Storable.xs P gnu/usr.bin/perl/pod/perldiag.pod P lib/libfuse/fuse.c P lib/libfuse/fuse_ops.c P lib/libutil/imsg_init.3 P libexec/getty/main.c P regress/usr.sbin/bgpd/integrationtests/l3vpn.sh P regress/usr.sbin/bgpd/integrationtests/pftable.sh P sys/arch/arm64/arm64/bus_dma.c P sys/arch/riscv64/riscv64/bus_dma.c M sys/dev/usb/uhidev.c P usr.bin/ssh/packet.c P usr.bin/tmux/cmd-break-pane.c P usr.bin/tmux/options-table.c P usr.bin/tmux/options.c P usr.bin/tmux/screen-redraw.c P usr.bin/tmux/spawn.c P usr.bin/tmux/tmux.1 P usr.bin/tmux/tmux.h P usr.bin/tmux/window-border.c P usr.bin/tmux/window.c P usr.sbin/bgpd/bgpd.c P usr.sbin/bgpd/rde.c RCS file: /cvs/src/usr.sbin/bgpd/session.c,v retrieving revision 1.538 retrieving revision 1.539 Merging differences between 1.538 and 1.539 into session.c M usr.sbin/bgpd/session.c P usr.sbin/bgpd/session_bgp.c P usr.sbin/eigrpd/eigrpd.c P usr.sbin/eigrpd/rde.c commit h3aluayF8jDfr9TU Author: tb Date: 2026/07/23 14:13:33 imsg_init.3: mark imsg_get as intentionally undocumented noticed by chohag at jtan.com ok claudio lib/libutil/imsg_init.3 commit KihUMuxAZFbOwQGv Author: claudio Date: 2026/07/23 14:06:00 Use imsg_get_data for IMSG_CTL_LOG_VERBOSE instead of blindly trusting the size of the imsg. Reported by Shibo, Hugo Systopia Team usr.sbin/eigrpd/eigrpd.c usr.sbin/eigrpd/rde.c commit GaQl1Oaitz9hLRDd Author: claudio Date: 2026/07/23 14:04:44 Unify IMSG_CTL_LOG_VERBOSE handlers to look the same. usr.sbin/bgpd/bgpd.c usr.sbin/bgpd/rde.c commit ua4HrQK18Iii5QqE Author: kettenis Date: 2026/07/23 12:19:37 Fix inverted logic in bus_dmamap_load() and its variants that checks whether virtual address continuity is needed. This fixes an issue where cache flushes during bus_dmamap_sync() would fault. ok jca@ sys/arch/arm64/arm64/bus_dma.c commit 3yOQTWEFuR53oHe0 Author: kettenis Date: 2026/07/23 12:07:27 Fix inverted logic in bus_dmamap_load() and its variants that checks whether virtual address continuity is needed. This fixes an issue where cache flushes during bus_dmamap_sync() would fault. ok jca@ sys/arch/riscv64/riscv64/bus_dma.c commit Y87Z2h3luwylJnPQ Author: claudio Date: 2026/07/23 11:29:55 At startup move peers quickly to active state but delay the connection open by SESSION_CLEAR_DELAY This allows new connection in right after startup but still delays the connect like before. This is mainly needed for the integration tests that depend on quick startups. Issue noticed by anton@ OK tb@ usr.sbin/bgpd/session.c usr.sbin/bgpd/session_bgp.c commit NOfveAYS0bCpYv4q Author: daniel Date: 2026/07/23 11:13:36 getty(8): don't pass an empty string to login(1) Entering some text and then deleting it would pass an empty string to login(1) leading to an error message. Fix this by checking if name is blank. This was worked out by Piotr Durlej who submitted a proposed fix. I ended up going with a simpler fix though. After I came up with my fix I noticed that FreeBSD commited an identical change as part of a larger commit they made in 2003. Discussed with deraadt@ libexec/getty/main.c commit FoPSjHQx43jY94Ro Author: claudio Date: 2026/07/23 10:05:37 For whatever reason the first IPv6 packet is always lost and so the bgp session just does not come up in time. Ping6 the neighbor first so that nd6 lookups are finished before the bgp connection opened. regress/usr.sbin/bgpd/integrationtests/l3vpn.sh commit dlDbv4iqWTTAV7HH Author: nicm Date: 2026/07/23 09:38:27 Extend fill-character to allow inside and outside to be separate and use a different default (filled characters rather than dots) for inside. usr.bin/tmux/cmd-break-pane.c usr.bin/tmux/options-table.c usr.bin/tmux/options.c usr.bin/tmux/screen-redraw.c usr.bin/tmux/spawn.c usr.bin/tmux/tmux.1 usr.bin/tmux/tmux.h usr.bin/tmux/window-border.c usr.bin/tmux/window.c commit IgI6nmnPjcJbL1o8 Author: claudio Date: 2026/07/23 09:22:19 Use shorter timeouts and explicit session ups to make this more reliable. regress/usr.sbin/bgpd/integrationtests/pftable.sh commit 4Pe8h5aQL23YSfV7 Author: helg Date: 2026/07/23 08:48:50 FUSE callbacks return a negated errno. Return -ENOSYS if an operation is not implemented by a file system. OK claudio@ lib/libfuse/fuse_ops.c commit 3ZPCzGEpfbKTq6hL Author: helg Date: 2026/07/23 08:46:56 File systems can provide a pointer to private data to fuse_main(3) or fuse_new(3). However, if the file system implements init() then this will be replaced by the return value of init(). If a file system wants to keep the original value then it can retrieve it by calling fuse_get_context(3). OK claudio@ lib/libfuse/fuse_ops.c commit UNEhDaQXp7SBOYzk Author: djm Date: 2026/07/23 06:33:06 use sshpkt_fatal instead of plain fatal() for errors in the packet code as this provides context of the failing peer (address, port, user, etc). Based on patch from Dag-Erling Sm\M-C\M-8rgrav usr.bin/ssh/packet.c commit 6Db7mPkJz4fhfzyp Author: helg Date: 2026/07/23 04:50:38 Don't attempt to validate the mount directory during option parsing. Instead, check the result of realpath(3) before calling mount(2) and rely on this to confirm that it is indeed a directory. File systems like ntfs-3g that don't call fuse_parse_cmdline(3) will now print an error message if the directory doesn't exist rather than silently failing. OK claudio@ lib/libfuse/fuse.c commit zCdQ7G2Vvhh9uHtE Author: afresh1 Date: 2026/07/23 04:26:57 Fix signed integer overflow in Storable Storable for Perl has a signed integer overflow when deserializing a crafted SX_HOOK record CVE-2026-57433 https://lists.security.metacpan.org/cve-announce/msg/41780100/ gnu/usr.bin/perl/dist/Storable/Storable.xs commit 9XG8fqgAY0rfO1q5 Author: afresh1 Date: 2026/07/23 04:25:35 Fix integer overflow in perl pack and unpack Perl has an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack. CVE-2026-57432 https://lists.security.metacpan.org/cve-announce/msg/41780102/ gnu/usr.bin/perl/pp_pack.c gnu/usr.bin/perl/pod/perldiag.pod commit xFAZ61wqJf2uFfY5 Author: afresh1 Date: 2026/07/23 04:23:45 Fix for incorrect regular expression matches Perl produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk CVE-2026-13221 https://lists.security.metacpan.org/cve-announce/msg/41780104/ gnu/usr.bin/perl/regcomp_study.c commit 7Io3a1TdtY7onO6o Author: deraadt Date: 2026/07/23 01:17:07 sync distrib/sets/lists/comp/md.armv7