Build date: 1787868003 - Thu Aug 27 22:00:03 UTC 2026
Build cvs date: 1787865849 - Thu Aug 27 21:24:09 UTC 2026
Build id: 2026-08-28.1
Build tags: amd64-regress ports sysupgrade

Applied the following diff(s):
/home/anton/tmp/robsd/src-sys-em.diff
/home/anton/tmp/robsd/src-sys-uhidev-sispm.diff
/home/anton/tmp/robsd/src-sysupgrade.diff

P lib/libcrypto/cms/cms_kari.c
P lib/libcrypto/rsa/rsa_eay.c
P sbin/mountd/mountd.c
M sys/dev/usb/uhidev.c
P usr.bin/mandoc/cgi.c
M usr.sbin/bgpd/session.c
P usr.sbin/ospfd/kroute.c
P usr.sbin/ospfd/name2id.c
P usr.sbin/ospfd/ospfd.h

commit phPdMbtDqphFzLUK
Author: claudio
Date: 2026/08/27 21:24:09

  Rewrite the imsg code to be more modern.

  Split the code into independent send and recv functions that properly
  send some of the more complex messages without leaking extra data or
  causing problems on recv (e.g. by passing string buffers).
  This also kills the send_imsg wrapper which kind of is the cause that
  everything was passed as one big blob.

  OK rsadowski@

  sbin/mountd/mountd.c

commit xjhW9Vux9km5KC5M
Author: claudio
Date: 2026/08/27 21:18:41

  Fix kr_change to add missing rtlabel references and update routes when
  only the label changes.

  rtlabel_tag2id() does not take a reference for the rtlabel id so a call
  to rtlabel_ref() is needed here. This mirrors the rtlabel_unref calls.
  In the nexthop already present case one needs to adjust the kn to update
  the ext_tag and rtlabel in case those changed. With this the rtlabel to
  external-tag mapping should work more reliable.

  OK bluhm@

  usr.sbin/ospfd/kroute.c
  usr.sbin/ospfd/name2id.c
  usr.sbin/ospfd/ospfd.h

commit dzsF1rKNB870442X
Author: schwarze
Date: 2026/08/27 13:17:42

  open header.html and footer.html up front,
  in pareparation for pledge/unveil improvements

  usr.bin/mandoc/cgi.c

commit hMlyEkkaUDyR9njz
Author: tb
Date: 2026/08/27 07:18:40

  rsa_eay: Replace handrolled BN_bn2binpad with the real thing

  Just a tiny little bit of lipstick on this entelodont. This is simpler
  and does not change behavior as BN_bn2binpad() returns -1 on failure and
  num on success.

  jsing points out that BN_bn2binpad() is constant time.

  ok jsing kenjiro

  PS: henning, you owe me a significant amount of quality beverages for
  making me look at this particular tire fire (and corresponding XS files).

  lib/libcrypto/rsa/rsa_eay.c

commit hLWObxlh7dIvICVG
Author: tb
Date: 2026/08/27 07:13:34

  libcrypto: harden cms_kek_cipher() a bit

  When AES key unwrap with padding is in use, the EVP interface breaks its
  contract and writes more than the outlen it initially reports to the output
  buffer. This is an old, sneaky trap that the muppet set eons ago and many
  victims walked right into it, including the muppet himself.

  If inlen is larger than outlen, allocate inlen bytes to unwrap with padding
  to avoid a buffer overwrite. This is a variant of OpenSSL's fix. Since we
  do not support AES keywrap with padding no actual bufer overwrite occurs
  here at the moment, but if we ever chose to do so (unlikely) this trap
  would be avoided. There's plenty more traps that the next round of scas
  will surely find in this absolute trashfire of CMS support code.

  ok kenjiro

  lib/libcrypto/cms/cms_kari.c