BSD Commit Log Search

   Handle empty USB HID responses that could otherwise lead to out of bounds
   memcpy().

   Report and diff from Acts1631.

   ok deraadt@

   update

   Update to xterm 412

   Update to libXtst 1.2.6

   Update to libXrender 0.9.13

   Update to libXpm 3.5.20

   Update to libXi 1.8.4

   Update to libX11 1.8.14

   sync

   Update to freetype 2.15.0

   panic does the \n for us

   update liquid-dsp 1.8.2 -> 1.8.3

   most patches gone, thanks to Brad who reported them upstream.

   Enable _FFR_TLS_USE_CERTIFICATE_CHAIN_FILE so sendmail sends the full
   certificate chain from ServerCertFile/ClientCertFile (e.g. Let's Encrypt
   fullchain.pem) instead of the leaf only.

   Enable _FFR_TLS_USE_CERTIFICATE_CHAIN_FILE so sendmail sends the full
   certificate chain from ServerCertFile/ClientCertFile (e.g. Let's Encrypt
   fullchain.pem) instead of the leaf only.

   fix ssi.conf @sample

   Report floating_flag correctly if pane is zoomed.

   fix warnings in (compile-time disabled) debug code

   avoid creating unreadable KRLs with invalid bitmap sections
   when passed particular sequences of serial numbers to revoke.
   bz4037

   No longer build tmux with debug symbols, requested by deraadt

   Handle errno properly when accepting a PPTP connection.  Previously,
   file descriptor exhaustion could cause the accept loop to spin
   indefinitely.

   From Acts1631

   Reject a PPTP control packet with an invalid length field.
   Previously, an invalid packet could cause the input event loop to spin
   indefinitely, effectively hanging the process until it was terminated.

   From Acts1631

   update to py3-tomlkit-0.15.2

   Don't attempt to read firmware in DVAT_RESUME.  It most defenitely won't
   work!  Instead, if we find that the firmware wasn't read sucessfully
   at mountroot time, return early and skip further initialization.  The
   device will be just as non-functional as before the suspend happened.

   ok deraadt@

   Reject a PADR which has an AC-Cookie of invalid length.  Also, fix
   the duplicate cookie check, which mistakenly used the pointer instead
   of the value as the hash key.

   update to py3-holidays-0.106

   add httpx2 etc. TDEPs

   now that we have py-httpx2: update to py3-last-7.2.0

   update to 155.0.8059.84

   Align TLVs in tlvspace, including the first one, to a 32-bit boundary
   so that tlv->value is properly aligned to its consumers.  Don't use
   ALIGNBYTES, which is for another purpose and not what we need here.
   Point out by a colleague in IIJ.

   MFC vuln fix update to p5-Text-CSV_XS-1.65