BSD Commit Log Search

   x509_policy: indent err: labels for better diffs

   fix some fetchname() cases

   a path name indicating a directory will soon be rejected anyway.

   fixup -dev plist and add run depend on -main

   handle dbupdate, ok semarie

   handle dbupdate, ok semarie

   No need to clear bytes we already set in input_print, also skip empty
   lists when flushing.

   in mbuf pkt headers we have m_pkthdr.pf.tag, that is for users (tag/tagged
   in rulesets). we also have m_pkthdr.pf.flags, that is for pf's internal
   needs. having the defines that go into m_pkthdr.pf.flags named PF_TAG_*
   is confusing.
   mechanically rename PF_TAG_* (except PF_TAG_NAME_SIZE, which actually is
   for the tags in m_pkthdr.pf.tag) to PF_FLAG_*
   ok sashan & compiler

   rpki-client: switch ASPA econtent parsing to CBS

   ASPAs have a rather simple eContent and the existing parser can pretty
   much stay as it is. After this change the only remaining OpenSSL type
   that is directly used in aspa.c is the ASN1_OBJECT for the aspa_oid.
   The main side effect is that the parser now enforces DER encoding.

   Factor parsing of version and customerASID into helpers and rework the
   existing providers parser to use a CBS. Since we no longer have STACK_OF,
   we need to add an extra loop to count the number of providers other than
   that not a lot needs to change. We only need one allocation now, one for
   the array of providers.

   with/ok claudio

   build with -DSQLITE_NO_COLOR

   rpki-client: add an asid parser using CBS

   ok claudio

   update to sqlite3-3.54.1 - has some overflow fixes but generally in
   unlikely situations, often involving corrupt files.

   https://sqlite.org/releaselog/3_54_1.html /
   https://sqlite.org/src/timeline?from=version-3.53.0&to=version-3.54.1&y=ci

   rpki-client: add helper to parse econtent version

   All RPKI signed objects have an econtent version with default 0:

     version [0] INTEGER DEFAULT 0,

   add a helper to parse this from a CBS since this is going to be needed
   for every econtent parser.

   ok claudio

   simpler WRKSRC, and fiddle with formatting a bit

   rpki-client: improve an error in valid_econtent_version()

   pointed out by/ok claudio

   update to dcmtk-3.7.1
   see https://marc.info/?l=oss-security&m=178292142609075&w=2

   libunibreak: better COMMENT/DESCR, add a comment about the API removed
   in newer versions which is still used by games/naev

   relayd: preserve HTTP request methods across reads and interim responses

   Diff from Acts1631

   OK: rsadowski@

   update to py3-isort-8.0.1

   update to pylint3-4.1.3

   update to py3-astroid-4.3.4

   relax pylint version in deps

   Reject trailing characters on some number arguments, from someone in
   GitHub issue 5863.

   Cache setaf/setab capabilities to avoid expanding them every time,
   GitHub issue 5847 from Andrea Cappuccio.

   Make dim= work in pane-border-style and pane-active-border-style, GitHub
   issue 5825 from Cason Adams.

   httpd: refactor server_response with server_by_host_header

   seems fine to me, op@

   graphics/libjxl: MFC update to 0.13.0.

   no symbols change from 0.12.0, so safe to backport for security fixes
   see https://github.com/libjxl/libjxl/releases/tag/v0.13.0

   graphics/libjxl: update to 0.13.0.

   https://github.com/libjxl/libjxl/releases/tag/v0.13.0

   update to py3-test-jupyter-0.11.0

   Minimal support for OSC 7501 program status, GitHub issue 5830 from
   Brian Cosgrove.

   update to libutf8proc-2.12.0