set DPB_PROPERTIES=parallel, postfix/stable is built 8x after openssl
updates (dpb won't run builds for multiple flavours in parallel) so
at least in -stable parallelising them helps.
set DPB_PROPERTIES=parallel, postfix/stable is built 8x after openssl
updates (dpb won't run builds for multiple flavours in parallel) so
at least in -stable parallelising them helps.
update to ettercap-0.8.4.1
switches gui mode to gtk+3 which at least works slightly, whereas the
gtk+2 support in the previous version wasn't working at all.
disable curses mode for now, it's extremely crashy. plaintext and gui
do at least do _something_ partly useful.
Avoid freeing a caller-owned buffer in PKCS7_verify()
If a PKCS#7 S/MIME message comes with an empty set of digestAlgorithms
in the SignedData, PKCS7_verify() would incorrectly free a caller-owned
buffer. Fix the freeing logic to avoid this situation.
From Igor Ustinov via OpenSSL
Add some missing bounds checks to ASN1_mbstring_copy()
If the in string is unreasonably long, assigning strlen(in) to an int
may overflow, so exclude this situation.
Moreover, the code would unconditionally multiply nchar by 2 or 4,
which could again overflow an int. Check for this situation and error
out to avoid an out of bounds write.
More may be needed in here, which will be revisited later.
Based on a diff by Viktor Dukhovni via OpenSSL.
Avoid out-of-bounds read in CMS password-based decryption
The RFC 3211 PWRI integrity check when unwrapping the password-derived key
accesses seven bytes from a heap-allocated buffer. If an (invalid) block
cipher with short blocks is in use 2 * blocksize may not be sufficient room
for 7 bytes. In that silly case, the function performs an OOB read. Add
length check to avoid this situation
From Igor Ustinov via OpenSSL.
Avoid NULL dereference in password-based CMS decryption
The keyDerivationAlgorithm field is OPTIONAL in the ASN.1 but required
for password-based CMS. Check that the field is present before using it
to avoid a crash.
From Igor Ustinov via OpenSSL
Two fixes for RI codepoints. Firstly, do not combine more than two of
them - previously we were ending up with four codepoints in one cell
which tmux believed to be width 2, but terminals considered width 4.
Secondly, invalidate cursor position before redrawing the cell when the
second codepoint is received, terminals vary in how they manage
backspace and cursor movement across these characters, so it is better
to use absolute rather than relative positioning. GitHub issue 4853.
add 'lonesome' to DPB_PROPERTIES on i386 for llvm 22 in the hope
that it reduces or avoids out-of-memory running llvm-tblgen for
llvm/lib/Target/AMDGPU/AMDGPUGISel.td