x11/xscreensaver: change from patching configure to patching configure.ac
and start using autoconf. Will make later changes easier. While there,
regen PLIST to include libexec/xscreensaver/worldpieces.
OK sthen@
pf(4) pf_state_import() can be bit more paranoid
Add sanity check for queue priority assigned to state
via 'set prio' rule action. The priority must fit
to bounds used by kernel (<= IFQ_MAXPRIO)
Issue reported and patch submitted by Acts1631
OK renaud@, OK henning@
update to caddy-2.11.8
"This patch release is a big batch of bug fixes and security hardening,
plus a handful of small additions. This release is cut from our 2.11
maintenance branch: fixes are backported from master. We recommend
upgrading, especially if you serve PHP or use {host} in file paths."
https://github.com/caddyserver/caddy/releases/tag/v2.11.8
unveil: Limit count of visited covers to ps_uvvcount, this avoids an
infinite loop with a particular construction of unveils.
from Acts1631
from dgl@
this is errata/8.0/009_unveil.patch.sig
unveil: Limit count of visited covers to ps_uvvcount, this avoids an
infinite loop with a particular construction of unveils.
from Acts1631
from dgl@
this is errata/7.9/044_unveil.patch.sig
Prevent fq_codel panic from drop counter wrap
Sustained traffic through a congested fq_codel queue can wrap the
per-flow drop counter to zero, triggering the control_law() assertion
and panicking the kernel. Saturate drops and decrement a nonzero ldrops
to preserve the grace-period delta and prevent the wrap.
Issue reported by Acts1631.
from bket@; OK sashan@ claudio@
this is errata/8.0/008_pffq.patch.sig
Prevent fq_codel panic from drop counter wrap
Sustained traffic through a congested fq_codel queue can wrap the
per-flow drop counter to zero, triggering the control_law() assertion
and panicking the kernel. Saturate drops and decrement a nonzero ldrops
to preserve the grace-period delta and prevent the wrap.
Issue reported by Acts1631.
from bket@; OK sashan@ claudio@
this is errata/7.9/043_pffq.patch.sig
