Baptiste Daroussin 968ba8fe77 Apply patch for CVE-2013-6393 [1] to fix heap-based buffer overflow when ...

parsing YAML tags.
Also apply a patch for hardenning the guards againt the issue

The only user in base in yaml is pkg(7) which uses the library a way that it is not affected

Submitted by:	delphij
Obtained from:	https://bugzilla.redhat.com/show_bug.cgi?id=1033990
MFC after:	3 days
Security:	CVE-2013-6393

2014-02-03 08:13:44 +00:00

..

amd

…

apr

…

apr-util

Import apr-util-1.5.3 from vendor branch (rr258600)

2013-11-25 22:20:34 +00:00

atf

Add atf pkg-config files from the vendor branch.

2014-01-12 22:17:10 +00:00

binutils

Make gas accept any PowerPC instruction by default. This is a local change,

2014-02-03 01:45:07 +00:00

bmake

Merge bmake-20140101 from vendor

2014-01-27 17:47:21 +00:00

bsnmp

Fix a problem with OBJECT IDENTIFIER encoding: need to check the

2014-01-21 16:49:54 +00:00

byacc

Import byacc 20140101 which imports %token-table from bison allowing to build ntpd

2014-01-08 08:08:22 +00:00

bzip2

…

com_err

…

compiler-rt

…

dialog

…

diff

Fix a cut and paste error.

2014-01-05 23:28:03 +00:00

dtc

Merge from vendor branch importing dtc git rev 6a15eb2350426d285130e4c9d84c0bdb6575547a

2014-01-27 19:37:35 +00:00

ee

…

elftoolchain

Reapply r221569, r233401, r233524 and r255105: Add support for a few

2014-01-25 13:53:46 +00:00

expat

…

file

Apply upstream commit 33312fd828e59c78ae4ee30fd70d0ca109748cf0 (by

2013-12-22 14:14:53 +00:00

flex

…

gcc

gcc: Add support for -Wmissing-prototypes in C++

2014-01-26 02:36:06 +00:00

gcclibs

gcc: Add support for Apple's Block extension

2014-01-05 00:43:28 +00:00

gdb

Use sysctl KERN_PROC_SIGTRAMP to retrieve the signal trampoline

2013-11-26 19:54:12 +00:00

gdtoa

…

gperf

gperf: reverse size_type patch from r258115.

2014-01-07 01:40:49 +00:00

groff

Pull up vendor changes up to 2014-01-29

2014-01-31 12:26:30 +00:00

ipfilter

…

jemalloc

Update jemalloc to version 3.5.0.

2014-01-23 02:47:36 +00:00

ldns

…

ldns-host

…

less

…

libarchive

…

libbegemot

…

libc-pwcache

…

libc-vis

Restore the Nx macro lost in transit.

2014-01-29 11:39:58 +00:00

libc++

Import libc++ 3.4 release. This contains a lot of bugfixes, and some

2014-01-30 07:44:22 +00:00

libcxxrt

…

libexecinfo

libexecinfo: Include terminating null in byte count

2013-11-21 14:12:36 +00:00

libgnuregex

…

libpcap

Rename definition of IEEE80211_FC1_WEP to IEEE80211_FC1_PROTECTED.

2014-01-08 08:06:56 +00:00

libreadline

…

libstdc++

gcc: Bring updates from Google's enhanced gcc-4.2.1.

2013-11-23 18:32:53 +00:00

libyaml

Apply patch for CVE-2013-6393 [1] to fix heap-based buffer overflow when

2014-02-03 08:13:44 +00:00

llvm

Pull in r195679 from upstream llvm trunk:

2014-01-25 16:35:56 +00:00

lukemftpd

…

mdocml

Merge mdocml v1.12.3 into head

2014-02-01 09:27:57 +00:00

mknod

…

mtree

Sync with NetBSD. The funtional change is to make the output when

2013-11-21 19:29:41 +00:00

ncurses

…

netcat

MFV: netcat from OpenBSD 5.4.

2013-11-15 22:45:14 +00:00

ngatm

…

ntp

Disable 'monitor' feature in ntpd by default.

2014-01-14 18:59:00 +00:00

nvi

Vendor import nvi-2.1.2-c80f493b038 a multikey mapping fix

2013-12-08 00:08:03 +00:00

ofed

…

one-true-awk

…

openbsm

…

openpam

…

openresolv

…

opie

…

pam_modules/pam_passwdqc

…

pf

Ressurect the local change documenting

2014-01-29 19:28:52 +00:00

pnpinfo

…

sendmail

Update for sendmail 8.14.8 import

2014-01-26 23:44:12 +00:00

serf

…

smbfs

Just disable recoding support in libsmb if built WITHOUT_ICONV.

2013-11-12 15:09:28 +00:00

sqlite3

…

subversion

Import svn-1.8.5. This contains a user-visible fix for svn:externals

2013-11-25 17:52:16 +00:00

tcp_wrappers

…

tcpdump

Fix build with WITHOUT_CAPSICUM.

2013-12-21 12:45:35 +00:00

tcsh

…

telnet

…

texinfo

…

tnftp

…

top

…

traceroute

…

tzcode

tzfile.5: catch up to r204333

2013-12-16 01:58:12 +00:00

tzdata

MFV of r259624, tzdata2013i

2013-12-19 20:19:57 +00:00

unbound

…

unvis

…

vis

…

wpa

…

xz

…