Cy Schubert b266d2f206 MFV r361937: ... Upstream commit message: [PATCH 2/3] WPS UPnP: Fix event message generation using a long URL path More than about 700 character URL ended up overflowing the wpabuf used for building the event notification and this resulted in the wpabuf buffer overflow checks terminating the hostapd process. Fix this by allocating the buffer to be large enough to contain the full URL path. However, since that around 700 character limit has been the practical limit for more than ten years, start explicitly enforcing that as the limit or the callback URLs since any longer ones had not worked before and there is no need to enable them now either. Obtained from: https://w1.fi/security/2020-1/\ 0002-WPS-UPnP-Fix-event-message-generation-using-a-long-U.patch MFC after: 3 days Security: VU#339275 and CVE-2020-12695		2020-06-09 05:38:12 +00:00
..
apr	Update apr to 1.7.0. See contrib/apr/CHANGES for a summary of changes.	2020-05-31 22:12:56 +00:00
apr-util	Update apr-util to 1.6.1. See contrib/apr-util/CHANGES for a summary of	2020-06-01 10:14:45 +00:00
atf
bearssl
binutils	GNU as: move deprecation message after option parsing	2020-05-18 16:07:14 +00:00
blacklist	blacklistd.conf.5: typo/grammar fixes	2020-05-19 00:15:19 +00:00
bmake	Merge bmake-20200517	2020-05-20 22:25:46 +00:00
bsnmp	Fix immediate crash when snmpd is bound to a specific IP address.	2020-04-20 23:32:49 +00:00
byacc
bzip2	Upgrade to Bzip2 version 1.0.8.	2019-08-11 06:26:03 +00:00
capsicum-test	Really skip the tests in capsicum tests	2020-02-17 20:25:33 +00:00
com_err
cortex-strings
dialog
diff
dma
ee
elftoolchain	readelf: add more DT_FLAGS_1 flags	2020-05-31 15:31:47 +00:00
expat	MFV r355071: libbsdxml (expat) 2.2.9.	2019-11-25 07:48:16 +00:00
file	MFV r357712: file 5.38.	2020-02-11 07:02:48 +00:00
flex
gdb	[PPC64] Fix GDB sigtramp detection	2019-11-01 11:28:43 +00:00
gdtoa
googletest	googletest: pick from upstream: Don't allow signed/unsigned wchar_t in gcc 9 and later	2019-12-21 02:44:50 +00:00
hyperv/tools
ipfilter	Per-rule hit counts (-h) can be used with either -i (input) or -o (output)	2020-06-02 03:44:22 +00:00
jemalloc	Set LG_VADDR to 48 on RISC-V.	2020-05-04 17:16:30 +00:00
kyua	Revert r359385-r359387	2020-03-29 02:40:03 +00:00
ldns
ldns-host
less	MFV r349535: less v551.	2019-06-29 18:41:40 +00:00
lib9p	Import lib9p 7ddb1164407da19b9b1afb83df83ae65a71a9a66.	2020-05-14 19:57:52 +00:00
libarchive	MFV r361280:	2020-05-20 20:58:48 +00:00
libbegemot
libc-pwcache	pwcache.3: Explicitly document OOM condition	2020-05-05 17:55:45 +00:00
libc-vis
libcxxrt	Include <stdint.h> in unwind-arm.h, since it uses uint32_t and uint64_t	2019-09-13 21:00:19 +00:00
libdivsufsort
libedit	Fix arm and aarch64 builds of libedit after r352275	2019-09-14 21:49:42 +00:00
libevent
libexecinfo	Sync up with NetBSD libexecinfo changes 2014-2019	2019-10-26 06:59:59 +00:00
libgnuregex
libpcap	MFV r355890:	2019-12-21 21:05:53 +00:00
libucl
libxo	Import libxo-1.4.0:	2020-01-25 21:16:45 +00:00
llvm-project	lld: Set DF_1_PIE for -pie	2020-06-02 22:57:13 +00:00
lua
lutok	Add liblutok a lightweight C++ API for lua.	2020-03-23 18:26:23 +00:00
mandoc	Update mandoc to cvs snapshot 2019-07-23	2019-07-26 10:00:33 +00:00
mknod
mtree	mtree -O: Fix not descending on hash collisions	2019-09-12 20:46:46 +00:00
ncurses	Update to 6.2-20200215	2020-02-19 17:09:08 +00:00
netbsd-tests	Temporarily disable failing case in CI of amd64:	2020-05-18 12:36:28 +00:00
netcat	Add -M option to nc(1), which makes it print the TCP connection	2019-12-14 10:53:52 +00:00
ngatm
ntp	ntpd: fix build with -fno-common	2020-04-06 23:11:43 +00:00
nvi	vi.1: Fix a typo	2019-12-09 17:58:22 +00:00
ofed	Add ConnectX-6 DX HCA ID to libmlx5.	2019-05-08 11:04:09 +00:00
one-true-awk	Another partial revert of r301289.	2019-06-03 05:25:22 +00:00
openbsm	libauditd: make it a PRIVATELIB	2020-04-19 02:20:39 +00:00
opencsd/decoder	Remove a stale file left after merging.	2019-10-10 13:44:12 +00:00
openpam
openresolv	MFV 354917, 354918, 354919	2019-11-20 23:56:20 +00:00
opie
pam_modules/pam_passwdqc
pf
pjdfstest
pnpinfo
processor-trace	Update Intel Processor Trace decoder library.	2019-10-10 12:46:34 +00:00
sendmail	Plug possible memory leaks in the previous patch.	2020-02-27 23:06:12 +00:00
serf
smbfs	mount_smbfs: Issue a warning when .nsmbrc section name contains lowercase characters.	2020-01-03 12:54:14 +00:00
sqlite3	Fix PowerPC segfault.	2020-04-23 14:08:40 +00:00
subversion	Update Subversion to 1.14.0 LTS. See contrib/subversion/CHANGES for a	2020-06-01 10:27:05 +00:00
tcp_wrappers	Remove a duplicate global (rfc931_timeout).	2019-07-17 23:43:14 +00:00
tcpdump	MFV r353143 (phillip):	2019-12-21 21:02:50 +00:00
tcsh	MFV r359393: tcsh: import 6974bc35a5cd	2020-03-28 15:00:55 +00:00
telnet	telnet: kill off remaining duplicate definition	2020-03-28 20:43:15 +00:00
tnftp	Fix poor performance of ftp(1) due to small SO_SNDBUF and SO_RCVBUF.	2020-02-27 19:49:59 +00:00
traceroute	The variable names in the description of the port number usage is	2019-06-20 12:38:41 +00:00
tzcode	ctime.3: Use ASCII asterisks for C, not special unicode math glyphs	2020-05-22 15:30:14 +00:00
tzdata	Import tzdata 2020a	2020-04-24 05:05:58 +00:00
unbound	MFV r361322:	2020-05-21 21:00:46 +00:00
unvis
vis
wpa	MFV r361937:	2020-06-09 05:38:12 +00:00
xz	MFV r359197: xz 5.2.5.	2020-03-22 01:27:38 +00:00