src/lib, branch releng/11.3

Fix multiple vulnerabilities in unbound.

2020-07-08T20:20:59Z

Approved by: so Security: FreeBSD-SA-20:19.unbound Security: CVE-2020-12662 Security: CVE-2020-12663

Fix USB HID descriptor parsing error.

2020-06-09T16:13:54Z

Approved by: so Approved by: re (implicit) Security: FreeBSD-SA-20:17.usb Security: CVE-2020-7456

Fix libfetch buffer overflow

2020-01-28T18:55:25Z

Reported by: Duncan Overbruck Approved by: so Security: FreeBSD-SA-20:01.libfetch Security: CVE-2020-7450

Fix imprecise ordering of SSP canary initialization

2020-01-28T18:53:14Z

Submitted by: Kyle Evans Approved by: so Security: FreeBSD-EN-20:01.ssp

- Switch releng/11.3 to -RELEASE.

2019-07-04T23:58:11Z

- Add the anticipated 11.3-RELEASE date to UPDATING. - Set a static __FreeBSD_version. Approved by: re (implicit) Sponsored by: Rubicon Communications, LLC (Netgate)

Fix iconv buffer overflow.

2019-07-03T00:00:39Z

Approved by: so Approved by: re (implicit) Security: FreeBSD-SA-19:09.iconv

MFH (r313975, r315909, r317827, r344533): upgrade to latest OpenPAM

2019-06-12T01:53:14Z

Approved by: re (gjb)

MFC r348797:

2019-06-11T08:50:26Z

Fix for reading the configuration descriptor in libusb. Catch invalid configuration descriptor reads early on to avoid issues with devices that don't check for a valid USB configuration read request. Submitted by: takahiro.kurosawa@gmail.com PR: 238412 Approved by: re (kib)

MFC r348500:

2019-06-07T18:52:36Z

Partially revert r271349, which disabled the msun cexp test #4 on i386. Ensure the expected result is stored first in a volatile variable with the desired type. This makes all the tests succeed. Slightly changed from the original pull request, but functionally the same. Approved by: re (gjb) Obtained from: https://github.com/freebsd/freebsd/pull/401 Submitted by: Moritz Buhl PR: 191676

MFC r348302:

2019-06-07T02:36:26Z

Chase r261913: hardcoded default crypt(3) algorithm is SHA-512 when DES is not available. Submitted by: Ali Mashtizadeh Approved by: re (gjb)