src/usr.bin, branch releng/10.2

Fix bspatch heap overflow vulnerability. [SA-16:29]

2016-10-10T07:18:54Z

Fix multiple portsnap vulnerabilities. [SA-16:30] Fix multiple libarchive vulnerabilities. [SA-16:31] Approved by: so

Fix bspatch heap overflow vulnerability. [SA-16:25]

2016-07-25T15:04:17Z

Fix freebsd-update(8) support of FreeBSD 11.0 release distribution. [EN-16:09] Approved by: so

Fix multiple integer overflows in expat.

2015-08-18T19:30:17Z

Security: CVE-2015-1283 Security: FreeBSD-SA-15:20.expat Fix make(1) syntax errors when upgrading from 9.x and earlier. [EN-15:11] Fix incorrect netstat(1) data handling on 32-bit systems. [EN-15:12] Allow size argument to vidcontrol(1) for syscons(4). [EN-15:13] Approved by: so

Fix patch(1) shell injection vulnerability via ed(1). [SA-15:18]

2015-08-05T22:05:12Z

Fix routed remote denial of service vulnerability. [SA-15:19] Approved by: re (so blanket)

Fix patch(1) shell injection vulnerability. [SA-15:14]

2015-07-28T19:59:04Z

Fix resource exhaustion in TCP reassembly. [SA-15:15] Fix OpenSSH multiple vulnerabilities. [SA-15:16] Approved by: re (so blanket)

MFC r284636:

2015-07-23T20:00:20Z

- Add SOCK_SEQPACKET support in UNIX-domain socket. - Display zoneid using % notation in an IPv6 address. - Use nitems(). - Use sstos{in,in6,un} macros to simplify casts. - style(9). Approved by: re (gjb)

MFC r285253 (hrs):

2015-07-20T21:52:05Z

- Add IPv6 support in quota(1). While rpc.rquotad has supported PF_INET6 for a long time, quota(1) utility supported only PF_INET. - Clean up confusing changes in f_mntfromname. - Add an entry for rquotad with rpc/udp6 to inetd.conf. PR: 194084 Approved by: re (kib) Sponsored by: The FreeBSD Foundation

MFC: r285457

2015-07-20T14:40:34Z

Don't claim c99 is a wrapper around gcc; it's a wrapper around the system cc. PR: 201303 Submitted by: Bruce Cran Approved by: re (gjb)

MFC: r285028

2015-07-13T13:42:05Z

Add the year to the VAX-11/780 announcement entry. PR: 200961 Submitted by: John Marshall Approved by: re (gjb)

MFC: r279597 (and 259152,259219 as dependency)

2015-07-08T21:06:19Z

Make calendar(1) usable again. rework the calendar parser so that it is compatible with documented format: Support includes surrounded by '"' or '<' '>' Print warnings about bad syntax Correctly navigate through include directories to find calendar files Correctly support multiple includes While here: MFC: 262011 (by eadler) calendar(1): don't segfault in invalid input When the user supplies an invalid number of days provide a useful error message instead of segfaulting. Approved by: re (gjb)