PR/51278 CVS commit: pkgsrc/www/bozohttpd

["matthew green" <mrg%netbsd.org@localhost>]

The following reply was made to PR bin/51278; it has been noted by GNATS.

From: "matthew green" <mrg%netbsd.org@localhost>
To: gnats-bugs%gnats.NetBSD.org@localhost
Cc: 
Subject: PR/51278 CVS commit: pkgsrc/www/bozohttpd
Date: Wed, 18 May 2022 00:46:46 +0000

 Module Name:	pkgsrc
 Committed By:	mrg
 Date:		Wed May 18 00:46:46 UTC 2022
 
 Modified Files:
 	pkgsrc/www/bozohttpd: Makefile distinfo
 
 Log Message:
 update to bozohttpd 20220517.  changes include:
 
 o  remove obsolete .bzdirect handling.
 o  new "-m tlsversion" option to set the minimum TLS version
    available.  partially from <sunil%nimmagadda.net@localhost>.
 o  extend the list of available ciphers to include most of the
    openssl "HIGH" with some additional disables.  retain the current
    list of bad options.  should deal with PR#51278.
 o  don't assume host BUFSIZ is sufficient.  small BUFSIZ leads to
    always happens errors in the testsuite.  switch all these buffers
    to be 4KiB sized.  reported by embr <git%liclac.eu@localhost>
 o  fix a denial of service attack against initial request contents,
    now bounded at 16KiB.  reported by Justin Parrott in PR#56085
 o  new support for content types: .tar.bz2, .tar.xz, .tar.lz,
    .tar.zst, .tbz2, .txz, .tlz, .zipx, .xz, .zst, .sz, .lz, .lzma,
    .lzo, .7z, .lzo, .cab, .dmg, .jar, and .rar.  should fix
    netbsd PR#56026:
    MIME type of .tar.xz file on ny{cdn,ftp}.NetBSD.org is invalid
 o  fix various NULL derefs from malformed headers.  mostly from
    <emily@ingalls.rocks>.
 o  fix memory leaks in library interface: add bozo_cleanup().
 
 
 To generate a diff of this commit:
 cvs rdiff -u -r1.97 -r1.98 pkgsrc/www/bozohttpd/Makefile
 cvs rdiff -u -r1.76 -r1.77 pkgsrc/www/bozohttpd/distinfo
 
 Please note that diffs are not public domain; they are subject to the
 copyright notices on the relevant files.