 @@ -1,1000 +1,1000 @@
-# $NetBSD: CHANGES-7.0.3,v 1.1.2.155 2019/11/25 15:49:05 martin Exp $
+# $NetBSD: CHANGES-7.0.3,v 1.1.2.156 2019/12/05 16:23:51 bouyer Exp $
 A complete list of changes from the NetBSD 7.0.2 release to the NetBSD 7.0.3
 release:
 gnu/usr.bin/groff/tmac/mdoc.local		patched by hand
 sys/sys/param.h					patched by hand
 	Welcome to 7.0.2_PATCH.
 	[snj]
 sys/arch/amd64/conf/std.xen			1.8
 sys/arch/xen/conf/std.xen			1.8
 	Make Xen process and file limits match the native ones.
 	[joerg, ticket #1258]
 etc/namedb/root.cache				1.22
 	Update root.cache to 2016102001 (October 20, 2016).
 	[taca, ticket #1267]
 sys/kern/uipc_usrreq.c				1.181
 	Fix a memory leak.
 	[maxv, ticket #1268]
 sys/arch/alpha/alpha/machdep.c			1.347
 sys/arch/alpha/alpha/prom.c			1.49
 sys/arch/alpha/stand/common/booted_dev.c	1.4
 sys/arch/alpha/stand/common/prom.c		1.15
 	Match the two prom_getenv() and fix buffer overflow causing
 	wrong host controller SCSI ID for DEC 3000.
 	[flxd, ticket #1269]
 doc/3RDPARTY					1.1374 via patch
 external/bsd/bind/Makefile.inc                  up to 1.24 via patch
 external/bsd/bind/bin/delv/Makefile             up to 1.3
 external/bsd/bind/bin/dig/Makefile              up to 1.2
 external/bsd/bind/bin/dnssec/Makefile.inc       up to 1.2
 external/bsd/bind/bin/host/Makefile             up to 1.2
 external/bsd/bind/bin/named/Makefile            up to 1.10
 external/bsd/bind/bin/nslookup/Makefile         up to 1.3
 external/bsd/bind/bin/nsupdate/Makefile         up to 1.3
 external/bsd/bind/bin/rndc/Makefile             up to 1.2
 external/bsd/bind/bin/tools/Makefile.inc        up to 1.2
 external/bsd/bind/dist/CHANGES                  up to 1.23
 external/bsd/bind/dist/README                   up to 1.11
 external/bsd/bind/dist/doc/arm/Bv9ARM.ch01.html up to 1.1.1.21
 external/bsd/bind/dist/doc/arm/Bv9ARM.ch02.html up to 1.1.1.18
 external/bsd/bind/dist/doc/arm/Bv9ARM.ch03.html up to 1.1.1.23
 external/bsd/bind/dist/doc/arm/Bv9ARM.ch04.html up to 1.11
 external/bsd/bind/dist/doc/arm/Bv9ARM.ch05.html up to 1.1.1.24
 external/bsd/bind/dist/doc/arm/Bv9ARM.ch06.html up to 1.11
 external/bsd/bind/dist/doc/arm/Bv9ARM.ch07.html up to 1.11
 external/bsd/bind/dist/doc/arm/Bv9ARM.ch08.html up to 1.11
 external/bsd/bind/dist/doc/arm/Bv9ARM.ch09.html up to 1.11
 external/bsd/bind/dist/doc/arm/Bv9ARM.ch10.html up to 1.1.1.20
 external/bsd/bind/dist/doc/arm/Bv9ARM.ch11.html up to 1.1.1.9
 external/bsd/bind/dist/doc/arm/Bv9ARM.ch12.html up to 1.1.1.9
 external/bsd/bind/dist/doc/arm/Bv9ARM.ch13.html up to 1.1.1.9
 external/bsd/bind/dist/doc/arm/Bv9ARM.html      up to 1.11
 external/bsd/bind/dist/doc/arm/Bv9ARM.pdf       up to 1.17
 external/bsd/bind/dist/doc/arm/man.arpaname.html up to 1.11
 external/bsd/bind/dist/doc/arm/man.ddns-confgen.html up to 1.11
 external/bsd/bind/dist/doc/arm/man.delv.html    up to 1.11
 external/bsd/bind/dist/doc/arm/man.dig.html     up to 1.11
 external/bsd/bind/dist/doc/arm/man.dnssec-checkds.html up to 1.11
 external/bsd/bind/dist/doc/arm/man.dnssec-coverage.html up to 1.11
 external/bsd/bind/dist/doc/arm/man.dnssec-dsfromkey.html up to 1.11
 external/bsd/bind/dist/doc/arm/man.dnssec-importkey.html up to 1.11
 external/bsd/bind/dist/doc/arm/man.dnssec-keyfromlabel.html up to 1.11
 external/bsd/bind/dist/doc/arm/man.dnssec-keygen.html up to 1.11
 external/bsd/bind/dist/doc/arm/man.dnssec-revoke.html up to 1.11
 external/bsd/bind/dist/doc/arm/man.dnssec-settime.html up to 1.11
 external/bsd/bind/dist/doc/arm/man.dnssec-signzone.html up to 1.11
 external/bsd/bind/dist/doc/arm/man.dnssec-verify.html up to 1.11
 external/bsd/bind/dist/doc/arm/man.genrandom.html up to 1.11
 external/bsd/bind/dist/doc/arm/man.host.html    up to 1.11
 external/bsd/bind/dist/doc/arm/man.isc-hmac-fixup.html up to 1.11
 external/bsd/bind/dist/doc/arm/man.lwresd.html  up to 1.1.1.3
 external/bsd/bind/dist/doc/arm/man.named-checkconf.html up to 1.11
 external/bsd/bind/dist/doc/arm/man.named-checkzone.html up to 1.11
 external/bsd/bind/dist/doc/arm/man.named-journalprint.html up to 1.11
 external/bsd/bind/dist/doc/arm/man.named-rrchecker.html up to 1.11
 external/bsd/bind/dist/doc/arm/man.named.conf.html up to 1.1.1.3
 external/bsd/bind/dist/doc/arm/man.named.html   up to 1.11
 external/bsd/bind/dist/doc/arm/man.nsec3hash.html up to 1.11
 external/bsd/bind/dist/doc/arm/man.nsupdate.html up to 1.11
 external/bsd/bind/dist/doc/arm/man.rndc-confgen.html up to 1.11
 external/bsd/bind/dist/doc/arm/man.rndc.conf.html up to 1.11
 external/bsd/bind/dist/doc/arm/man.rndc.html    up to 1.11
 external/bsd/bind/dist/doc/arm/notes.html       up to 1.1.1.9
 external/bsd/bind/dist/doc/arm/notes.pdf        up to 1.1.1.9
 external/bsd/bind/dist/doc/arm/notes.xml        up to 1.1.1.9
 external/bsd/bind/dist/lib/dns/api              up to 1.11
 external/bsd/bind/dist/lib/dns/resolver.c       up to 1.27
 external/bsd/bind/dist/srcid                    up to 1.17
 external/bsd/bind/dist/version                  up to 1.21
 external/bsd/bind/include/isc/platform.h        up to 1.22 via patch
 external/bsd/bind/lib/libbind9/Makefile         up to 1.3
 	Update BIND to 9.10.4-P4.  Fixes CVE-2016-8864.
 	[snj, ticket #1271]
 lib/libc/gen/glob.c				1.36
 	Bump the glob limits to 512KB for total string size and 64K
 	path entries.
 	[joerg, ticket #1247]
 external/bsd/dhcp/dist/common/packet.c		1.2
 	Check correctly the packet length (CVE-2015-8605)
 	[snj, ticket #1273]
 sys/external/bsd/drm2/dist/drm/drm_gem.c	1.6
 	Avoid zero-size uao.
 	[maya, ticket #1272]
 etc/rc.d/rtadvd					1.9
 	Don't fail to start if rtadvd's config file doesn't exist.
 	[kre, ticket #1274]
 sys/arch/mips/include/vmparam.h			1.57
 TB is enough UVA for anyone... plus not all MIPS cpus can support
 	more.
 	[mrg, ticket #1275]
 sys/uvm/pmap/pmap_segtab.c			1.4 (via patch)
 	Fix the start index generation in pmap_segtab_release() to
 	ensure it fits in the actual array.
 	[mrg, ticket #1275]
 sys/external/bsd/drm2/drm/drm_vma_manager.c	1.5
 	Lock the manager and not just the node for inserting/removing nodes.
 	[maya, ticket #1277]
 sys/net/if_vlan.c				1.92
 	Don't check parent capabilities when a parent interface hasn't been
 	assigned.
 	[joerg, ticket #1279]
 lib/libc/stdio/funopen.c			1.15
 	PR/51572: calling funopen on each printw call is a tad excessive,
 	but this is not a reason for funopen to leak. Always call the
 	close function since we are indirecting through our cookie and
 	we need to free it.
 	[mrg, ticket #1303]
 sys/kern/subr_xcall.c				1.19
 	Fix a race condition of low priority xcall.  PR kern/51632.
 	[ozaki-r, ticket #1306]
 usr.sbin/mld6query/mld6.c			1.15
 	PR/51353: Patrick Mackey: mld6query "-r" option is not recognised
 	[riastradh, ticket #1308]
 lib/libc/time/private.h				patch
 lib/libc/time/zic.c				patch
 	Make zic properly parse newer tzdata files.
 	[kre, ticket #1323]
 distrib/sets/lists/base/mi			1.1125, 1.1128, 1.1132, 1.1137, 1.1139, 1.1140
 doc/3RDPARTY					patch
 external/public-domain/tz/dist/CONTRIBUTING     up to 1.1.1.3
 external/public-domain/tz/dist/LICENSE          up to 1.1.1.2
 external/public-domain/tz/dist/Makefile         up to 1.1.1.16
 external/public-domain/tz/dist/NEWS             up to 1.1.1.16
 external/public-domain/tz/dist/README           up to 1.1.1.5
 external/public-domain/tz/dist/TZDATA_VERSION   up to 1.6
 external/public-domain/tz/dist/Theory           up to 1.1.1.9
 external/public-domain/tz/dist/africa           up to 1.1.1.9
 external/public-domain/tz/dist/antarctica       up to 1.1.1.7
 external/public-domain/tz/dist/asia             up to 1.1.1.15
 external/public-domain/tz/dist/australasia      up to 1.1.1.10
 external/public-domain/tz/dist/backward         up to 1.1.1.6
 external/public-domain/tz/dist/backzone         up to 1.1.1.10
 external/public-domain/tz/dist/etcetera         up to 1.1.1.2
 external/public-domain/tz/dist/europe           up to 1.1.1.16
 external/public-domain/tz/dist/factory          up to 1.1.1.2
 external/public-domain/tz/dist/iso3166.tab      up to 1.1.1.4
 external/public-domain/tz/dist/leap-seconds.list up to 1.1.1.6
 external/public-domain/tz/dist/leapseconds      up to 1.1.1.7
 external/public-domain/tz/dist/northamerica     up to 1.1.1.14
 external/public-domain/tz/dist/southamerica     up to 1.1.1.10
 external/public-domain/tz/dist/version          up to 1.1.1.3
 external/public-domain/tz/dist/zone.tab         up to 1.1.1.10
 external/public-domain/tz/dist/zone1970.tab     up to 1.1.1.12
 external/public-domain/tz/share/zoneinfo/Makefile up to 1.3
 external/public-domain/tz/tzdata2netbsd         up to 1.11
 	Update tzdata to 2016j.
 	[kre, ticket #1324]
 sys/arch/x86/include/pmap.h			1.61
 sys/arch/x86/x86/pmap.c				1.223
 sys/arch/x86/x86/vm_machdep.c			1.26
 	PR/49691: KAMADA Ken'ichi: free deferred ptp mappings if present.
 	[riastradh, ticket #1316]
 sbin/ping/ping.c				1.113
 	PR bin/36997 Zafer Aydogan: ping doesn't validate numeric inputs
 	enough.
 	[dholland, ticket #1333]
 common/lib/libc/stdlib/_strtoul.h		1.10
 	Set *endptr in all paths out of strtoul and family.
 	[riastradh, ticket #1310]
 libexec/httpd/CHANGES				1.23, 1.24
 libexec/httpd/bozohttpd.8			1.60-1.62
 libexec/httpd/bozohttpd.c			1.81-1.84
 libexec/httpd/bozohttpd.h			1.46
 libexec/httpd/cgi-bozo.c			1.35
 libexec/httpd/content-bozo.c			1.14
 libexec/httpd/main.c				1.14-1.16
 libexec/httpd/testsuite/Makefile		1.6
 libexec/httpd/testsuite/test-bigfile		1.3
 libexec/httpd/testsuite/test-simple		1.1, 1.2
 	update bozohttpd to 20160720:
 	- fix memory leak
 	- addd -G option to display version
 	- fix some content type issues
 	- fix issues in testsuite
 	[mrg, ticket #1309]
 sys/arch/amd64/amd64/copy.S			patch
 	suword: Don't allow 4 bytes to overflow beyond the userland space.
 	[maxv, ticket #1278]
 sys/netinet/tcp_congctl.c			1.23
 	Restore behaviour to pre- tcp_congctl.c:1.18 for SACK.
 	PR/51753 tcp SACK causes SSH disconnect.
 	[skrll, ticket #1347]
 doc/3RDPARTY					1.1397 via patch
 external/bsd/bind/Makefile.inc                  up to 1.24 via patch
 external/bsd/bind/dist/CHANGES                  up to 1.24
 external/bsd/bind/dist/README                   up to 1.12
 external/bsd/bind/dist/bin/tests/system/dname/ns2/example.db up to 1.1.1.3
 external/bsd/bind/dist/bin/tests/system/dname/tests.sh up to 1.1.1.4
 external/bsd/bind/dist/contrib/zkt-1.1.2/examples/flat/zkt-ls delete
 external/bsd/bind/dist/contrib/zkt-1.1.2/examples/flat/zkt-signer delete
 external/bsd/bind/dist/contrib/zkt-1.1.2/examples/hierarchical/zkt-ls delete
 external/bsd/bind/dist/contrib/zkt-1.1.2/examples/hierarchical/zkt-signer delete
 external/bsd/bind/dist/doc/arm/Bv9ARM.ch01.html up to 1.1.1.22
 external/bsd/bind/dist/doc/arm/Bv9ARM.ch02.html up to 1.1.1.19
 external/bsd/bind/dist/doc/arm/Bv9ARM.ch03.html up to 1.1.1.24
 external/bsd/bind/dist/doc/arm/Bv9ARM.ch04.html up to 1.12
 external/bsd/bind/dist/doc/arm/Bv9ARM.ch05.html up to 1.1.1.25
 external/bsd/bind/dist/doc/arm/Bv9ARM.ch06.html up to 1.12
 external/bsd/bind/dist/doc/arm/Bv9ARM.ch07.html up to 1.12
 external/bsd/bind/dist/doc/arm/Bv9ARM.ch08.html up to 1.12
 external/bsd/bind/dist/doc/arm/Bv9ARM.ch09.html up to 1.12
 external/bsd/bind/dist/doc/arm/Bv9ARM.ch10.html up to 1.1.1.21
 external/bsd/bind/dist/doc/arm/Bv9ARM.ch11.html up to 1.1.1.10
 external/bsd/bind/dist/doc/arm/Bv9ARM.ch12.html up to 1.1.1.10
 external/bsd/bind/dist/doc/arm/Bv9ARM.ch13.html up to 1.1.1.10
 external/bsd/bind/dist/doc/arm/Bv9ARM.html      up to 1.12
 external/bsd/bind/dist/doc/arm/man.arpaname.html up to 1.12
 external/bsd/bind/dist/doc/arm/man.ddns-confgen.html up to 1.12
 external/bsd/bind/dist/doc/arm/man.delv.html    up to 1.12
 external/bsd/bind/dist/doc/arm/man.dig.html     up to 1.12
 external/bsd/bind/dist/doc/arm/man.dnssec-checkds.html up to 1.12
 external/bsd/bind/dist/doc/arm/man.dnssec-coverage.html up to 1.12
 external/bsd/bind/dist/doc/arm/man.dnssec-dsfromkey.html up to 1.12
 external/bsd/bind/dist/doc/arm/man.dnssec-importkey.html up to 1.12
 external/bsd/bind/dist/doc/arm/man.dnssec-keyfromlabel.html up to 1.12
 external/bsd/bind/dist/doc/arm/man.dnssec-keygen.html up to 1.12
 external/bsd/bind/dist/doc/arm/man.dnssec-revoke.html up to 1.12
 external/bsd/bind/dist/doc/arm/man.dnssec-settime.html up to 1.12
 external/bsd/bind/dist/doc/arm/man.dnssec-signzone.html up to 1.12
 external/bsd/bind/dist/doc/arm/man.dnssec-verify.html up to 1.12
 external/bsd/bind/dist/doc/arm/man.genrandom.html up to 1.12
 external/bsd/bind/dist/doc/arm/man.host.html    up to 1.12
 external/bsd/bind/dist/doc/arm/man.isc-hmac-fixup.html up to 1.12
 external/bsd/bind/dist/doc/arm/man.lwresd.html  up to 1.1.1.4
 external/bsd/bind/dist/doc/arm/man.named-checkconf.html up to 1.12
 external/bsd/bind/dist/doc/arm/man.named-checkzone.html up to 1.12
 external/bsd/bind/dist/doc/arm/man.named-journalprint.html up to 1.12
 external/bsd/bind/dist/doc/arm/man.named-rrchecker.html up to 1.12
 external/bsd/bind/dist/doc/arm/man.named.conf.html up to 1.1.1.4
 external/bsd/bind/dist/doc/arm/man.named.html   up to 1.12
 external/bsd/bind/dist/doc/arm/man.nsec3hash.html up to 1.12
 external/bsd/bind/dist/doc/arm/man.nsupdate.html up to 1.12
 external/bsd/bind/dist/doc/arm/man.rndc-confgen.html up to 1.12
 external/bsd/bind/dist/doc/arm/man.rndc.conf.html up to 1.12
 external/bsd/bind/dist/doc/arm/man.rndc.html    up to 1.12
 external/bsd/bind/dist/doc/arm/notes.html       up to 1.1.1.10
 external/bsd/bind/dist/doc/arm/notes.pdf        up to 1.1.1.10
 external/bsd/bind/dist/doc/arm/notes.xml        up to 1.1.1.10
 external/bsd/bind/dist/lib/dns/api              up to 1.12
 external/bsd/bind/dist/lib/dns/message.c        up to 1.21
 external/bsd/bind/dist/lib/dns/resolver.c       up to 1.28
 external/bsd/bind/dist/lib/isc/api              up to 1.1.1.21
 external/bsd/bind/dist/lib/isc/unix/socket.c    up to 1.20
 external/bsd/bind/dist/lib/isc/win32/socket.c   up to 1.12
 external/bsd/bind/dist/srcid                    up to 1.18
 external/bsd/bind/dist/version                  up to 1.22
 external/bsd/bind/include/isc/platform.h        up to 1.22 via patch
 	Update BIND to 9.10.4-P5, fixing CVE-2016-9131,
 	CVE-2016-9147, and CVE-2016-9444.
 	[snj, ticket #1348]
 crypto/external/bsd/openssh/dist/moduli		up to 1.8
 	Update moduli file.
 	[aymeric/agc, ticket #1318]
 sys/external/bsd/drm2/dist/drm/ttm/ttm_tt.c	1.8
 	Guarantee no zero-size uao/kmem allocations via ttm.
 	[maya, ticket #1350]
 sys/net/if_arcsubr.c				1.76 via patch
 sys/net/if_ecosubr.c				1.50 via patch
 sys/net/if_ethersubr.c				1.236 via patch
 sys/net/if_fddisubr.c				1.104 via patch
 sys/net/if_tokensubr.c				1.80 via patch
 	Don't leak an mbuf in the ARP reply
 	[maxv, ticket #1355]
 sys/netinet/if_arp.c				1.238, 1.239 via patch
 	Add checks on the ARP header
 	[maxv, ticket #1356]
 crypto/external/bsd/openssl/dist/crypto/ecdsa/ecs_ossl.c patch
 crypto/external/bsd/openssl/dist/crypto/evp/e_rc4_hmac_md5.c patch
 	Fix CVE-2016-7056 and CVE-2017-3731.
 	[spz, ticket #1352]
 libexec/httpd/CHANGES				1.25
 libexec/httpd/bozohttpd.8			1.63-1.65
 libexec/httpd/bozohttpd.c			1.85, 1.86
 libexec/httpd/bozohttpd.h			1.47
 libexec/httpd/cgi-bozo.c			1.36, 1.37
 libexec/httpd/libbozohttpd/libbozohttpd.3	1.4
 libexec/httpd/testsuite/Makefile		1.7
 libexec/httpd/testsuite/cgi-bin/empty		1.1
 libexec/httpd/testsuite/html_cmp		1.5
 libexec/httpd/testsuite/t11.in			1.1
 libexec/httpd/testsuite/t11.out			1.1
 libexec/httpd/testsuite/test-bigfile		1.4
 libexec/httpd/testsuite/test-simple		1.3, 1.4
 	Update bozohttpd to 20170201:
 	- fix an infinite loop in cgi processing
 	- fixes and clean up for the testsuite
 	- no longer sends encoding header for compressed formats
 	[mrg, ticket #1357]
 sys/compat/linux/arch/amd64/linux_machdep.c	1.50, 1.51
 	Don't let userland choose %rip.
 	[maxv, ticket #1359]
 doc/3RDPARTY					1.398, 1.407
 external/mit/expat/dist/CMake.README            up to 1.1.1.3
 external/mit/expat/dist/CMakeLists.txt          up to 1.1.1.3
 external/mit/expat/dist/COPYING                 up to 1.1.1.2
 external/mit/expat/dist/Changes                 up to 1.1.1.4
 external/mit/expat/dist/MANIFEST                up to 1.1.1.4
 external/mit/expat/dist/Makefile.in             up to 1.1.1.4
 external/mit/expat/dist/README                  up to 1.1.1.4
 external/mit/expat/dist/aclocal.m4              up to 1.1.1.3
 external/mit/expat/dist/bcb5/expat.bpr          up to 1.1.1.3
 external/mit/expat/dist/bcb5/expat.mak          up to 1.1.1.2
 external/mit/expat/dist/bcb5/expat_static.bpr   up to 1.1.1.3
 external/mit/expat/dist/bcb5/expat_static.mak   up to 1.1.1.2
 external/mit/expat/dist/bcb5/expatw.bpr         up to 1.1.1.3
 external/mit/expat/dist/bcb5/expatw.mak         up to 1.1.1.2
 external/mit/expat/dist/bcb5/expatw_static.bpr  up to 1.1.1.3
 external/mit/expat/dist/bcb5/expatw_static.mak  up to 1.1.1.2
 external/mit/expat/dist/bcb5/xmlwf.bpr          up to 1.1.1.3
 external/mit/expat/dist/bcb5/xmlwf.mak          up to 1.1.1.2
 external/mit/expat/dist/configure               up to 1.1.1.4
 external/mit/expat/dist/configure.ac            up to 1.1.1.2
 external/mit/expat/dist/conftools/config.guess  up to 1.3
 external/mit/expat/dist/conftools/config.sub    up to 1.3
 external/mit/expat/dist/conftools/install-sh    up to 1.1.1.4
 external/mit/expat/dist/conftools/ltmain.sh     up to 1.1.1.4
 external/mit/expat/dist/doc/expat.png           up to 1.1.1.2
 external/mit/expat/dist/doc/valid-xhtml10.png   up to 1.1.1.2
 external/mit/expat/dist/doc/xmlwf.1             up to 1.1.1.3
 external/mit/expat/dist/doc/xmlwf.sgml          delete
 external/mit/expat/dist/doc/xmlwf.xml           up to 1.1.1.1
 external/mit/expat/dist/examples/elements.c     up to 1.1.1.3
 external/mit/expat/dist/examples/outline.c      up to 1.1.1.2
 external/mit/expat/dist/expat_config.h.in       up to 1.1.1.4
 external/mit/expat/dist/lib/expat.dsp           up to 1.1.1.3
 external/mit/expat/dist/lib/expat.h             up to 1.1.1.4
 external/mit/expat/dist/lib/expat_external.h    up to 1.1.1.2
 external/mit/expat/dist/lib/expat_static.dsp    up to 1.1.1.3
 external/mit/expat/dist/lib/expatw.dsp          up to 1.1.1.3
 external/mit/expat/dist/lib/expatw_static.dsp   up to 1.1.1.2
 external/mit/expat/dist/lib/internal.h          up to 1.1.1.2
 external/mit/expat/dist/lib/xmlparse.c          up to 1.6
 external/mit/expat/dist/lib/xmlrole.c           up to 1.1.1.3
 external/mit/expat/dist/lib/xmltok.c            up to 1.3
 external/mit/expat/dist/lib/xmltok_impl.c       up to 1.5
 external/mit/expat/dist/m4/libtool.m4           up to 1.1.1.3
 external/mit/expat/dist/m4/ltoptions.m4         up to 1.1.1.3
 external/mit/expat/dist/m4/ltsugar.m4           up to 1.1.1.2
 external/mit/expat/dist/m4/ltversion.m4         up to 1.1.1.3
 external/mit/expat/dist/m4/lt~obsolete.m4       up to 1.1.1.2
 external/mit/expat/dist/tests/chardata.c        up to 1.1.1.3
 external/mit/expat/dist/tests/minicheck.c       up to 1.1.1.2
 external/mit/expat/dist/tests/minicheck.h       up to 1.1.1.3
 external/mit/expat/dist/tests/runtests.c        up to 1.1.1.3
 external/mit/expat/dist/tests/xmltest.sh        up to 1.2
 external/mit/expat/dist/win32/README.txt        up to 1.1.1.3
 external/mit/expat/dist/win32/expat.iss         up to 1.1.1.4
 external/mit/expat/dist/xmlwf/codepage.c        up to 1.1.1.2
 external/mit/expat/dist/xmlwf/readfilemap.c     up to 1.1.1.3
 external/mit/expat/dist/xmlwf/xmlfile.c         up to 1.1.1.2
 external/mit/expat/dist/xmlwf/xmlwf.c           up to 1.1.1.4
 external/mit/expat/dist/xmlwf/xmlwf.dsp         up to 1.1.1.3
 external/mit/expat/lib/libexpat/expat_config.h  up to 1.4
 	Update expat to 2.2.0, fixing CVE-2016-0718, CVE-2016-4472,
 	CVE-2016-5300, and CVE-2012-6702.
 	[spz, ticket #1361]
 doc/3RDPARTY					patch
 external/bsd/tcpdump/bin/Makefile               up to 1.18
 external/bsd/tcpdump/dist/CHANGES               up to 1.1.1.7
 external/bsd/tcpdump/dist/CONTRIBUTING          up to 1.1.1.1
 external/bsd/tcpdump/dist/CREDITS               up to 1.1.1.7
 external/bsd/tcpdump/dist/INSTALL.txt           up to 1.1.1.6
 external/bsd/tcpdump/dist/Makefile.in           up to 1.1.1.7
 external/bsd/tcpdump/dist/PLATFORMS             up to 1.1.1.1
 external/bsd/tcpdump/dist/README                up to 1.3
 external/bsd/tcpdump/dist/README.md             up to 1.1.1.2
 external/bsd/tcpdump/dist/VERSION               up to 1.1.1.7
 external/bsd/tcpdump/dist/aclocal.m4            up to 1.1.1.7
 external/bsd/tcpdump/dist/addrtoname.c          up to 1.9
 external/bsd/tcpdump/dist/addrtoname.h          up to 1.1.1.5
 external/bsd/tcpdump/dist/addrtostr.c           up to 1.3
 external/bsd/tcpdump/dist/addrtostr.h           up to 1.1.1.1
 external/bsd/tcpdump/dist/af.c                  up to 1.5
 external/bsd/tcpdump/dist/af.h                  up to 1.1.1.4
 external/bsd/tcpdump/dist/ah.h                  up to 1.3
 external/bsd/tcpdump/dist/aodv.h                delete
 external/bsd/tcpdump/dist/appletalk.h           up to 1.1.1.3
 external/bsd/tcpdump/dist/arcnet.h              delete
 external/bsd/tcpdump/dist/ascii_strcasecmp.c    up to 1.2
 external/bsd/tcpdump/dist/ascii_strcasecmp.h    up to 1.1.1.1
 external/bsd/tcpdump/dist/atm.h                 up to 1.1.1.3
 external/bsd/tcpdump/dist/atmuni31.h            delete
 external/bsd/tcpdump/dist/bgp.h                 delete
 external/bsd/tcpdump/dist/bootp.h               delete
 external/bsd/tcpdump/dist/bpf_dump.c            up to 1.5
 external/bsd/tcpdump/dist/chdlc.h               up to 1.1.1.3
 external/bsd/tcpdump/dist/checksum.c            up to 1.6
 external/bsd/tcpdump/dist/config.guess          up to 1.2
 external/bsd/tcpdump/dist/config.h.in           up to 1.1.1.6
 external/bsd/tcpdump/dist/config.sub            up to 1.2
 external/bsd/tcpdump/dist/configure             up to 1.8
 external/bsd/tcpdump/dist/configure.in          up to 1.8
 external/bsd/tcpdump/dist/cpack.c               up to 1.6
 external/bsd/tcpdump/dist/cpack.h               up to 1.6
 external/bsd/tcpdump/dist/dccp.h                delete
 external/bsd/tcpdump/dist/decnet.h              delete
 external/bsd/tcpdump/dist/decode_prefix.h       delete
 external/bsd/tcpdump/dist/enc.h                 delete
 external/bsd/tcpdump/dist/esp.h                 delete
 external/bsd/tcpdump/dist/ether.h               up to 1.5
 external/bsd/tcpdump/dist/ethertype.h           up to 1.1.1.5
 external/bsd/tcpdump/dist/extract.h             up to 1.7
 external/bsd/tcpdump/dist/fddi.h                delete
 external/bsd/tcpdump/dist/getopt_long.h         up to 1.1.1.1
 external/bsd/tcpdump/dist/gmpls.c               up to 1.5
 external/bsd/tcpdump/dist/gmpls.h               up to 1.1.1.3
 external/bsd/tcpdump/dist/gmt2local.c           up to 1.5
 external/bsd/tcpdump/dist/gmt2local.h           up to 1.1.1.3
 external/bsd/tcpdump/dist/icmp6.h               delete
 external/bsd/tcpdump/dist/ieee802_11.h          delete
 external/bsd/tcpdump/dist/ieee802_11_radio.h    delete
 external/bsd/tcpdump/dist/igrp.h                delete
 external/bsd/tcpdump/dist/in_cksum.c            up to 1.2
 external/bsd/tcpdump/dist/install-sh            up to 1.1.1.2
 external/bsd/tcpdump/dist/interface.h           up to 1.8
 external/bsd/tcpdump/dist/ip.h                  up to 1.6
 external/bsd/tcpdump/dist/ip6.h                 up to 1.5
 external/bsd/tcpdump/dist/ipfc.h                delete
 external/bsd/tcpdump/dist/ipnet.h               delete
 external/bsd/tcpdump/dist/ipproto.c             up to 1.5
 external/bsd/tcpdump/dist/ipproto.h             up to 1.4
 external/bsd/tcpdump/dist/ipsec_doi.h           delete
 external/bsd/tcpdump/dist/ipx.h                 delete
 external/bsd/tcpdump/dist/isakmp.h              delete
 external/bsd/tcpdump/dist/l2tp.h                delete
 external/bsd/tcpdump/dist/l2vpn.c               up to 1.6
 external/bsd/tcpdump/dist/l2vpn.h               up to 1.1.1.4
 external/bsd/tcpdump/dist/lane.h                delete
 external/bsd/tcpdump/dist/lbl/os-osf4.h         up to 1.1.1.3
 external/bsd/tcpdump/dist/lbl/os-solaris2.h     up to 1.1.1.4
 external/bsd/tcpdump/dist/lbl/os-sunos4.h       up to 1.1.1.4
 external/bsd/tcpdump/dist/lbl/os-ultrix4.h      up to 1.1.1.4
 external/bsd/tcpdump/dist/llc.h                 up to 1.1.1.4
 external/bsd/tcpdump/dist/machdep.c             up to 1.7
 external/bsd/tcpdump/dist/machdep.h             up to 1.1.1.4
 external/bsd/tcpdump/dist/makemib               up to 1.1.1.3
 external/bsd/tcpdump/dist/mib.h                 up to 1.1.1.2
 external/bsd/tcpdump/dist/missing/addrinfo.h    delete
 external/bsd/tcpdump/dist/missing/datalinks.c   up to 1.1.1.4
 external/bsd/tcpdump/dist/missing/dlnames.c     up to 1.1.1.4
 external/bsd/tcpdump/dist/missing/getnameinfo.c delete
 external/bsd/tcpdump/dist/missing/getopt_long.c up to 1.1.1.1
 external/bsd/tcpdump/dist/missing/inet_aton.c   delete
 external/bsd/tcpdump/dist/missing/inet_ntop.c   delete
 external/bsd/tcpdump/dist/missing/inet_pton.c   delete
 external/bsd/tcpdump/dist/missing/snprintf.c    up to 1.1.1.4
 external/bsd/tcpdump/dist/missing/sockstorage.h delete
 external/bsd/tcpdump/dist/missing/strdup.c      up to 1.1.1.4
 external/bsd/tcpdump/dist/missing/strlcat.c     up to 1.1.1.4
 external/bsd/tcpdump/dist/missing/strlcpy.c     up to 1.1.1.4
 external/bsd/tcpdump/dist/missing/strsep.c      up to 1.1.1.5
 external/bsd/tcpdump/dist/mkdep                 up to 1.1.1.3
 external/bsd/tcpdump/dist/mpls.h                up to 1.1.1.3
 external/bsd/tcpdump/dist/mptcp.h               delete
 external/bsd/tcpdump/dist/nameser.h             up to 1.5
 external/bsd/tcpdump/dist/netbios.h             delete
 external/bsd/tcpdump/dist/netdissect-stdinc.h   up to 1.2
 external/bsd/tcpdump/dist/netdissect.c          up to 1.2
 external/bsd/tcpdump/dist/netdissect.h          up to 1.5
 external/bsd/tcpdump/dist/nflog.h               delete
 external/bsd/tcpdump/dist/nfs.h                 up to 1.4
 external/bsd/tcpdump/dist/nfsfh.h               up to 1.1.1.5
 external/bsd/tcpdump/dist/nlpid.c               up to 1.6
 external/bsd/tcpdump/dist/nlpid.h               up to 1.1.1.4
 external/bsd/tcpdump/dist/ntp.h                 delete
 external/bsd/tcpdump/dist/oakley.h              delete
 external/bsd/tcpdump/dist/openflow.h            up to 1.1.1.3
 external/bsd/tcpdump/dist/ospf.h                up to 1.1.1.3
 external/bsd/tcpdump/dist/ospf6.h               delete
 external/bsd/tcpdump/dist/oui.c                 up to 1.7
 external/bsd/tcpdump/dist/oui.h                 up to 1.1.1.5
 external/bsd/tcpdump/dist/parsenfsfh.c          up to 1.8
 external/bsd/tcpdump/dist/pcap-missing.h        up to 1.1.1.4
 external/bsd/tcpdump/dist/pcap_dump_ftell.c     up to 1.4
 external/bsd/tcpdump/dist/pmap_prot.h           delete
 external/bsd/tcpdump/dist/ppi.h                 delete
 external/bsd/tcpdump/dist/ppp.h                 up to 1.1.1.4
 external/bsd/tcpdump/dist/print-802_11.c        up to 1.7
 external/bsd/tcpdump/dist/print-802_15_4.c      up to 1.3
 external/bsd/tcpdump/dist/print-ah.c            up to 1.6
 external/bsd/tcpdump/dist/print-ahcp.c          up to 1.5
 external/bsd/tcpdump/dist/print-aodv.c          up to 1.7
 external/bsd/tcpdump/dist/print-aoe.c           up to 1.4
 external/bsd/tcpdump/dist/print-ap1394.c        up to 1.6
 external/bsd/tcpdump/dist/print-arcnet.c        up to 1.8
 external/bsd/tcpdump/dist/print-arp.c           up to 1.8
 external/bsd/tcpdump/dist/print-ascii.c         up to 1.7
 external/bsd/tcpdump/dist/print-atalk.c         up to 1.7
 external/bsd/tcpdump/dist/print-atm.c           up to 1.8
 external/bsd/tcpdump/dist/print-babel.c         up to 1.3
 external/bsd/tcpdump/dist/print-beep.c          up to 1.6
 external/bsd/tcpdump/dist/print-bfd.c           up to 1.6
 external/bsd/tcpdump/dist/print-bgp.c           up to 1.8
 external/bsd/tcpdump/dist/print-bootp.c         up to 1.8
 external/bsd/tcpdump/dist/print-bt.c            up to 1.6
 external/bsd/tcpdump/dist/print-calm-fast.c     up to 1.3
 external/bsd/tcpdump/dist/print-carp.c          up to 1.3
 external/bsd/tcpdump/dist/print-cdp.c           up to 1.8
 external/bsd/tcpdump/dist/print-cfm.c           up to 1.8
 external/bsd/tcpdump/dist/print-chdlc.c         up to 1.8
 external/bsd/tcpdump/dist/print-cip.c           up to 1.6
 external/bsd/tcpdump/dist/print-cnfp.c          up to 1.7
 external/bsd/tcpdump/dist/print-dccp.c          up to 1.7
 external/bsd/tcpdump/dist/print-decnet.c        up to 1.8
 external/bsd/tcpdump/dist/print-dhcp6.c         up to 1.7
 external/bsd/tcpdump/dist/print-domain.c        up to 1.7
 external/bsd/tcpdump/dist/print-dtp.c           up to 1.3
 external/bsd/tcpdump/dist/print-dvmrp.c         up to 1.6
 external/bsd/tcpdump/dist/print-eap.c           up to 1.6
 external/bsd/tcpdump/dist/print-egp.c           up to 1.6
 external/bsd/tcpdump/dist/print-eigrp.c         up to 1.8
 external/bsd/tcpdump/dist/print-enc.c           up to 1.7
 external/bsd/tcpdump/dist/print-esp.c           up to 1.8
 external/bsd/tcpdump/dist/print-ether.c         up to 1.8
 external/bsd/tcpdump/dist/print-fddi.c          up to 1.6
 external/bsd/tcpdump/dist/print-forces.c        up to 1.6
 external/bsd/tcpdump/dist/print-fr.c            up to 1.8
 external/bsd/tcpdump/dist/print-frag6.c         up to 1.6
 external/bsd/tcpdump/dist/print-ftp.c           up to 1.3
 external/bsd/tcpdump/dist/print-geneve.c        up to 1.3
 external/bsd/tcpdump/dist/print-geonet.c        up to 1.3
 external/bsd/tcpdump/dist/print-gre.c           up to 1.8
 external/bsd/tcpdump/dist/print-hncp.c          up to 1.3
 external/bsd/tcpdump/dist/print-hsrp.c          up to 1.7
 external/bsd/tcpdump/dist/print-http.c          up to 1.3
 external/bsd/tcpdump/dist/print-icmp.c          up to 1.8
 external/bsd/tcpdump/dist/print-icmp6.c         up to 1.10
 external/bsd/tcpdump/dist/print-igmp.c          up to 1.7
 external/bsd/tcpdump/dist/print-igrp.c          up to 1.7
 external/bsd/tcpdump/dist/print-ip.c            up to 1.11
 external/bsd/tcpdump/dist/print-ip6.c           up to 1.7
 external/bsd/tcpdump/dist/print-ip6opts.c       up to 1.6
 external/bsd/tcpdump/dist/print-ipcomp.c        up to 1.6
 external/bsd/tcpdump/dist/print-ipfc.c          up to 1.6
 external/bsd/tcpdump/dist/print-ipnet.c         up to 1.3
 external/bsd/tcpdump/dist/print-ipx.c           up to 1.6
 external/bsd/tcpdump/dist/print-isakmp.c        up to 1.9
 external/bsd/tcpdump/dist/print-isoclns.c       up to 1.8
 external/bsd/tcpdump/dist/print-juniper.c       up to 1.8
 external/bsd/tcpdump/dist/print-krb.c           up to 1.7
 external/bsd/tcpdump/dist/print-l2tp.c          up to 1.7
 external/bsd/tcpdump/dist/print-lane.c          up to 1.6
 external/bsd/tcpdump/dist/print-ldp.c           up to 1.8
 external/bsd/tcpdump/dist/print-lisp.c          up to 1.3
 external/bsd/tcpdump/dist/print-llc.c           up to 1.8
 external/bsd/tcpdump/dist/print-lldp.c          up to 1.8
 external/bsd/tcpdump/dist/print-lmp.c           up to 1.9
 external/bsd/tcpdump/dist/print-loopback.c      up to 1.4
 external/bsd/tcpdump/dist/print-lspping.c       up to 1.8
 external/bsd/tcpdump/dist/print-lwapp.c         up to 1.7
 external/bsd/tcpdump/dist/print-lwres.c         up to 1.7
 external/bsd/tcpdump/dist/print-m3ua.c          up to 1.4
 external/bsd/tcpdump/dist/print-medsa.c         up to 1.3
 external/bsd/tcpdump/dist/print-mobile.c        up to 1.6
 external/bsd/tcpdump/dist/print-mobility.c      up to 1.7
 external/bsd/tcpdump/dist/print-mpcp.c          up to 1.7
 external/bsd/tcpdump/dist/print-mpls.c          up to 1.7
 external/bsd/tcpdump/dist/print-mptcp.c         up to 1.3
 external/bsd/tcpdump/dist/print-msdp.c          up to 1.6
 external/bsd/tcpdump/dist/print-msnlb.c         up to 1.3
 external/bsd/tcpdump/dist/print-netbios.c       delete
 external/bsd/tcpdump/dist/print-nflog.c         up to 1.3
 external/bsd/tcpdump/dist/print-nfs.c           up to 1.7
 external/bsd/tcpdump/dist/print-nsh.c           up to 1.3
 external/bsd/tcpdump/dist/print-ntp.c           up to 1.7
 external/bsd/tcpdump/dist/print-null.c          up to 1.7
 external/bsd/tcpdump/dist/print-olsr.c          up to 1.3
 external/bsd/tcpdump/dist/print-openflow-1.0.c  up to 1.3
 external/bsd/tcpdump/dist/print-openflow.c      up to 1.3
 external/bsd/tcpdump/dist/print-ospf.c          up to 1.8
 external/bsd/tcpdump/dist/print-ospf6.c         up to 1.7
 external/bsd/tcpdump/dist/print-otv.c           up to 1.3
 external/bsd/tcpdump/dist/print-pflog.c         up to 1.8
 external/bsd/tcpdump/dist/print-pfsync.c        up to 1.4
 external/bsd/tcpdump/dist/print-pgm.c           up to 1.8
 external/bsd/tcpdump/dist/print-pim.c           up to 1.9
 external/bsd/tcpdump/dist/print-pktap.c         up to 1.4
 external/bsd/tcpdump/dist/print-ppi.c           up to 1.3
 external/bsd/tcpdump/dist/print-ppp.c           up to 1.8
 external/bsd/tcpdump/dist/print-pppoe.c         up to 1.7
 external/bsd/tcpdump/dist/print-pptp.c          up to 1.6
 external/bsd/tcpdump/dist/print-radius.c        up to 1.8
 external/bsd/tcpdump/dist/print-raw.c           up to 1.6
 external/bsd/tcpdump/dist/print-resp.c          up to 1.3
 external/bsd/tcpdump/dist/print-rip.c           up to 1.7
 external/bsd/tcpdump/dist/print-ripng.c         up to 1.6
 external/bsd/tcpdump/dist/print-rpki-rtr.c      up to 1.4
 external/bsd/tcpdump/dist/print-rrcp.c          up to 1.6
 external/bsd/tcpdump/dist/print-rsvp.c          up to 1.9
 external/bsd/tcpdump/dist/print-rt6.c           up to 1.6
 external/bsd/tcpdump/dist/print-rtsp.c          up to 1.3
 external/bsd/tcpdump/dist/print-rx.c            up to 1.7
 external/bsd/tcpdump/dist/print-sctp.c          up to 1.8
 external/bsd/tcpdump/dist/print-sflow.c         up to 1.8
 external/bsd/tcpdump/dist/print-sip.c           up to 1.7
 external/bsd/tcpdump/dist/print-sl.c            up to 1.7
 external/bsd/tcpdump/dist/print-sll.c           up to 1.8
 external/bsd/tcpdump/dist/print-slow.c          up to 1.8
 external/bsd/tcpdump/dist/print-smb.c           up to 1.7
 external/bsd/tcpdump/dist/print-smtp.c          up to 1.3
 external/bsd/tcpdump/dist/print-snmp.c          up to 1.6
 external/bsd/tcpdump/dist/print-stp.c           up to 1.7
 external/bsd/tcpdump/dist/print-sunatm.c        up to 1.6
 external/bsd/tcpdump/dist/print-sunrpc.c        up to 1.7
 external/bsd/tcpdump/dist/print-symantec.c      up to 1.6
 external/bsd/tcpdump/dist/print-syslog.c        up to 1.7
 external/bsd/tcpdump/dist/print-tcp.c           up to 1.8
 external/bsd/tcpdump/dist/print-telnet.c        up to 1.7
 external/bsd/tcpdump/dist/print-tftp.c          up to 1.7
 external/bsd/tcpdump/dist/print-timed.c         up to 1.6
 external/bsd/tcpdump/dist/print-tipc.c          up to 1.3
 external/bsd/tcpdump/dist/print-token.c         up to 1.6
 external/bsd/tcpdump/dist/print-udld.c          up to 1.3
 external/bsd/tcpdump/dist/print-udp.c           up to 1.8
 external/bsd/tcpdump/dist/print-usb.c           up to 1.3
 external/bsd/tcpdump/dist/print-vjc.c           up to 1.6
 external/bsd/tcpdump/dist/print-vqp.c           up to 1.6
 external/bsd/tcpdump/dist/print-vrrp.c          up to 1.6
 external/bsd/tcpdump/dist/print-vtp.c           up to 1.3
 external/bsd/tcpdump/dist/print-vxlan-gpe.c     up to 1.3
 external/bsd/tcpdump/dist/print-vxlan.c         up to 1.3
 external/bsd/tcpdump/dist/print-wb.c            up to 1.7
 external/bsd/tcpdump/dist/print-zephyr.c        up to 1.7
 external/bsd/tcpdump/dist/print-zeromq.c        up to 1.3
 external/bsd/tcpdump/dist/print.c               up to 1.3
 external/bsd/tcpdump/dist/print.h               up to 1.1.1.1
 external/bsd/tcpdump/dist/route6d.h             delete
 external/bsd/tcpdump/dist/rpc_auth.h            up to 1.1.1.3
 external/bsd/tcpdump/dist/rpc_msg.h             up to 1.1.1.3
 external/bsd/tcpdump/dist/rpl.h                 up to 1.1.1.2
 external/bsd/tcpdump/dist/rx.h                  delete
 external/bsd/tcpdump/dist/sctpConstants.h       delete
 external/bsd/tcpdump/dist/sctpHeader.h          delete
 external/bsd/tcpdump/dist/setsignal.c           up to 1.6
 external/bsd/tcpdump/dist/setsignal.h           up to 1.1.1.3
 external/bsd/tcpdump/dist/signature.c           up to 1.7
 external/bsd/tcpdump/dist/signature.h           up to 1.1.1.4
 external/bsd/tcpdump/dist/slcompress.h          up to 1.1.1.3
 external/bsd/tcpdump/dist/slip.h                delete
 external/bsd/tcpdump/dist/sll.h                 delete
 external/bsd/tcpdump/dist/smb.h                 up to 1.1.1.4
 external/bsd/tcpdump/dist/smbutil.c             up to 1.5
 external/bsd/tcpdump/dist/strcasecmp.c          delete
 external/bsd/tcpdump/dist/strtoaddr.c           up to 1.3
 external/bsd/tcpdump/dist/strtoaddr.h           up to 1.1.1.1
 external/bsd/tcpdump/dist/tcp.h                 up to 1.8
 external/bsd/tcpdump/dist/tcpdump-stdinc.h      delete
 external/bsd/tcpdump/dist/tcpdump.1.in          up to 1.12
 external/bsd/tcpdump/dist/tcpdump.c             up to 1.15
 external/bsd/tcpdump/dist/telnet.h              delete
 external/bsd/tcpdump/dist/tests/3560_CDP.pcap   up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/802.1D_spanning_tree.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/802.1w_rapid_STP.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/AoE_Linux.pcap  up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/DECnet_Phone.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/DTP.pcap        up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/EIGRP_adjacency.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/EIGRP_goodbye.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/EIGRP_subnet_down.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/EIGRP_subnet_up.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/HDLC.pcap       up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/HSRP_coup.pcap  up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/HSRP_election.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/HSRP_failover.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/IGMP_V1.pcap    up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/IGMP_V2.pcap    up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/ISAKMP_sa_setup.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/ISIS_external_lsp.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/ISIS_level1_adjacency.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/ISIS_level2_adjacency.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/ISIS_p2p_adjacency.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/LACP.pcap       up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/LLDP_and_CDP.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/MSTP_Intra-Region_BPDUs.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/OLSRv1_HNA_sgw_1.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/OLSRv1_HNA_sgw_1.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/OSPFv3_NBMA_adjacencies.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/OSPFv3_broadcast_adjacency.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/OSPFv3_multipoint_adjacencies.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/OSPFv3_with_AH.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/PIM-DM_pruning.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/PIM-SM_join_prune.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/PIM_register_register-stop.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/PIMv2_bootstrap.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/PIMv2_hellos.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/RADIUS-RFC4675.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/RADIUS-RFC5176.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/RADIUS-port1700.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/RADIUS.pcap     up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/TESTLIST        up to 1.1.1.7
 external/bsd/tcpdump/dist/tests/TESTonce        up to 1.1.1.5
 external/bsd/tcpdump/dist/tests/TESTrun.sh      up to 1.1.1.5
 external/bsd/tcpdump/dist/tests/UDLD.pcap       up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/aarp-heapoverflow-1.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/aarp-heapoverflow-1.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/aarp-heapoverflow-2.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/aarp-heapoverflow-2.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/ahcp-vv.out     up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/ahcp.pcap       up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/aoe_1-v.out     up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/aoe_1.out       up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/arp-too-long-tha.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/arp-too-long-tha.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/atm-heapoverflow.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/atm-heapoverflow.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/atm-oam-heapoverflow.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/atm-oam-heapoverflow.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/babel1.out      up to 1.1.1.2
 external/bsd/tcpdump/dist/tests/babel1v.out     up to 1.1.1.3
 external/bsd/tcpdump/dist/tests/babel_auth.out  up to 1.1.1.2
 external/bsd/tcpdump/dist/tests/babel_rtt.out   up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/babel_rtt.pcap  up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/bad-ipv4-version-pgm-heapoverflow.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/bad-ipv4-version-pgm-heapoverflow.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/bfd-raw-auth-md5-v.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/bfd-raw-auth-md5.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/bfd-raw-auth-md5.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/bfd-raw-auth-sha1-v.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/bfd-raw-auth-sha1.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/bfd-raw-auth-sha1.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/bfd-raw-auth-simple-v.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/bfd-raw-auth-simple.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/bfd-raw-auth-simple.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/bgp-aigp.out    up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/bgp-aigp.pcap   up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/bgp-large-community.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/bgp-large-community.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/bgp_infloop-v.out up to 1.1.1.2
 external/bsd/tcpdump/dist/tests/bgp_vpn_attrset.out up to 1.1.1.2
 external/bsd/tcpdump/dist/tests/calm-fast-mac-lookup-heapoverflow.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/calm-fast-mac-lookup-heapoverflow.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/cdp-v.out       up to 1.1.1.2
 external/bsd/tcpdump/dist/tests/crypto.sh       up to 1.1.1.3
 external/bsd/tcpdump/dist/tests/cve-2014-8767-OLSR.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/cve-2014-8767-OLSR.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/cve-2014-8768-Geonet.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/cve-2014-8768-Geonet.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/cve-2014-8769-AODV.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/cve-2014-8769-AODV.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/cve2015-0261-crash.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/cve2015-0261-crash.pcap up to 1.1.1.2
 external/bsd/tcpdump/dist/tests/cve2015-0261-ipv6.out up to 1.1.1.2
 external/bsd/tcpdump/dist/tests/cve2015-0261-ipv6.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/dccp_partial_csum_v4_longer.out up to 1.1.1.2
 external/bsd/tcpdump/dist/tests/dccp_partial_csum_v4_longer.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/dccp_partial_csum_v4_simple.out up to 1.1.1.2
 external/bsd/tcpdump/dist/tests/dccp_partial_csum_v4_simple.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/dccp_partial_csum_v6_longer.out up to 1.1.1.2
 external/bsd/tcpdump/dist/tests/dccp_partial_csum_v6_longer.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/dccp_partial_csum_v6_simple.out up to 1.1.1.2
 external/bsd/tcpdump/dist/tests/dccp_partial_csum_v6_simple.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/decnet.out      up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/dhcp-mud.out    up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/dhcp-mud.pcap   up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/dhcp-rfc3004-v.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/dhcp-rfc3004.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/dhcp-rfc5859-v.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/dhcp-rfc5859.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/dhcpv6-mud.out  up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/dhcpv6-mud.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/dio.out         delete
 external/bsd/tcpdump/dist/tests/dio.pcap        delete
 external/bsd/tcpdump/dist/tests/dnssec-vv.out   up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/dnssec.pcap     up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/dtp-v.out       up to 1.1.1.2
 external/bsd/tcpdump/dist/tests/dvmrp.out       up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/eigrp1-v.out    up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/eigrp2-v.out    up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/eigrp3-v.out    up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/eigrp4-v.out    up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/evb.out         up to 1.1.1.2
 external/bsd/tcpdump/dist/tests/forces1vvv.out  up to 1.1.1.3
 external/bsd/tcpdump/dist/tests/forces1vvvv.out up to 1.1.1.3
 external/bsd/tcpdump/dist/tests/forces2v.out    delete
 external/bsd/tcpdump/dist/tests/frf15-heapoverflow.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/frf15-heapoverflow.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/geneve-tcp.out  up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/geneve-vni.out  up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/geneve-vv.out   up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/geneve.pcap     up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/geonet-mac-lookup-heapoverflow.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/geonet-mac-lookup-heapoverflow.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/gre-heapoverflow-1.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/gre-heapoverflow-1.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/gre-heapoverflow-2.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/gre-heapoverflow-2.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/hdlc1.out       up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/hdlc2.out       up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/hdlc3.out       up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/hdlc4.out       up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/hdlc_slarp.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/heap-overflow-1.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/heap-overflow-1.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/heap-overflow-2.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/heap-overflow-2.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/heapoverflow-EXTRACT_16BITS.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/heapoverflow-EXTRACT_16BITS.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/heapoverflow-atalk_print.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/heapoverflow-atalk_print.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/heapoverflow-in_checksum.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/heapoverflow-in_checksum.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/heapoverflow-ip_print_demux.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/heapoverflow-ip_print_demux.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/heapoverflow-ppp_hdlc_if_print.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/heapoverflow-ppp_hdlc_if_print.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/heapoverflow-q933_printq.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/heapoverflow-q933_printq.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/heapoverflow-sl_if_print.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/heapoverflow-sl_if_print.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/heapoverflow-tcp_print.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/heapoverflow-tcp_print.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/hncp.out        up to 1.1.1.2
 external/bsd/tcpdump/dist/tests/hncp.pcap       up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/hsrp_1-v.out    up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/hsrp_1.out      up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/hsrp_2-v.out    up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/hsrp_3-v.out    up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/icmpv6_opt24-v.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/icmpv6_opt24.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/ieee802.11_exthdr.out up to 1.1.1.2
 external/bsd/tcpdump/dist/tests/ieee802.11_rx-stbc.out up to 1.1.1.2
 external/bsd/tcpdump/dist/tests/igmpv1.out      up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/igmpv2.out      up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/ikev2pI2-segfault-v.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/ikev2pI2-segfault.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/ikev2pI2-segfault.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/ipcomp-heapoverflow.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/ipcomp-heapoverflow.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/ipv6-bad-version.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/ipv6-bad-version.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/ipv6-routing-header.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/ipv6-routing-header.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/ipv6hdr-heapoverflow-v.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/ipv6hdr-heapoverflow.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/ipv6hdr-heapoverflow.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/isakmp5-v.out   up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/isis-seg-fault-1-v.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/isis-seg-fault-1-v.sh up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/isis-seg-fault-1.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/isis-seg-fault-2-v.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/isis-seg-fault-2.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/isis-seg-fault-3-v.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/isis-seg-fault-3.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/isis_1-v.out    up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/isis_1.out      up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/isis_2-v.out    up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/isis_3-v.out    up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/isis_4-v.out    up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/isis_infloop-v.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/isis_poi.out    up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/isis_poi.pcap   up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/isis_poi2.out   up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/isis_poi2.pcap  up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/isoclns-heapoverflow-2.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/isoclns-heapoverflow-2.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/isoclns-heapoverflow-3.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/isoclns-heapoverflow-3.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/isoclns-heapoverflow.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/isoclns-heapoverflow.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/isup.out        up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/isup.pcap       up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/isupvv.out      up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/juniper_header-heapoverflow.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/juniper_header-heapoverflow.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/kday1.out       up to 1.1.1.2
 external/bsd/tcpdump/dist/tests/kday1.pcap      up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/kday2.out       up to 1.1.1.3
 external/bsd/tcpdump/dist/tests/kday2.pcap      up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/kday3.out       up to 1.1.1.3
 external/bsd/tcpdump/dist/tests/kday3.pcap      up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/kday4.out       up to 1.1.1.3
 external/bsd/tcpdump/dist/tests/kday4.pcap      up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/kday5.out       up to 1.1.1.3
 external/bsd/tcpdump/dist/tests/kday5.pcap      up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/kday6.out       up to 1.1.1.2
 external/bsd/tcpdump/dist/tests/kday6.pcap      up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/kday7.out       up to 1.1.1.3
 external/bsd/tcpdump/dist/tests/kday7.pcap      up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/kday8.out       up to 1.1.1.3
 external/bsd/tcpdump/dist/tests/kday8.pcap      up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/lacp-ev.out     up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/ldp_infloop.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/lisp_eid_notify.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/lisp_eid_notify.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/lisp_eid_register.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/lisp_eid_register.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/lisp_ipv6.out   up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/lisp_ipv6.pcap  up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/llc-xid-heapoverflow.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/llc-xid-heapoverflow.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/lldp_cdp-ev.out up to 1.1.1.3
 external/bsd/tcpdump/dist/tests/lldp_mudurl-v.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/lldp_mudurl-vv.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/lldp_mudurl.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/lmp-v.sh        up to 1.1.1.3
 external/bsd/tcpdump/dist/tests/loopback.out    up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/loopback.pcap   up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/lspping-fec-ldp-v.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/lspping-fec-ldp-vv.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/lspping-fec-ldp.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/lspping-fec-rsvp-v.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/lspping-fec-rsvp-vv.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/lspping-fec-rsvp.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/medsa-e.out     up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/medsa.out       up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/medsa.pcap      up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/mpbgp-linklocal-nexthop.out up to 1.1.1.2
 external/bsd/tcpdump/dist/tests/mpls-label-heapoverflow.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/mpls-label-heapoverflow.pcap up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/mpls-traceroute-v.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/mpls-traceroute.out up to 1.1.1.1
 external/bsd/tcpdump/dist/tests/mrinfo_query.pcap up to 1.1.1.1
 @@ -4924,999 +4924,1005 @@ sys/arch/i386/conf/GENERIC			patch
 	[maxv, ticket #1463]
 sys/external/bsd/ipf/netinet/fil.c		1.20
 sys/external/bsd/ipf/netinet/ip_frag.c		1.5
 sys/external/bsd/ipf/netinet/ip_state.c		1.7
 	Disconnect maintaining fragment state from keeping session
 	state. The user now must specify keep frags along with keep
 	state to have ipfilter do what it did before, as documented
 	in ipf.conf.5. (Cy Schubert @ FreeBSD)
 	Free the right fragment (Cy Schubert @ FreeBSD). This will
 	cause use after free issues and eventually panic.
 	[mrg, ticket #1412]
 sys/arch/sparc64/sparc64/compat_13_machdep.c	1.24
 	Apply only CCR. Otherwise userland could set PSTATE_PRIV
 	in %pstate and get kernel privileges on the hardware.
 	[maxv, ticket #1504]
 sys/compat/linux32/arch/amd64/linux32_machdep.c	1.39
 	Fix a ring0 escalation vulnerability in compat_linux32 where the
 	index of %cs is controlled by userland, making it easy to trigger
 	the page fault and get kernel privileges.
 	[maxv, ticket #1507]
 crypto/external/bsd/heimdal/dist/cf/check-getpwuid_r-posix.m4 1.1
 crypto/external/bsd/heimdal/dist/configure.ac	1.3
 crypto/external/bsd/heimdal/dist/kcm/client.c	1.3
 crypto/external/bsd/heimdal/dist/kcm/config.c	1.3
 crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_pname_to_uid.c 1.3
 crypto/external/bsd/heimdal/dist/lib/hx509/softp11.c 1.3
 crypto/external/bsd/heimdal/dist/lib/krb5/config_file.c 1.3
 crypto/external/bsd/heimdal/dist/lib/krb5/get_default_principal.c 1.3
 crypto/external/bsd/heimdal/dist/lib/krb5/kuserok.c 1.3
 crypto/external/bsd/heimdal/dist/lib/roken/getxxyyy.c 1.3
 crypto/external/bsd/heimdal/dist/lib/roken/roken.h.in 1.5
 crypto/external/bsd/heimdal/include/config.h	1.9
 crypto/external/bsd/heimdal/include/roken.h	1.8
 	- Always use rk_getpwnam_r
 	- Use getpwuid_r instead of getpwuid, so that we don't trash
 	  getpw*() internal buffers.
 	[mlelstv, ticket #1509]
 sys/arch/evbmips/conf/MALTA			1.88
 sys/arch/evbmips/conf/MALTA32			1.4
 sys/arch/evbmips/conf/MALTA64			1.8
 sys/arch/mips/mips/bds_emul.S			1.9
 	Make Malta work on real hardware again.
 	[mrg, ticket #1500]
 sys/arch/i386/i386/i386_trap.S			1.12
 	use %ss instead of %ds in trap06
 	[maxv, ticket #1512]
 external/bsd/wpa/dist/src/ap/ieee802_11.c	1.2
 external/bsd/wpa/dist/src/ap/wpa_auth.c		1.10
 external/bsd/wpa/dist/src/ap/wpa_auth.h		1.2
 external/bsd/wpa/dist/src/ap/wpa_auth_ft.c	1.2
 external/bsd/wpa/dist/src/ap/wpa_auth_i.h	1.2
 external/bsd/wpa/dist/src/common/wpa_common.h	1.3
 external/bsd/wpa/dist/src/rsn_supp/tdls.c	1.2
 external/bsd/wpa/dist/src/rsn_supp/wpa.c	1.2
 external/bsd/wpa/dist/src/rsn_supp/wpa_ft.c	1.2
 external/bsd/wpa/dist/src/rsn_supp/wpa_i.h	1.2
 external/bsd/wpa/dist/wpa_supplicant/wnm_sta.c	1.4
 	Apply upstream patches for CVE-2017-13077 CVE-2017-13078
 	CVE-2017-13079 CVE-2017-13080 CVE-2017-13081 CVE-2017-13082
 	CVE-2017-13086 CVE-2017-13087 CVE-2017-13088
 	[spz, ticket #1517]
 usr.sbin/mtree/only.c				1.3
 	Don't modify strings stored in hash, otherwise filling up of
 	directory hierarchy stops if the same hash value occurs in
 	directory and leaf.
 	Fix the issue that
 	"./usr/share/locale/pl/LC_MESSAGES/gettext-tools.mo" isn't
 	included in sets file in the case of MKUNPRIVED=no.
 	[nakayama, ticket #1506]
 external/bsd/nvi/dist/cl/cl_main.c		1.6
 external/bsd/nvi/dist/cl/cl_screen.c		1.6
 	Don't garble display when when resizing nvi in xterm.
 	[mlelstv, ticket #1508]
 sys/dev/sysmon/sysmon_envsys.c			patch
 	Detach the rndsrc before re-attaching it.
 	[pgoyette, ticket #1511]
 sbin/resize_ffs/resize_ffs.8			1.18
 sbin/resize_ffs/resize_ffs.c			1.48-1.53
 	Fix numerous overflow errors which can lead to superblock
 	corruption on large filesystems. Documentation fixes.
 	[sborrill, ticket #1516]
 sys/dev/cgd.c					1.113
 	The cgd(4) module requires des and blowfish symbols.
 	PR kern/52630
 	[kamil, ticket #1518]
 distrib/sets/lists/base/mi			1.1164
 doc/3RDPARTY					1.2326 via patch
 external/public-domain/tz/dist/CONTRIBUTING     up to 1.1.1.4
 external/public-domain/tz/dist/LICENSE          up to 1.1.1.3
 external/public-domain/tz/dist/Makefile         up to 1.1.1.18
 external/public-domain/tz/dist/NEWS             up to 1.1.1.19
 external/public-domain/tz/dist/TZDATA_VERSION   up to 1.9
 external/public-domain/tz/dist/Theory           delete
 external/public-domain/tz/dist/africa           up to 1.1.1.12
 external/public-domain/tz/dist/antarctica       up to 1.1.1.9
 external/public-domain/tz/dist/asia             up to 1.1.1.17
 external/public-domain/tz/dist/australasia      up to 1.1.1.12
 external/public-domain/tz/dist/backward         up to 1.1.1.8
 external/public-domain/tz/dist/backzone         up to 1.1.1.12
 external/public-domain/tz/dist/calendars        up to 1.1.1.1
 external/public-domain/tz/dist/checklinks.awk   up to 1.1.1.3
 external/public-domain/tz/dist/europe           up to 1.1.1.18
 external/public-domain/tz/dist/leap-seconds.list up to 1.1.1.8
 external/public-domain/tz/dist/leapseconds      up to 1.1.1.9
 external/public-domain/tz/dist/leapseconds.awk  up to 1.1.1.6
 external/public-domain/tz/dist/northamerica     up to 1.1.1.17
 external/public-domain/tz/dist/southamerica     up to 1.1.1.12
 external/public-domain/tz/dist/theory.html      up to 1.1.1.1
 external/public-domain/tz/dist/version          up to 1.1.1.6
 external/public-domain/tz/dist/zishrink.awk     up to 1.1.1.1
 external/public-domain/tz/dist/zone.tab         up to 1.1.1.12
 external/public-domain/tz/dist/zone1970.tab     up to 1.1.1.14
 	Update tzdata to 2017c.
 	[kre, ticket #1519]
 etc/namedb/root.cache				1.23
 	Update root.cache to 2017102400 (October 24, 2017).
 	[taca, ticket #1520]
 external/bsd/nvi/dist/common/recover.c		1.6-1.9
 external/bsd/nvi/usr.bin/recover/virecover	1.2-1.3
 	Fix vulnerabilities in the handling of recovery files.
 	[spz, ticket #1522]
 xsrc/external/mit/xorg-server/dist/Xext/panoramiX.c patch
 xsrc/external/mit/xorg-server/dist/Xext/saver.c	patch
 xsrc/external/mit/xorg-server/dist/Xext/xvdisp.c patch
 xsrc/external/mit/xorg-server/dist/Xi/xichangehierarchy.c patch
 xsrc/external/mit/xorg-server/dist/dbe/dbe.c	patch
 xsrc/external/mit/xorg-server/dist/dix/dispatch.c patch
 xsrc/external/mit/xorg-server/dist/hw/dmx/dmxpict.c patch
 xsrc/external/mit/xorg-server/dist/hw/xfree86/dixmods/extmod/xf86dga2.c patch
 xsrc/external/mit/xorg-server/dist/hw/xfree86/dri/xf86dri.c patch
 xsrc/external/mit/xorg-server/dist/render/render.c patch
 xsrc/external/mit/xorg-server/dist/xfixes/cursor.c patch
 xsrc/external/mit/xorg-server/dist/xfixes/region.c patch
 xsrc/external/mit/xorg-server/dist/xfixes/saveset.c patch
 xsrc/external/mit/xorg-server/dist/xfixes/xfixes.c patch
 xsrc/xfree/xc/programs/Xserver/Xext/panoramiX.c	patch
 xsrc/xfree/xc/programs/Xserver/Xext/saver.c	patch
 xsrc/xfree/xc/programs/Xserver/Xext/xf86dga2.c	patch
 xsrc/xfree/xc/programs/Xserver/Xext/xvdisp.c	patch
 xsrc/xfree/xc/programs/Xserver/dbe/dbe.c	patch
 xsrc/xfree/xc/programs/Xserver/dix/dispatch.c	patch
 xsrc/xfree/xc/programs/Xserver/hw/dmx/dmxpict.c	patch
 xsrc/xfree/xc/programs/Xserver/render/render.c	patch
 	apply fixes for CVEs 2017-12176 to 2017-12187
 	[mrg, ticket #1523]
 xsrc/external/mit/libXcursor/dist/src/file.c	patch
 xsrc/external/mit/libXcursor/dist/src/library.c	patch
 xsrc/external/mit/libXfont/dist/src/bitmap/pcfread.c patch
 xsrc/external/mit/libXfont/dist/src/fontfile/dirfile.c patch
 xsrc/external/mit/libXfont/dist/src/fontfile/fileio.c patch
 xsrc/external/mit/libXfont/dist/src/fontfile/fontdir.c patch
 xsrc/xfree/xc/lib/Xcursor/file.c		patch
 xsrc/xfree/xc/lib/Xcursor/library.c		patch
 xsrc/xfree/xc/lib/font/bitmap/pcfread.c		patch
 xsrc/xfree/xc/lib/font/fontfile/dirfile.c	patch
 xsrc/xfree/xc/lib/font/fontfile/fileio.c	patch
 xsrc/xfree/xc/lib/font/fontfile/fontdir.c	patch
 	Pull up fixes to libXfont and libXcurses for CVEs
 -13722, 2017-13720, 2017-16611, and 2017-16612.
 	[mrg, ticket #1535]
 sys/arch/x86/x86/fpu.c				1.19 via patch
 	Properly mask mxcsr to prevent faults.
 	[maxv, ticket #1540]
 sys/external/bsd/ipf/netinet/ip_state.c		1.9-1.10
 	Stop a kernel panic when altering the ipf state table size at
 	runtime due to unallocated memory.
 	[sborrill, ticket #1525]
 sys/arch/amd64/include/i82093reg.h		1.9
 sys/arch/i386/include/i82093reg.h		1.11
 sys/arch/x86/x86/ioapic.c			1.54
 	Don't write a 1 to the read only RIRR bit in the IOAPIC
 	redirection register to fix "tlp0: filter setup and transmit
 	timeout" observed on Hyper-V VMs with the Legacy Network Adapter.
 	From OpenBSD via PR kern/49323:
  	https://marc.info/?l=openbsd-cvs&m=146718035432599&w=2
 	[nakayama, ticket #1527]
 sys/arch/sparc/sparc/locore.s			1.269
 	Avoid an instruction requiring a higher alignment than we
 	are guaranteed.  Fixes PR port-sparc/52721: ddb errors on
 	ps command
 	[maya, ticket #1530]
 sys/arch/x86/x86/pmap.c				patch
 	amd64: Make the direct map non executable.
 	[maxv, ticket #1531]
 libexec/httpd/cgi-bozo.c			1.39
 	bozohttpd fails to exec scripts via the -C mechanism
 	sometimes with EFAULT due to not NULL terminated environment.
 	PR bin/52194
 	[martin, ticket #1533]
 sys/external/bsd/drm2/drm/drm_drv.c		1.20
 	drm_stat: fix device minor calculation.  Fixes bug where
 	libdrm couldn't find any devices beyond the first one.
 	[jmcneill, ticket #1536]
 etc/MAKEDEV.tmpl				1.188
 	make a few more drm nodes
 	[jmcneill, ticket #1537]
 sys/kern/subr_kobj.c				1.52
 	Compare names of duplicate symbols properly, so we correctly
 	return an error status.  PR kern/45125
 	[pgoyette, ticket #1539]
 sys/arch/amd64/amd64/machdep.c			1.280 via patch
 sys/arch/amd64/include/segments.h		1.34 via patch
 sys/arch/i386/i386/machdep.c			1.800 via patch
 sys/arch/i386/include/segments.h		1.64 via patch
 sys/arch/x86/x86/vm_machdep.c			1.30 via patch
 	Prevent unrestricted userland access to I/O ports in XEN.
 	[maxv, ticket #1550]
 bin/ksh/history.c				1.18 via patch
 	Create HISTFILE with mode 0600, not 777.  PR bin/52480.
 	[maya, ticket #1554]
 sys/netipsec/xform_ah.c				1.76
 	Fix a remote DoS vulnerability in IPsec-AH.
 	[maxv, ticket #1557]
 sys/netinet6/frag6.c				1.65
 sys/netinet6/ip6_input.c			1.187
 sys/netinet6/ip6_var.h				1.78
 sys/netinet6/raw_ip6.c				1.160 (via patch)
 	Fix a memory corruption in ip6_get_prevhdr().
 	[maxv, ticket #1560]
 sys/netinet6/ip6_mroute.c			1.120
 	Fix a use-after-free in the Pim6 entry point.
 	[maxv, ticket #1561]
 sys/netinet6/nd6_nbr.c				1.145 (via patch)
 	Fix memory leak.
 	[maxv, ticket #1562]
 sys/netinet/ip_input.c				1.366 (via patch)
 	Disable LSRR/SSRR by default.
 	[maxv, ticket #1563]
 sys/dist/pf/net/pf.c				1.78 via patch
 	Fix signedness bug in PF. PR/44059.
 	[maxv, ticket #1565]
 sys/netinet6/ip6_forward.c			1.89-1.90 via patch
 	Fix use-after-free of mbuf by ip6flow_create.
 	[ozaki-r, ticket #1551]
 sys/arch/sparc/sparc/timer.c			1.33-1.34
 sys/arch/sparc/sparc/timer_sun4m.c		1.31
 sys/arch/sparc/sparc/timerreg.h			1.10
 	Fix time goes backwards problems on sparc.
 	[mrg, ticket #1552]
 sys/netipsec/xform_ah.c				1.80-1.81 via patch
 	Fix use-after-free and and add more consistency checks.
 	[maxv, ticket #1568]
 sys/netipsec/xform_ipip.c			1.44
 	Fix IPv6-IPsec-AH tunnels.
 	[maxv, ticket #1567]
 sys/netipsec/xform_ah.c				1.77,1.81 via patch
 sys/netipsec/xform_esp.c			1.73 via patch
 sys/netipsec/xform_ipip.c			1.56,1.57 via patch
 	Several fixes in IPsec: strengthen sanity checks (AH/ESP), and fix
 	possible use-after-free (Tunnel).
 	[maxv, ticket #1569]
 sys/netipsec/ipsec.c				1.130
 	Fix inverted logic that could crash the kernel.
 	[maxv, ticket #1570]
 usr.sbin/ypserv/ypserv/ypserv_proc.c		1.18
 	PR/47615: Always zero out the result structs in the svc
 	procs to avoid returning stale request data to the client.
 	[christos, ticket #1566]
 sys/net/if_mpls.c				1.31-1.33 via patch
 sys/netmpls/mpls_ttl.c				1.9
    	Fix several memory corruptions and inconsistencies in MPLS.
 	[maxv, ticket #1571]
 sys/arch/amiga/conf/DRACO			patch
 sys/arch/amiga/conf/GENERIC			patch
 sys/arch/amiga/conf/GENERIC.in			patch
 sys/arch/i386/conf/GENERIC			patch
 sys/arch/i386/conf/XEN3_DOM0			patch
 sys/arch/i386/conf/XEN3_DOMU			patch
 sys/arch/sparc/conf/GENERIC			patch
 sys/arch/sparc/conf/KRUPS			patch
 sys/arch/sparc/conf/MRCOFFEE			patch
 sys/arch/sparc/conf/TADPOLE3GX			patch
 sys/arch/sparc64/conf/GENERIC			patch
 sys/arch/sparc64/conf/NONPLUS64			patch
 sys/kern/kern_exec.c				patch
 	- disable compat_svr4 and compat_svr4_32 everywhere
 	- disable compat_ibcs2 everywhere but on Vax
 	- remove svr4/svr4_32/ibcs2/freebsd from the module autoload list
 	[maxv, ticket #1499]
 sys/netinet6/ip6_input.c			1.188 via patch
 	Kick nested IPv6 fragments.
 	[maxv, ticket #1572]
 sys/netipsec/ipsec_input.c			1.57-1.58
 	Fix out-of-bounds read.
 	[maxv, ticket #1577]
 sys/conf/copyright				1.16
 	Update for 2018 new year
 	[maya, ticket #1581]
 etc/namedb/bind.keys				1.2
 	Update the keys file to the latest version from
 	https://ftp.isc.org/isc/bind9/keys/9.11/bind.keys.v9_11
 	[maya, ticket #1583]
 sys/arch/x86/include/cpu.h			1.67
 sys/arch/x86/include/cpuvar.h			1.47
 sys/arch/x86/x86/cpu.c				1.117
 sys/arch/x86/x86/identcpu.c			1.49
 sys/arch/xen/x86/cpu.c				1.102-1.103
 	Retrieve cpuid7 (Structured Extended Features) into ci_feat_val.
 	[msaitoh, ticket #1118]
 sys/dev/ppbus/if_plip.c				1.28
 	Fix an spl(9) leak.
 	[msaitoh, ticket #1579]
 sys/sys/bitops.h				1.12-1.14
 	Fix sign issues.
 	Avoid undefined behaviour when a left shift may be greater than
 	the size of the bitmap type.
 	[mrg, ticket #1582]
 external/public-domain/tz/dist/ziguard.awk      up to 1.1.1.1
 external/public-domain/tz/dist/CONTRIBUTING     up to 1.1.1.5
 external/public-domain/tz/dist/Makefile         up to 1.1.1.20
 external/public-domain/tz/dist/NEWS             up to 1.1.1.21
 external/public-domain/tz/dist/README           up to 1.1.1.6
 external/public-domain/tz/dist/TZDATA_VERSION   up to 1.11
 external/public-domain/tz/dist/africa           up to 1.1.1.14
 external/public-domain/tz/dist/antarctica       up to 1.1.1.10
 external/public-domain/tz/dist/asia             up to 1.1.1.19
 external/public-domain/tz/dist/australasia      up to 1.1.1.14
 external/public-domain/tz/dist/backzone         up to 1.1.1.14
 external/public-domain/tz/dist/checktab.awk     up to 1.1.1.9
 external/public-domain/tz/dist/europe           up to 1.1.1.20
 external/public-domain/tz/dist/leap-seconds.list up to 1.1.1.9
 external/public-domain/tz/dist/leapseconds      up to 1.1.1.10
 external/public-domain/tz/dist/northamerica     up to 1.1.1.19
 external/public-domain/tz/dist/southamerica     up to 1.1.1.14
 external/public-domain/tz/dist/theory.html      up to 1.1.1.3
 external/public-domain/tz/dist/version          up to 1.1.1.8
 external/public-domain/tz/dist/zishrink.awk     up to 1.1.1.3
 external/public-domain/tz/dist/zone.tab         up to 1.1.1.14
 external/public-domain/tz/dist/zone1970.tab     up to 1.1.1.16
 doc/3RDPARTY					1.1506 (patch)
 	Updated tzdata to 2018d.
 	[kre, ticket #1589]
 sys/netinet6/ip6_forward.c			1.91 (patch)
 	Fix two IPv6 ipsec use-after-free issues.
 	[maxv, ticket #1590]
 sys/netinet6/raw_ip6.c				1.161
 	Fix use-after-free.
 	[maxv, ticket #1591]
 sys/net/npf/npf.h				1.55
 	Fix an integer overflow that allows incoming IPv6 packets
 	to bypass a certain number of filtering rules.
 	[maxv, ticket #1593]
 sys/kern/uipc_mbuf.c				1.182
 sys/netinet/ip_reass.c				1.14
 sys/netinet6/frag6.c				1.67
 sys/sys/mbuf.h					1.179
 	Remove M_PKTHDR from secondary mbufs when reassembling packets.
 	[maxv, ticket #1594]
 external/gpl3/binutils/dist/bfd/elflink.c	1.14
 	When trying to decide the status of a weak symbol, resolve any
 	indirectness first.
 	[joerg, ticket #1595]
 bin/ed/ed.1					1.32
 bin/ed/main.c					1.29
 usr.bin/patch/pch.c				1.29
 	patch: Pass -S to ed(1) so that patches containing ! commands
 	don't run commands.
 	ed: add -S to disable ! commands.
 	[christos, ticket #1596]
 sys/arch/amiga/amiga/cc.c			1.27
 	Fix a spl(9) leak.
 	[msaitoh, ticket #1597]
 sys/kern/uipc_mbuf.c				1.190
 	m_pkthdr_remove(): if the mbuf is shared leave M_PKTHDR
 	in place.
 	[maxv, ticket #1598]
 sys/netipsec/ipsec_mbuf.c			1.23,1.24 (patch)
 	Don't assume M_PKTHDR is set only on the first mbuf of the chain.
 	Fix a pretty bad mistake (IPsec DoS).
 	[maxv, ticket #1599]
 sys/netipsec/ipsec_output.c			1.67,1.75 (patch)
 	compute_ipsec_pos: strengthen checks to avoid overruns,
 	allow the function to fail (and drop the misformed packet).
 	[maxv, ticket #1600]
 crypto/external/bsd/heimdal/dist/kdc/connect.c	1.3
 	Avoid busy-waiting on a dead child.
 	[spz, ticket #1601]
 sys/kern/uipc_mbuf.c				1.211 (patch)
 	Modify m_defrag, so that it never frees the first mbuf of
 	the chain.
 	[maxv, ticket #1602]
 sys/net/npf/npf_alg_icmp.c			1.27-1.29
 sys/net/npf/npf_inet.c				1.45
 	Fix use-after-free.
 	[maxv, ticket #1605]
 sys/kern/uipc_mbuf.c				1.214
 	Revert ticket #1598:
 	remove the M_READONLY check. The initial code was correct.
 	[maxv, ticket #1606]
 sys/netinet/udp_usrreq.c			1.237 (patch)
 	Fix bad/wrong memory deallocations and dangling pointer
 	issues in NAT-T.
 	[maxv, ticket #1607]
 sbin/fsck_lfs/bufcache.c			1.20
 sbin/fsck_lfs/bufcache.h			1.14
 	Fix incore(), use a 64bit logical block number.
 	[maya, ticket #1612]
 usr.sbin/makefs/ffs.c				1.70
 	Fix makefs UFS2 lazy inode initialization.
 	[maya, ticket #1615]
 share/i18n/esdb/ISO-8859/ISO-8859.alias		1.4
 	Add more aliases for Hebrew and Arabic ISO-8859-... encodings.
 	[maya, ticket #1616]
 xsrc/xfree/xc/programs/mkfontscale/ident.c	(apply patch)
 	Pass gzFile, not gzFile * to gzio functions.
 	[mrg, ticket #1618]
 usr.bin/printf/printf.c				1.37-1.39
 	Fix some error handling.
 	Avoid running off into oblivion when a format string,
 	or arg to a %b conversion ends in an unescaped backslash.
 	Avoid printing error messages twice when an invalid
 	escape sequence (\ sequence) is present in an arg to a %b
 	conversion.
 	[kre, ticket #1619]
 sys/netinet6/frag6.c				1.64
 	Ignore zero-sized fragments.
 	[maxv, ticket #1630]
 xsrc/external/mit/libX11/dist/src/FontNames.	(patch)
 xsrc/external/mit/libX11/dist/src/GetFPath.c	(patch)
 xsrc/external/mit/libX11/dist/src/LiHosts.c	(patch)
 xsrc/external/mit/libX11/dist/src/ListExt.c	(patch)
 	Apply fixes from libX11 1.6.5 for the following vulnerabilities:
 	Fixed off-by-one writes (CVE-2018-14599)
 	Validation of server response in XListHosts
 	Fixed out of boundary write (CVE-2018-14600)
 	Fixed crash on invalid reply (CVE-2018-14598)
 	[mrg, ticket #1635]
 external/public-domain/tz/dist/CONTRIBUTING     up to 1.1.1.6
 external/public-domain/tz/dist/Makefile         up to 1.1.1.22
 external/public-domain/tz/dist/NEWS             up to 1.1.1.24
 external/public-domain/tz/dist/README           up to 1.1.1.7
 external/public-domain/tz/dist/TZDATA_VERSION   up to 1.14
 external/public-domain/tz/dist/africa           up to 1.1.1.17
 external/public-domain/tz/dist/antarctica       up to 1.1.1.11
 external/public-domain/tz/dist/asia             up to 1.1.1.21
 external/public-domain/tz/dist/australasia      up to 1.1.1.16
 external/public-domain/tz/dist/backward         up to 1.1.1.9
 external/public-domain/tz/dist/backzone         up to 1.1.1.15
 external/public-domain/tz/dist/etcetera         up to 1.1.1.3
 external/public-domain/tz/dist/europe           up to 1.1.1.23
 external/public-domain/tz/dist/factory          up to 1.1.1.3
 external/public-domain/tz/dist/leap-seconds.list up to 1.1.1.10
 external/public-domain/tz/dist/leapseconds      up to 1.1.1.11
 external/public-domain/tz/dist/leapseconds.awk  up to 1.1.1.7
 external/public-domain/tz/dist/northamerica     up to 1.1.1.21
 external/public-domain/tz/dist/pacificnew       up to 1.1.1.2
 external/public-domain/tz/dist/southamerica     up to 1.1.1.15
 external/public-domain/tz/dist/systemv          up to 1.1.1.2
 external/public-domain/tz/dist/theory.html      up to 1.1.1.6
 external/public-domain/tz/dist/version          up to 1.1.1.11
 external/public-domain/tz/dist/yearistype.sh    up to 1.1.1.2
 external/public-domain/tz/dist/ziguard.awk      up to 1.1.1.3
 external/public-domain/tz/dist/zishrink.awk     up to 1.1.1.5
 external/public-domain/tz/dist/zone.tab         up to 1.1.1.15
 external/public-domain/tz/dist/zone1970.tab     up to 1.1.1.17
 external/public-domain/tz/dist/zoneinfo2tdf.pl  up to 1.1.1.2
 doc/3RDPARTY					(apply patch)
 	Updated tzdata to 2018g.
 	[kre, ticket #1644]
 sys/compat/netbsd32/netbsd32_socket.c		1.48 (patch)
 	Fix a buffer overflow.
 	[maxv, ticket #1652]
 sys/kern/kern_event.c				1.104
 	Fix kernel info leak.
 	[maxv, ticket #1653]
 libexec/httpd/testsuite/data/.bzremap           up to 1.1
 libexec/httpd/testsuite/t12.out                 up to 1.1
 libexec/httpd/testsuite/t12.in                  up to 1.1
 libexec/httpd/testsuite/t13.out                 up to 1.1
 libexec/httpd/testsuite/t13.in                  up to 1.1
 libexec/httpd/testsuite/t14.out                 up to 1.1
 libexec/httpd/testsuite/t14.in                  up to 1.1
 libexec/httpd/testsuite/t15.out                 up to 1.1
 libexec/httpd/testsuite/t15.in                  up to 1.1
 libexec/httpd/CHANGES                           up to 1.28
 libexec/httpd/Makefile                          up to 1.27
 libexec/httpd/auth-bozo.c                       up to 1.22
 libexec/httpd/bozohttpd.8                       up to 1.74
 libexec/httpd/bozohttpd.c                       up to 1.96
 libexec/httpd/bozohttpd.h                       up to 1.56
 libexec/httpd/cgi-bozo.c                        up to 1.44
 libexec/httpd/content-bozo.c                    up to 1.16
 libexec/httpd/daemon-bozo.c                     up to 1.19
 libexec/httpd/dir-index-bozo.c                  up to 1.28
 libexec/httpd/lua-bozo.c                        up to 1.15
 libexec/httpd/main.c                            up to 1.21
 libexec/httpd/ssl-bozo.c                        up to 1.25
 libexec/httpd/tilde-luzah-bozo.c                up to 1.16
 libexec/httpd/libbozohttpd/Makefile             up to 1.3
 libexec/httpd/lua/bozo.lua                      up to 1.3
 libexec/httpd/lua/glue.c                        up to 1.5
 libexec/httpd/lua/optparse.lua                  up to 1.2
 libexec/httpd/testsuite/Makefile                up to 1.11
 libexec/httpd/testsuite/html_cmp                up to 1.6
 libexec/httpd/testsuite/t3.out                  up to 1.4
 libexec/httpd/testsuite/t5.out                  up to 1.4
 libexec/httpd/testsuite/t6.out                  up to 1.4
 libexec/httpd/testsuite/test-bigfile            up to 1.5
 libexec/httpd/testsuite/test-simple             up to 1.5
 	Sync with HEAD as of 2018-11-24. Includes various changes:
 	Cosmetic changes to Lua binding in bozohttpd.
 	Fix -C scripts execution and document restrictions.
 	Add support for remapping requested paths via a .bzredirect file.
 	Handle redirections for any protocol, not just http:.
 	Fix a denial of service attack against header contents, which
 	is now bounded at 16KiB.
 	Fix access checks for special files.
 	[mrg, ticket #1655]
 sys/net/rtsock.c				1.244 (adapted)
 	Fix kernel info leak (2 bytes of padding in struct if_msghdr)
 	[maxv, ticket #1657]
 sys/kern/kern_exec.c				1.462
 	Fix stack info leak.
 	[maxv, ticket #1658]
 libexec/httpd/CHANGES				1.29,1.30
 libexec/httpd/bozohttpd.c			1.97-1.99
 libexec/httpd/bozohttpd.h			1.57
 libexec/httpd/cgi-bozo.c			1.45
 libexec/httpd/main.c				1.22
 	Fix -X option parsing and miscelaneous cleanup.
 	[mrg, ticket #1659]
 sys/compat/linux/common/linux_misc_notalpha.c	1.110
 sys/kern/kern_time.c				1.192,1.193
 	Fix kernel info leak.
 	[maxv, ticket #1660]
 sys/kern/kern_sig.c				1.350
 	Fix kernel info leak.
 	[maxv, ticket #1661]
 sys/arch/amd64/amd64/machdep.c			1.321
 	Fix stack info leak.
 	[maxv, ticket #1662]
 sys/kern/sys_sig.c				1.47
 	Fix kernel info leak, 4 bytes of padding in struct _ksiginfo.
 	[maxv, ticket #1664]
 usr.bin/telnet/telnet.c				1.37
 usr.bin/telnet/utilities.c			1.24
 	Switch some sprintf to snprintf.
 	[maya, ticket #1665]
 sys/uvm/uvm_swap.c				1.178 (patch, adapted)
 sys/compat/netbsd32/netbsd32_netbsd.c		(patch)
 	Fix kernel info leak in swapctl(2).
 	[maxv, ticket #1666]
 sys/kern/kern_time.c				1.191
 	Fix kernel info leak.
 	[maxv, ticket #1667]
 sys/compat/netbsd32/netbsd32_compat_14.c	1.27
 sys/compat/netbsd32/netbsd32_conv.h		1.37
 sys/compat/sys/msg.h				1.5
 sys/compat/sys/time_types.h			1.3
 	Fix kernel info leaks.
 	[maxv, ticket #1668]
 sys/conf/copyright				1.17
 	Welcome to 2019!
 	[jnemeth, ticket #1669]
 external/public-domain/tz/dist/Makefile         up to 1.1.1.23
 external/public-domain/tz/dist/NEWS             up to 1.1.1.26
 external/public-domain/tz/dist/TZDATA_VERSION   up to 1.16
 external/public-domain/tz/dist/africa           up to 1.1.1.19
 external/public-domain/tz/dist/asia             up to 1.1.1.22
 external/public-domain/tz/dist/australasia      up to 1.1.1.17
 external/public-domain/tz/dist/leapseconds      up to 1.1.1.12
 external/public-domain/tz/dist/leapseconds.awk  up to 1.1.1.8
 external/public-domain/tz/dist/northamerica     up to 1.1.1.22
 external/public-domain/tz/dist/theory.html      up to 1.1.1.7
 external/public-domain/tz/dist/version          up to 1.1.1.13
 external/public-domain/tz/dist/ziguard.awk      up to 1.1.1.4
 external/public-domain/tz/dist/zone.tab         up to 1.1.1.16
 external/public-domain/tz/dist/zone1970.tab     up to 1.1.1.18
 distrib/sets/lists/base/mi			(patch)
 doc/3RDPARTY					(patch)
 	Updated tzdata to 2018i.
 	[kre, ticket #1670]
 sys/arch/sparc/sparc/pmap.c			1.366
 	Fix deadlocks on machines with more than two cpus.
 	[mrg, ticket #1672]
 regress/sys/arch/m68k/060sp/Makefile		1.15
 	Replace manual realdepend dependency with DPSRCS.
 	[msaitoh, ticket #1674]
 sys/kern/kern_ntptime.c				1.60
 	Zero out the ntptimeval structure to prevent a 4 byte kernel stack
 	disclosure.
 	[maxv, ticket #1675]
 sys/net/link_proto.c				1.37
 sys/netatalk/ddp_usrreq.c			1.72
 sys/netbt/hci_socket.c				1.46
 sys/netbt/l2cap_socket.c			1.36
 sys/netbt/rfcomm_socket.c			1.38
 sys/netbt/sco_socket.c				1.38
 sys/netinet/tcp_usrreq.c			1.223 via patch
 sys/netinet6/raw_ip6.c				1.173
 sys/netinet6/udp6_usrreq.c			1.146
 sys/netmpls/mpls_proto.c			1.32
 sys/netnatm/natm.c				patch
 	Fix memory leaks pointed out by Ilja Van Sprundel: all
 	sendoob() functions are expected to free both passed
 	mbuf chains.
 	[martin, ticket #1676]
 sys/arch/alpha/alpha/machdep.c			1.352
 sys/arch/amd64/amd64/netbsd32_machdep.c		1.117
 sys/arch/arm/arm/sig_machdep.c			1.51
 sys/arch/hppa/hppa/sig_machdep.c		1.26
 sys/arch/i386/i386/machdep.c			1.813
 sys/arch/m68k/m68k/sig_machdep.c		1.50
 sys/arch/mips/mips/netbsd32_machdep.c		1.16
 sys/arch/mips/mips/sig_machdep.c		1.24
 sys/arch/powerpc/powerpc/sig_machdep.c		1.46
 sys/arch/sh3/sh3/sh3_machdep.c			1.106
 sys/arch/sparc64/sparc64/machdep.c		1.289
 sys/arch/sparc64/sparc64/netbsd32_machdep.c	1.111
 sys/arch/usermode/target/i386/cpu_i386.c	1.8
 sys/arch/usermode/target/x86_64/cpu_x86_64.c	1.7
 sys/arch/vax/vax/sig_machdep.c			1.23
 	Fix widespread leak in the sendsig_siginfo() functions.
 	[maxv, ticket #1677]
 sys/kern/kern_time.c				1.190,1.194
 	Fix kernel info leaks.
 	[maxv, ticket #1678]
 sys/compat/linux/common/linux_ipc.c		1.56
 sys/compat/linux32/common/linux32_ipccall.c	1.12
 sys/compat/netbsd32/netbsd32_compat_14.c	1.28
 sys/compat/netbsd32/netbsd32_compat_14.c	1.29
 sys/compat/netbsd32/netbsd32_conv.h		1.38
 sys/compat/sys/ipc.h				1.6
 sys/compat/sys/ipc.h				1.7
 sys/compat/sys/msg.h				1.6
 sys/compat/sys/sem.h				1.7
 sys/compat/sys/shm.h				1.8
 sys/kern/sysv_msg.c				1.73
 sys/kern/sysv_sem.c				1.96
 sys/kern/sysv_shm.c				1.133
 	Fix kernel stack and kernel adddress leaks in msgctl, semctl, and
 	shmctl system calls, for native as well as for the netbsd32, linux,
 	and linux32 compatibility calls.
 	[mrg, ticket #1679]
 sys/net/rtsock.c		(patch)
 	Fix locking for sysctl_rtable.
 	[sborrill, ticket #1680]
 sys/kern/kern_time.c				1.196
 	Avoid panic from setitimer(2) for CLOCK_MONOTONIC.
 	[mlelstv, ticket #1196]
 sys/dev/scsipi/files.scsipi			1.42
 sys/dev/scsipi/st.c				1.236 (patch), 1.237
 	PR kern/53949: fix file mark handling.
 	st(4): Fix (but disable by default) SUN compatibility mode.
 	[kardel, ticket #1682]
 external/bsd/bzip2/dist/bzip2recover.c		1.4
 	Apply fix for CVE-2016-3189 bzip2: heap use after free in bzip2recover
 	[martin, ticket #1684]
 sys/kern/sys_mqueue.c				1.44
 	mq_send1: fix argument validation and reject too large lengths early.
 	Discovered by Andy Nguyen.
 	[martin, ticket #1688]
 sys/compat/common/uipc_syscalls_40.c		1.19 (patch)
 sys/compat/linux/common/linux_socket.c		1.145 (patch)
 sys/compat/linux32/common/linux32_socket.c	1.30 (patch)
 sys/net/if.c					1.449 (patch)
 	Zero out the ifreq struct for SIOCGIFCONF to avoid up to 127 bytes
 	of stack disclosure.
 	[christos, ticket #1689]
 external/bsd/dhcpcd/dist/src/auth.c			(apply patch)
 external/bsd/dhcpcd/dist/src/dhcp.c			(apply patch)
 external/bsd/dhcpcd/dist/src/dhcpcd.h			(apply patch)
 	Security fixes for dhcpcd:
 	Fix a potential 1 byte read overflow with DHO_OPTSOVERLOADED.
 	Use consttime_memequal(3) to compare hashes.
 	[roy, ticket #1690]
 sys/arch/amd64/amd64/copy.S			1.33
 sys/arch/i386/i386/copy.S			1.31
 	Don't forget to clear the direction flag if kcopy fails.
 	[maxv, ticket #1693]
 external/bsd/dhcpcd/dist/src/dhcp6.c		(apply patch)
 	DHCPv6: Fix a potential read overflow with D6_OPTION_PD_EXCLUDE.
 	[roy, ticket #1694]
 sys/netsmb/smb_conn.c				1.30
 	Prevent a NULL pointer dereference when the local endpoint is not
 	defined.
 	[christos, ticket #1696]
 sys/ufs/ffs/ffs_alloc.c				1.164
 	PR 53990, PR 52380, PR 52102:
 	Fix rare allocation botch in ffs_nodealloccg().
 	[kardel, ticket #1697]
 sys/dev/scsipi/scsipi_ioctl.c			1.72 (patch)
 	Use correct size when copying outgoing sense data.
 	[mlelstv, ticket #1698]
 libexec/httpd/CHANGES				1.31-1.40
 libexec/httpd/Makefile				1.28
 libexec/httpd/auth-bozo.c			1.23-1.24
 libexec/httpd/bozohttpd.8			1.75-1.79
 libexec/httpd/bozohttpd.c			1.100-1.113
 libexec/httpd/bozohttpd.h			1.58-1.60
 libexec/httpd/cgi-bozo.c			1.46-1.48
 libexec/httpd/daemon-bozo.c			1.20-1.21
 libexec/httpd/dir-index-bozo.c			1.29-1.32
 libexec/httpd/ssl-bozo.c			1.26
 libexec/httpd/testsuite/Makefile		1.12-1.13
 libexec/httpd/testsuite/t11.out			1.2
 libexec/httpd/testsuite/test-bigfile		1.6
 libexec/httpd/testsuite/test-simple		1.6
 	Don't display special files in the directory index.
 	Use html tables for directory index.
 	Don't include "index.html" in html headers.
 	Fix CGI '+' param and error handling.
 	Remove unused parameter to daemon_poll_err().
 	Avoid sign extension in % handling
 	Fix a few problems pointed out by clang static analyzer.
 	Add ssl specific timeout value (30s).---
 	Fix handling of bozo_set_timeout() timeouts (and `-T' option parsing).
 	Avoid .htpasswd exposure to authenticated users when .htpasswd is
 	in the slashdir too.
 	Avoid possible NULL dereference when sending a big request that timeout.
 	Avoid an assertion failure when using cgihandler (-C option).
 	[mrg, ticket #1699]
 sys/miscfs/kernfs/kernfs_vnops.c		1.161
 sys/miscfs/procfs/procfs_vnops.c		1.207
 	Add missing operation VOP_GETPAGES() returning EFAULT.
 	[hannken, ticket #1703]
 sys/conf/files					1.1238
 sys/crypto/nist_ctr_drbg/files.nist_ctr_drbg	delete
 sys/crypto/nist_ctr_drbg/nist_ctr_aes_rijndael.h delete
 sys/crypto/nist_ctr_drbg/nist_ctr_drbg.c	delete
 sys/crypto/nist_ctr_drbg/nist_ctr_drbg.h	delete
 sys/crypto/nist_ctr_drbg/nist_ctr_drbg_aes128.h	delete
 sys/crypto/nist_ctr_drbg/nist_ctr_drbg_aes256.h	delete
 sys/crypto/nist_ctr_drbg/nist_ctr_drbg_config.h	delete
 sys/crypto/nist_hash_drbg/files.nist_hash_drbg	1.1
 sys/crypto/nist_hash_drbg/nist_hash_drbg.c	1.1
 sys/crypto/nist_hash_drbg/nist_hash_drbg.h	1.1
 sys/dev/rndpseudo.c				1.38
 sys/kern/subr_cprng.c				1.31
 sys/rump/kern/lib/libcrypto/Makefile		1.5
 sys/rump/librump/rumpkern/Makefile.rumpkern	1.176
 sys/sys/cprng.h					1.13-1.15
 	cprng.h: use static __inline for consistency with other include
 	headers and remove an unused function.
 	Switch from NIST CTR_DRBG with AES to NIST Hash_DRBG with SHA-256.
 	[riastradh, ticket #1705]
 lib/libc/nameser/ns_name.c			1.12
 	Fix buffer overrun.
 	[maya, ticket #1706]
 sys/netinet/ip_input.c				1.390 (patch)
 sys/netinet6/ip6_input.c			1.209 (patch)
 	Packet filters can return an mbuf chain with fragmented headers, so
 	m_pullup() when needed.
 	[bouyer, ticket #1708]
 sys/netbt/hci.h					1.46
 sys/netbt/hci_event.c				1.26
 	When encrypted connections are configured, verify that the encryption
 	key length has a minimum size when the adaptor supports that.
 	This addresses the 'Key Negotiation of Bluetooth' attack,
 	CVE-2019-9506.
 	[plunky, ticket #1709]
 distrib/sets/lists/modules/mi			1.127
 distrib/sets/lists/modules/md.amd64		(manually adjusted)
 distrib/sets/lists/modules/md.evbppc.powerpc	(manually adjusted)
 distrib/sets/lists/modules/md.i386		(manually adjusted)
 sys/modules/Makefile				1.229,1.230
 sys/modules/filemon/Makefile			1.4 (manually adjusted)
 	Do not install the filemon module.
 	[maya, ticket #1710]
 sys/kern/subr_cprng.c				1.33
 	Use cprng_strong, not cprng_fast, for sysctl kern.arnd.
 	[riastradh, ticket #1714]
 share/man/man4/rnd.4				1.25 - 1.28
 	Update man page to reflect switch from CTR_DRBG to Hash_DRBG.
 	Update NIST SP800-90A reference.
 	[riastradh, ticket #1715]