Subject: CVS commit: pkgsrc/www/bozohttpd
From: matthew green
Date: 2022-05-18 02:46:46
Message id: 20220518004646.AAE82FAEB@cvs.NetBSD.org

Log Message:
update to bozohttpd 20220517.  changes include:

o  remove obsolete .bzdirect handling.
o  new "-m tlsversion" option to set the minimum TLS version
   available.  partially from <sunil@nimmagadda.net>.
o  extend the list of available ciphers to include most of the
   openssl "HIGH" with some additional disables.  retain the current
   list of bad options.  should deal with PR#51278.
o  don't assume host BUFSIZ is sufficient.  small BUFSIZ leads to
   always happens errors in the testsuite.  switch all these buffers
   to be 4KiB sized.  reported by embr <git@liclac.eu>
o  fix a denial of service attack against initial request contents,
   now bounded at 16KiB.  reported by Justin Parrott in PR#56085
o  new support for content types: .tar.bz2, .tar.xz, .tar.lz,
   .tar.zst, .tbz2, .txz, .tlz, .zipx, .xz, .zst, .sz, .lz, .lzma,
   .lzo, .7z, .lzo, .cab, .dmg, .jar, and .rar.  should fix
   netbsd PR#56026:
   MIME type of .tar.xz file on ny{cdn,ftp}.NetBSD.org is invalid
o  fix various NULL derefs from malformed headers.  mostly from
   <emily@ingalls.rocks>.
o  fix memory leaks in library interface: add bozo_cleanup().

Files:
RevisionActionfile
1.98modifypkgsrc/www/bozohttpd/Makefile
1.77modifypkgsrc/www/bozohttpd/distinfo