From noreply at github.com  Wed Jun 21 09:16:01 2023
From: noreply at github.com (Lucas Holt)
Date: Wed, 21 Jun 2023 06:16:01 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/src] fe4d77: pam_krb5 authenticates
 the user by essentially run...
Message-ID: <MidnightBSD/src/push/refs/heads/master/f7fb69-d7ee96@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/src
  Commit: fe4d77711f04cfcd873270200831162f7b0e23f7
      https://github.com/MidnightBSD/src/commit/fe4d77711f04cfcd873270200831162f7b0e23f7
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2023-06-21 (Wed, 21 Jun 2023)

  Changed paths:
    M lib/libpam/modules/pam_krb5/pam_krb5.8
    M lib/libpam/modules/pam_krb5/pam_krb5.c

  Log Message:
  -----------
  pam_krb5 authenticates the user by essentially running kinit(1) with the
password, getting a `ticket-granting ticket' (tgt) from the Kerberos KDC (Key
Distribution Center) over the network, as a way to verify the password.

Normally, the system running the pam_krb5 module will also have a keytab, a
key provisioned by the KDC. The pam_krb5 module will use the tgt to get a
service ticket and validate it against the keytab, ensuring the tgt is valid
and therefore, the password is valid.

However, if a keytab is not provisioned on the system, pam_krb5 has no way to
validate the response from the KDC, and essentially trusts the tgt provided
over the network as being valid.

Obtained from: FreeBSD


  Commit: d7ee965e4b8ed18743d7bfc9ad48c7b0bc5850fc
      https://github.com/MidnightBSD/src/commit/d7ee965e4b8ed18743d7bfc9ad48c7b0bc5850fc
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2023-06-21 (Wed, 21 Jun 2023)

  Changed paths:
    M crypto/openssh/authfd.c

  Log Message:
  -----------
  When using ssh-add(1) to add smartcard keys to ssh-agent(1) with per-hop
destination constraints, a logic error prevented the constraints from being
sent to the agent resulting in keys being added to the agent without
constraints.

Obtained from: FreeBSD


Compare: https://github.com/MidnightBSD/src/compare/f7fb69e38921...d7ee965e4b8e

From noreply at github.com  Wed Jun 21 09:19:10 2023
From: noreply at github.com (Lucas Holt)
Date: Wed, 21 Jun 2023 06:19:10 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/src] 6e301b: pam_krb5 authenticates
 the user by essentially run...
Message-ID: <MidnightBSD/src/push/refs/heads/stable/3.0/78a8fb-ac5f66@github.com>

  Branch: refs/heads/stable/3.0
  Home:   https://github.com/MidnightBSD/src
  Commit: 6e301b290fa60f1ccdf640d8c866d5698021edb8
      https://github.com/MidnightBSD/src/commit/6e301b290fa60f1ccdf640d8c866d5698021edb8
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2023-06-21 (Wed, 21 Jun 2023)

  Changed paths:
    M lib/libpam/modules/pam_krb5/pam_krb5.8
    M lib/libpam/modules/pam_krb5/pam_krb5.c

  Log Message:
  -----------
  pam_krb5 authenticates the user by essentially running kinit(1) with the
password, getting a `ticket-granting ticket' (tgt) from the Kerberos KDC (Key
Distribution Center) over the network, as a way to verify the password.

Normally, the system running the pam_krb5 module will also have a keytab, a
key provisioned by the KDC. The pam_krb5 module will use the tgt to get a
service ticket and validate it against the keytab, ensuring the tgt is valid
and therefore, the password is valid.

However, if a keytab is not provisioned on the system, pam_krb5 has no way to
validate the response from the KDC, and essentially trusts the tgt provided
over the network as being valid.

Obtained from: FreeBSD


  Commit: 7e052b4eb9b7616100d60a9529ec0b0be2a31c38
      https://github.com/MidnightBSD/src/commit/7e052b4eb9b7616100d60a9529ec0b0be2a31c38
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2023-06-21 (Wed, 21 Jun 2023)

  Changed paths:
    M crypto/openssh/authfd.c

  Log Message:
  -----------
  When using ssh-add(1) to add smartcard keys to ssh-agent(1) with per-hop
destination constraints, a logic error prevented the constraints from being
sent to the agent resulting in keys being added to the agent without
constraints.

Obtained from: FreeBSD


  Commit: ff1596e9b5b09cf44c4c26c90df321cd041351b3
      https://github.com/MidnightBSD/src/commit/ff1596e9b5b09cf44c4c26c90df321cd041351b3
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2023-06-21 (Wed, 21 Jun 2023)

  Changed paths:
    R contrib/subversion/tools/backup/hot-backup.py.in
    R contrib/subversion/tools/bdb/erase-all-text-data.py
    R contrib/subversion/tools/bdb/skel.py
    R contrib/subversion/tools/bdb/svn-bdb-view.py
    R contrib/subversion/tools/bdb/svnfs.py
    R contrib/subversion/tools/bdb/whatis-rep.py
    R contrib/subversion/tools/buildbot/master/README
    R contrib/subversion/tools/buildbot/slaves/README
    R contrib/subversion/tools/buildbot/slaves/bb-openbsd/svnbuild.sh
    R contrib/subversion/tools/buildbot/slaves/bb-openbsd/svncheck-bindings.sh
    R contrib/subversion/tools/buildbot/slaves/bb-openbsd/svncheck.sh
    R contrib/subversion/tools/buildbot/slaves/bb-openbsd/svnclean.sh
    R contrib/subversion/tools/buildbot/slaves/i686-debian-sarge1/mount-ramdrive.c
    R contrib/subversion/tools/buildbot/slaves/i686-debian-sarge1/svnbuild.sh
    R contrib/subversion/tools/buildbot/slaves/i686-debian-sarge1/svncheck.sh
    R contrib/subversion/tools/buildbot/slaves/i686-debian-sarge1/svnclean.sh
    R contrib/subversion/tools/buildbot/slaves/i686-debian-sarge1/svnlog.sh
    R contrib/subversion/tools/buildbot/slaves/i686-debian-sarge1/unmount-ramdrive.c
    R contrib/subversion/tools/buildbot/slaves/svn-sparc-solaris/mount-tmpfs.c
    R contrib/subversion/tools/buildbot/slaves/svn-sparc-solaris/rebuild-svn-bits.sh
    R contrib/subversion/tools/buildbot/slaves/svn-sparc-solaris/serf.patch
    R contrib/subversion/tools/buildbot/slaves/svn-sparc-solaris/svnbuild.sh
    R contrib/subversion/tools/buildbot/slaves/svn-sparc-solaris/svncheck.sh
    R contrib/subversion/tools/buildbot/slaves/svn-sparc-solaris/svncleanup.sh
    R contrib/subversion/tools/buildbot/slaves/svn-sparc-solaris/svnenv.sh
    R contrib/subversion/tools/buildbot/slaves/svn-sparc-solaris/twisted.patch
    R contrib/subversion/tools/buildbot/slaves/svn-x64-centos/list-svn-deps.sh
    R contrib/subversion/tools/buildbot/slaves/svn-x64-centos/svnbuild.sh
    R contrib/subversion/tools/buildbot/slaves/svn-x64-centos/svncheck-bindings.sh
    R contrib/subversion/tools/buildbot/slaves/svn-x64-centos/svncheck.sh
    R contrib/subversion/tools/buildbot/slaves/svn-x64-centos/svnclean.sh
    R contrib/subversion/tools/buildbot/slaves/svn-x64-centos/svnlog.sh
    R contrib/subversion/tools/buildbot/slaves/svn-x64-macosx/mkramdisk.sh
    R contrib/subversion/tools/buildbot/slaves/svn-x64-macosx/rmramdisk.sh
    R contrib/subversion/tools/buildbot/slaves/svn-x64-macosx/setenv.sh
    R contrib/subversion/tools/buildbot/slaves/svn-x64-macosx/svnbuild-bindings.sh
    R contrib/subversion/tools/buildbot/slaves/svn-x64-macosx/svnbuild.sh
    R contrib/subversion/tools/buildbot/slaves/svn-x64-macosx/svncheck-bindings.sh
    R contrib/subversion/tools/buildbot/slaves/svn-x64-macosx/svncheck.sh
    R contrib/subversion/tools/buildbot/slaves/svn-x64-macosx/svnclean.sh
    R contrib/subversion/tools/buildbot/slaves/svnbot-common/README
    R contrib/subversion/tools/buildbot/slaves/ubuntu-x64/svnbuild.sh
    R contrib/subversion/tools/buildbot/slaves/ubuntu-x64/svncheck-bindings.sh
    R contrib/subversion/tools/buildbot/slaves/ubuntu-x64/svncheck.sh
    R contrib/subversion/tools/buildbot/slaves/ubuntu-x64/svnclean.sh
    R contrib/subversion/tools/buildbot/slaves/ubuntu-x64/svnlog.sh
    R contrib/subversion/tools/buildbot/slaves/win32-SharpSvn/svn-config.cmd.template
    R contrib/subversion/tools/buildbot/slaves/win32-SharpSvn/svntest-bindings.cmd
    R contrib/subversion/tools/buildbot/slaves/win32-SharpSvn/svntest-build-bindings.cmd
    R contrib/subversion/tools/buildbot/slaves/win32-SharpSvn/svntest-build.cmd
    R contrib/subversion/tools/buildbot/slaves/win32-SharpSvn/svntest-cleanup.cmd
    R contrib/subversion/tools/buildbot/slaves/win32-SharpSvn/svntest-javahl.cmd
    R contrib/subversion/tools/buildbot/slaves/win32-SharpSvn/svntest-template.cmd
    R contrib/subversion/tools/buildbot/slaves/win32-SharpSvn/svntest-test.cmd
    R contrib/subversion/tools/buildbot/slaves/win32-xp-VS2005/config.bat
    R contrib/subversion/tools/buildbot/slaves/win32-xp-VS2005/do_all.bat
    R contrib/subversion/tools/buildbot/slaves/win32-xp-VS2005/svnbuild.bat
    R contrib/subversion/tools/buildbot/slaves/win32-xp-VS2005/svncheck.bat
    R contrib/subversion/tools/buildbot/slaves/win32-xp-VS2005/svnclean.bat
    R contrib/subversion/tools/buildbot/slaves/win32-xp-VS2005/svnlog.bat
    R contrib/subversion/tools/client-side/bash_completion
    R contrib/subversion/tools/client-side/bash_completion_test
    R contrib/subversion/tools/client-side/change-svn-wc-format.py
    R contrib/subversion/tools/client-side/mergeinfo-sanitizer.py
    R contrib/subversion/tools/client-side/server-version.py
    R contrib/subversion/tools/client-side/svn-graph.pl
    R contrib/subversion/tools/client-side/svn-mergeinfo-normalizer/analyze-cmd.c
    R contrib/subversion/tools/client-side/svn-mergeinfo-normalizer/help-cmd.c
    R contrib/subversion/tools/client-side/svn-mergeinfo-normalizer/log.c
    R contrib/subversion/tools/client-side/svn-mergeinfo-normalizer/logic.c
    R contrib/subversion/tools/client-side/svn-mergeinfo-normalizer/mergeinfo-normalizer.h
    R contrib/subversion/tools/client-side/svn-mergeinfo-normalizer/missing-branches.c
    R contrib/subversion/tools/client-side/svn-mergeinfo-normalizer/normalize-cmd.c
    R contrib/subversion/tools/client-side/svn-mergeinfo-normalizer/remove-branches-cmd.c
    R contrib/subversion/tools/client-side/svn-mergeinfo-normalizer/svn-mergeinfo-normalizer.c
    R contrib/subversion/tools/client-side/svn-mergeinfo-normalizer/wc_mergeinfo.c
    R contrib/subversion/tools/client-side/svn-ssl-fingerprints.sh
    R contrib/subversion/tools/client-side/svn-vendor.py
    R contrib/subversion/tools/client-side/svn-viewspec.py
    R contrib/subversion/tools/client-side/svnconflict/README
    R contrib/subversion/tools/client-side/svnconflict/svnconflict.c
    R contrib/subversion/tools/client-side/svnviewspec_test.py
    R contrib/subversion/tools/client-side/wcfind
    R contrib/subversion/tools/dev/analyze-svnlogs.py
    R contrib/subversion/tools/dev/aprerr.txt
    R contrib/subversion/tools/dev/benchmarks/RepoPerf/ClearMemory.cpp
    R contrib/subversion/tools/dev/benchmarks/RepoPerf/TimeWin.cpp
    R contrib/subversion/tools/dev/benchmarks/RepoPerf/copy_repo.py
    R contrib/subversion/tools/dev/benchmarks/RepoPerf/win_repo_bench.py
    R contrib/subversion/tools/dev/benchmarks/large_dirs/create_bigdir.sh
    R contrib/subversion/tools/dev/benchmarks/suite1/benchmark.py
    R contrib/subversion/tools/dev/benchmarks/suite1/cronjob
    R contrib/subversion/tools/dev/benchmarks/suite1/crontab.entry
    R contrib/subversion/tools/dev/benchmarks/suite1/generate_charts
    R contrib/subversion/tools/dev/benchmarks/suite1/run
    R contrib/subversion/tools/dev/benchmarks/suite1/run.bat
    R contrib/subversion/tools/dev/build-svn-deps-win.pl
    R contrib/subversion/tools/dev/check-license.py
    R contrib/subversion/tools/dev/contribulyze.py
    R contrib/subversion/tools/dev/datecheck.py
    R contrib/subversion/tools/dev/find-bad-style.py
    R contrib/subversion/tools/dev/find-control-statements.py
    R contrib/subversion/tools/dev/find-unmoved-deprecated.sh
    R contrib/subversion/tools/dev/fsfs-access-map.c
    R contrib/subversion/tools/dev/gdb-py/README
    R contrib/subversion/tools/dev/gdb-py/svndbg/__init__.py
    R contrib/subversion/tools/dev/gdb-py/svndbg/printers.py
    R contrib/subversion/tools/dev/gen-javahl-errors.py
    R contrib/subversion/tools/dev/gen-py-errors.py
    R contrib/subversion/tools/dev/gen_junit_report.py
    R contrib/subversion/tools/dev/gnuify-changelog.pl
    R contrib/subversion/tools/dev/graph-dav-servers.py
    R contrib/subversion/tools/dev/histogram.py
    R contrib/subversion/tools/dev/iz/defect.dem
    R contrib/subversion/tools/dev/iz/ff2csv.command
    R contrib/subversion/tools/dev/iz/ff2csv.py
    R contrib/subversion/tools/dev/iz/find-fix.py
    R contrib/subversion/tools/dev/iz/run-queries.sh
    R contrib/subversion/tools/dev/lock-check.py
    R contrib/subversion/tools/dev/log_revnum_change_asf.py
    R contrib/subversion/tools/dev/merge-graph.py
    R contrib/subversion/tools/dev/mergegraph/__init__.py
    R contrib/subversion/tools/dev/mergegraph/mergegraph.py
    R contrib/subversion/tools/dev/mergegraph/save_as_sh.py
    R contrib/subversion/tools/dev/min-includes.sh
    R contrib/subversion/tools/dev/mklog.py
    R contrib/subversion/tools/dev/mlpatch.py
    R contrib/subversion/tools/dev/normalize-dump.py
    R contrib/subversion/tools/dev/po-merge.py
    R contrib/subversion/tools/dev/prebuild-cleanup.sh
    R contrib/subversion/tools/dev/random-commits.py
    R contrib/subversion/tools/dev/remove-trailing-whitespace.sh
    R contrib/subversion/tools/dev/sbox-ospath.py
    R contrib/subversion/tools/dev/scramble-tree.py
    R contrib/subversion/tools/dev/stress.pl
    R contrib/subversion/tools/dev/svn-dev.el
    R contrib/subversion/tools/dev/svn-dev.vim
    R contrib/subversion/tools/dev/svn-entries.el
    R contrib/subversion/tools/dev/svn-merge-revs.py
    R contrib/subversion/tools/dev/svnmover/linenoise/LICENSE
    R contrib/subversion/tools/dev/svnmover/linenoise/README.markdown
    R contrib/subversion/tools/dev/svnmover/linenoise/linenoise.c
    R contrib/subversion/tools/dev/svnmover/linenoise/linenoise.h
    R contrib/subversion/tools/dev/svnmover/merge3.c
    R contrib/subversion/tools/dev/svnmover/ra.c
    R contrib/subversion/tools/dev/svnmover/scanlog.c
    R contrib/subversion/tools/dev/svnmover/svnmover.c
    R contrib/subversion/tools/dev/svnmover/svnmover.h
    R contrib/subversion/tools/dev/svnmover/util.c
    R contrib/subversion/tools/dev/svnqlite3-dump
    R contrib/subversion/tools/dev/svnraisetreeconflict/svnraisetreeconflict.c
    R contrib/subversion/tools/dev/trails.py
    R contrib/subversion/tools/dev/unix-build/Makefile.svn
    R contrib/subversion/tools/dev/unix-build/README
    R contrib/subversion/tools/dev/verify-history.py
    R contrib/subversion/tools/dev/warn-ignored-err.sh
    R contrib/subversion/tools/dev/wc-format.py
    R contrib/subversion/tools/dev/wc-ng/bump-to-19.py
    R contrib/subversion/tools/dev/wc-ng/count-progress.py
    R contrib/subversion/tools/dev/wc-ng/gather-data.sh
    R contrib/subversion/tools/dev/wc-ng/graph-data.py
    R contrib/subversion/tools/dev/wc-ng/populate-pristine.py
    R contrib/subversion/tools/dev/wc-ng/svn-wc-db-tester.c
    R contrib/subversion/tools/dev/which-error.py
    R contrib/subversion/tools/dev/windows-build/Makefile
    R contrib/subversion/tools/dev/windows-build/README
    R contrib/subversion/tools/dev/windows-build/document-version.pl
    R contrib/subversion/tools/dev/x509-parser.c
    R contrib/subversion/tools/diff/diff.c
    R contrib/subversion/tools/diff/diff3.c
    R contrib/subversion/tools/diff/diff4.c
    R contrib/subversion/tools/dist/README.advisory
    R contrib/subversion/tools/dist/README.backport
    R contrib/subversion/tools/dist/advisory.py
    R contrib/subversion/tools/dist/backport.pl
    R contrib/subversion/tools/dist/backport/__init__.py
    R contrib/subversion/tools/dist/backport/merger.py
    R contrib/subversion/tools/dist/backport/status.py
    R contrib/subversion/tools/dist/backport_tests.py
    R contrib/subversion/tools/dist/backport_tests_data/backport_accept.dump
    R contrib/subversion/tools/dist/backport_tests_data/backport_branch_with_original_revision.dump
    R contrib/subversion/tools/dist/backport_tests_data/backport_branches.dump
    R contrib/subversion/tools/dist/backport_tests_data/backport_indented_entry.dump
    R contrib/subversion/tools/dist/backport_tests_data/backport_logsummary_colon.dump
    R contrib/subversion/tools/dist/backport_tests_data/backport_multirevisions.dump
    R contrib/subversion/tools/dist/backport_tests_data/backport_two_approveds.dump
    R contrib/subversion/tools/dist/backport_tests_data/backport_unicode_entry.dump
    R contrib/subversion/tools/dist/backport_tests_pl.py
    R contrib/subversion/tools/dist/backport_tests_py.py
    R contrib/subversion/tools/dist/changes-to-html.py
    R contrib/subversion/tools/dist/checksums.py
    R contrib/subversion/tools/dist/detect-conflicting-backports.py
    R contrib/subversion/tools/dist/dist.sh
    R contrib/subversion/tools/dist/edit-N-log-messages
    R contrib/subversion/tools/dist/extract-for-examination.sh
    R contrib/subversion/tools/dist/merge-approved-backports.py
    R contrib/subversion/tools/dist/nightly.sh
    R contrib/subversion/tools/dist/nominate.pl
    R contrib/subversion/tools/dist/rat-excludes
    R contrib/subversion/tools/dist/release-lines.yaml
    R contrib/subversion/tools/dist/release.py
    R contrib/subversion/tools/dist/security/__init__.py
    R contrib/subversion/tools/dist/security/_gnupg.py
    R contrib/subversion/tools/dist/security/adviser.py
    R contrib/subversion/tools/dist/security/mailer.py
    R contrib/subversion/tools/dist/security/mailinglist.py
    R contrib/subversion/tools/dist/security/parser.py
    R contrib/subversion/tools/dist/templates/STATUS.ezt
    R contrib/subversion/tools/dist/templates/download.ezt
    R contrib/subversion/tools/dist/templates/rc-news.ezt
    R contrib/subversion/tools/dist/templates/rc-release-ann.ezt
    R contrib/subversion/tools/dist/templates/release-notes-lts.ezt
    R contrib/subversion/tools/dist/templates/release-notes.ezt
    R contrib/subversion/tools/dist/templates/stable-news.ezt
    R contrib/subversion/tools/dist/templates/stable-release-ann.ezt
    R contrib/subversion/tools/dist/test.sh
    R contrib/subversion/tools/examples/ExampleAuthn.java
    R contrib/subversion/tools/examples/ExampleAuthnOld.java
    R contrib/subversion/tools/examples/ExampleAuthnVeryOld.java
    R contrib/subversion/tools/examples/SvnCLBrowse
    R contrib/subversion/tools/examples/blame.py
    R contrib/subversion/tools/examples/check-modified.py
    R contrib/subversion/tools/examples/dumpprops.py
    R contrib/subversion/tools/examples/get-location-segments.py
    R contrib/subversion/tools/examples/getfile.py
    R contrib/subversion/tools/examples/getlocks_test.c
    R contrib/subversion/tools/examples/geturl.py
    R contrib/subversion/tools/examples/headrev.c
    R contrib/subversion/tools/examples/info.rb
    R contrib/subversion/tools/examples/minimal_client.c
    R contrib/subversion/tools/examples/putfile.py
    R contrib/subversion/tools/examples/revplist.py
    R contrib/subversion/tools/examples/svnlog2html.rb
    R contrib/subversion/tools/examples/svnlook.py
    R contrib/subversion/tools/examples/svnlook.rb
    R contrib/subversion/tools/examples/svnput.c
    R contrib/subversion/tools/examples/svnserve-sgid.c
    R contrib/subversion/tools/examples/svnshell.py
    R contrib/subversion/tools/examples/svnshell.rb
    R contrib/subversion/tools/examples/testwrite.c
    R contrib/subversion/tools/examples/walk-config-auth.py
    R contrib/subversion/tools/hook-scripts/CVE-2017-9800-pre-commit.py
    R contrib/subversion/tools/hook-scripts/commit-access-control.cfg.example
    R contrib/subversion/tools/hook-scripts/commit-access-control.pl.in
    R contrib/subversion/tools/hook-scripts/commit-email.rb
    R contrib/subversion/tools/hook-scripts/control-chars.py
    R contrib/subversion/tools/hook-scripts/log-police.py
    R contrib/subversion/tools/hook-scripts/mailer/mailer.conf.example
    R contrib/subversion/tools/hook-scripts/mailer/mailer.py
    R contrib/subversion/tools/hook-scripts/mailer/tests/mailer-init.sh
    R contrib/subversion/tools/hook-scripts/mailer/tests/mailer-t1.output
    R contrib/subversion/tools/hook-scripts/mailer/tests/mailer-t1.sh
    R contrib/subversion/tools/hook-scripts/mailer/tests/mailer-tweak.py
    R contrib/subversion/tools/hook-scripts/mailer/tests/mailer.conf
    R contrib/subversion/tools/hook-scripts/persist-ephemeral-txnprops.py
    R contrib/subversion/tools/hook-scripts/reject-detected-sha1-collisions.sh
    R contrib/subversion/tools/hook-scripts/reject-known-sha1-collisions.sh
    R contrib/subversion/tools/hook-scripts/svn2feed.py
    R contrib/subversion/tools/hook-scripts/svnperms.conf.example
    R contrib/subversion/tools/hook-scripts/svnperms.py
    R contrib/subversion/tools/hook-scripts/validate-extensions.py
    R contrib/subversion/tools/hook-scripts/validate-files.conf.example
    R contrib/subversion/tools/hook-scripts/validate-files.py
    R contrib/subversion/tools/hook-scripts/verify-po.py
    R contrib/subversion/tools/po/l10n-report.py
    R contrib/subversion/tools/po/po-update.sh
    R contrib/subversion/tools/server-side/fsfs-reshard.py
    R contrib/subversion/tools/server-side/mod_dontdothat/README
    R contrib/subversion/tools/server-side/mod_dontdothat/mod_dontdothat.c
    R contrib/subversion/tools/server-side/svn-backup-dumps.py
    R contrib/subversion/tools/server-side/svn-populate-node-origins-index.c
    R contrib/subversion/tools/server-side/svn_server_log_parse.py
    R contrib/subversion/tools/server-side/svnauthz.c
    R contrib/subversion/tools/server-side/svnpredumpfilter.py
    R contrib/subversion/tools/server-side/svnpubsub/README.txt
    R contrib/subversion/tools/server-side/svnpubsub/commit-hook.py
    R contrib/subversion/tools/server-side/svnpubsub/daemonize.py
    R contrib/subversion/tools/server-side/svnpubsub/irkerbridge.py
    R contrib/subversion/tools/server-side/svnpubsub/rc.d/svnpubsub
    R contrib/subversion/tools/server-side/svnpubsub/rc.d/svnpubsub.debian
    R contrib/subversion/tools/server-side/svnpubsub/rc.d/svnpubsub.freebsd
    R contrib/subversion/tools/server-side/svnpubsub/rc.d/svnpubsub.solaris
    R contrib/subversion/tools/server-side/svnpubsub/rc.d/svnwcsub
    R contrib/subversion/tools/server-side/svnpubsub/rc.d/svnwcsub.debian
    R contrib/subversion/tools/server-side/svnpubsub/rc.d/svnwcsub.freebsd
    R contrib/subversion/tools/server-side/svnpubsub/rc.d/svnwcsub.solaris
    R contrib/subversion/tools/server-side/svnpubsub/revprop-change-hook.py
    R contrib/subversion/tools/server-side/svnpubsub/svnpubsub.tac
    R contrib/subversion/tools/server-side/svnpubsub/svnpubsub/__init__.py
    R contrib/subversion/tools/server-side/svnpubsub/svnpubsub/client.py
    R contrib/subversion/tools/server-side/svnpubsub/svnpubsub/server.py
    R contrib/subversion/tools/server-side/svnpubsub/svnpubsub/util.py
    R contrib/subversion/tools/server-side/svnpubsub/svntweet.py
    R contrib/subversion/tools/server-side/svnpubsub/svnwcsub.conf.example
    R contrib/subversion/tools/server-side/svnpubsub/svnwcsub.py
    R contrib/subversion/tools/server-side/svnpubsub/testserver.py
    R contrib/subversion/tools/server-side/svnpubsub/watcher.py
    R contrib/subversion/tools/server-side/test_svn_server_log_parse.py
    R contrib/subversion/tools/xslt/svnindex.css
    R contrib/subversion/tools/xslt/svnindex.xsl

  Log Message:
  -----------
  prune tool files. not used.


  Commit: ac5f666755e6f3bc91c361cd2e4bf9a8a4a76f18
      https://github.com/MidnightBSD/src/commit/ac5f666755e6f3bc91c361cd2e4bf9a8a4a76f18
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2023-06-21 (Wed, 21 Jun 2023)

  Changed paths:
    R contrib/sqlite3/Makefile.msc
    R contrib/sqlite3/Replace.cs
    R contrib/sqlite3/sqlite3.rc

  Log Message:
  -----------
  remove windows specific files. they're coming up in some security scans.


Compare: https://github.com/MidnightBSD/src/compare/78a8fb111ca9...ac5f666755e6

From noreply at github.com  Wed Jun 21 09:20:02 2023
From: noreply at github.com (Lucas Holt)
Date: Wed, 21 Jun 2023 06:20:02 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/src] 68810e: bump os version
Message-ID: <MidnightBSD/src/push/refs/heads/stable/3.0/ac5f66-68810e@github.com>

  Branch: refs/heads/stable/3.0
  Home:   https://github.com/MidnightBSD/src
  Commit: 68810ea0714927b721cc4a86bfc456c882acee56
      https://github.com/MidnightBSD/src/commit/68810ea0714927b721cc4a86bfc456c882acee56
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2023-06-21 (Wed, 21 Jun 2023)

  Changed paths:
    M sys/conf/newvers.sh

  Log Message:
  -----------
  bump os version



From noreply at github.com  Wed Jun 21 09:21:39 2023
From: noreply at github.com (Lucas Holt)
Date: Wed, 21 Jun 2023 06:21:39 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/src] 68d48a: document security
 changes
Message-ID: <MidnightBSD/src/push/refs/heads/stable/3.0/68810e-68d48a@github.com>

  Branch: refs/heads/stable/3.0
  Home:   https://github.com/MidnightBSD/src
  Commit: 68d48ae209fbcdc961695d74100263b731ca45a9
      https://github.com/MidnightBSD/src/commit/68d48ae209fbcdc961695d74100263b731ca45a9
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2023-06-21 (Wed, 21 Jun 2023)

  Changed paths:
    M UPDATING

  Log Message:
  -----------
  document security changes



From noreply at github.com  Wed Jun 21 09:50:47 2023
From: noreply at github.com (Lucas Holt)
Date: Wed, 21 Jun 2023 06:50:47 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/src] 2169db: Revert "When using
 ssh-add(1) to add smartcard key...
Message-ID: <MidnightBSD/src/push/refs/heads/stable/3.0/68d48a-2169db@github.com>

  Branch: refs/heads/stable/3.0
  Home:   https://github.com/MidnightBSD/src
  Commit: 2169db02b3d99da905e2755f84082a25051b68e7
      https://github.com/MidnightBSD/src/commit/2169db02b3d99da905e2755f84082a25051b68e7
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2023-06-21 (Wed, 21 Jun 2023)

  Changed paths:
    M crypto/openssh/authfd.c

  Log Message:
  -----------
  Revert "When using ssh-add(1) to add smartcard keys to ssh-agent(1) with per-hop"

This reverts commit 7e052b4eb9b7616100d60a9529ec0b0be2a31c38.



From noreply at github.com  Wed Jun 21 09:51:12 2023
From: noreply at github.com (Lucas Holt)
Date: Wed, 21 Jun 2023 06:51:12 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/src] 5322cc: Revert "When using
 ssh-add(1) to add smartcard key...
Message-ID: <MidnightBSD/src/push/refs/heads/master/d7ee96-5322cc@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/src
  Commit: 5322ccef10ab2074fd0ffd480f6a09631d5e31a1
      https://github.com/MidnightBSD/src/commit/5322ccef10ab2074fd0ffd480f6a09631d5e31a1
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2023-06-21 (Wed, 21 Jun 2023)

  Changed paths:
    M crypto/openssh/authfd.c

  Log Message:
  -----------
  Revert "When using ssh-add(1) to add smartcard keys to ssh-agent(1) with per-hop"

This reverts commit d7ee965e4b8ed18743d7bfc9ad48c7b0bc5850fc.



From noreply at github.com  Wed Jun 21 15:37:42 2023
From: noreply at github.com (Lucas Holt)
Date: Wed, 21 Jun 2023 12:37:42 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/src] 7b8a4f: mpr(4) would fail to
 initialize the controller in ...
Message-ID: <MidnightBSD/src/push/refs/heads/master/5322cc-7b8a4f@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/src
  Commit: 7b8a4fe7be30c16dd71020aa4b5aa9869378556b
      https://github.com/MidnightBSD/src/commit/7b8a4fe7be30c16dd71020aa4b5aa9869378556b
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2023-06-21 (Wed, 21 Jun 2023)

  Changed paths:
    M sys/dev/mpr/mpr.c

  Log Message:
  -----------
  mpr(4) would fail to initialize the controller in some cases, making the
attached storage devices inaccessible.

Obtained from: FreeBSD



From noreply at github.com  Wed Jun 21 16:55:07 2023
From: noreply at github.com (Lucas Holt)
Date: Wed, 21 Jun 2023 13:55:07 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/src] af0074: mpr(4) would fail to
 initialize the controller in ...
Message-ID: <MidnightBSD/src/push/refs/heads/stable/3.0/2169db-af0074@github.com>

  Branch: refs/heads/stable/3.0
  Home:   https://github.com/MidnightBSD/src
  Commit: af007423e7dc1ecc437b992fd07e82182e80f826
      https://github.com/MidnightBSD/src/commit/af007423e7dc1ecc437b992fd07e82182e80f826
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2023-06-21 (Wed, 21 Jun 2023)

  Changed paths:
    M sys/dev/mpr/mpr.c

  Log Message:
  -----------
  mpr(4) would fail to initialize the controller in some cases, making the
attached storage devices inaccessible.

Obtained from: FreeBSD