Baptiste Daroussin 13fb6dbc73 nuageinit: validate set-name to prevent shell injection in variable names ...

Shell variable names cannot be safely quoted with shell_escape() —
only alphanumeric characters are valid. Add validation that set-name
only matches [a-zA-Z0-9]+; invalid values are rejected with a
warning and the rename is skipped entirely.

2026-06-09 18:04:25 +02:00

..

atf

pkgbase: Move all of ATF into the atf package

2026-03-30 16:03:29 +02:00

atrun

…

blocklistd-helper

Revert "blocklist-helper: Silence a bogus pf warning"

2025-10-28 11:52:42 +00:00

bootpd

…

comsat

comsat: Don't return from the child

2025-07-28 17:28:59 +02:00

dma

Replace last few remaining MAN[1-8] with MAN

2025-07-26 12:00:02 +02:00

fingerd

blocklist: Rename blacklist to blocklist

2025-10-12 17:14:27 +00:00

flua

stand: lua: break out a few more dirent types in lfs

2026-03-09 16:39:10 -05:00

getty

Revert "libc: Constify the getcap API"

2026-06-05 19:15:46 +02:00

hyperv

…

mail.local

…

makewhatis.local

periodic: Move 320.whatis to the mandoc package

2025-11-06 15:20:52 +00:00

mknetid

…

nuageinit

nuageinit: validate set-name to prevent shell injection in variable names

2026-06-09 18:04:25 +02:00

phttpget

…

pkg-serve

pkg-serve(8): serve pkg repositories over TCP via inetd (8)

2026-03-20 13:29:48 +01:00

pppoed

chat, pppoed: Move to the ppp package

2025-09-23 23:06:32 +01:00

rbootd

…

rc

rc: Bail if /dev/null is not a device

2026-06-05 17:53:29 +02:00

revnetgroup

…

rpc.rquotad

…

rpc.rstatd

…

rpc.rusersd

…

rpc.rwalld

…

rpc.sprayd

…

rtld-elf

rtld: fix processing of preloaded z_initfirst objects

2026-04-20 20:25:20 +03:00

rtld-elf32

…

save-entropy

…

smrsh

…

talkd

ttymsg: Overhaul

2026-05-25 18:52:15 +02:00

tcpd

…

tests

…

tftp-proxy

…

tftpd

tftpd: Simplify packet drop macro

2026-05-22 19:57:35 +02:00

ulog-helper

…

ypxfr

…

Makefile

libexec: Add pkg-serve directory

2026-03-29 16:13:09 +00:00

Makefile.inc

…