Implement a fix from OpenBSD 5.6-stable:

backport 1.100: support for $2b$ hashes. ok deraadt

ok pedro@
Implement a fix from OpenBSD 5.6-stable:

backport 1.34. Don't crash without HTTP version.

ok pedro@
Implement a fix from OpenBSD 5.6-stable:

backport fix to avoid null deref with invalid hostnames

ok pedro@
Implement a fix from OpenBSD 5.6-stable:

Check the header fields of GRE and MPPE packets strictly.

ok pedro@
Implement a fix from OpenBSD 5.6-stable:

backport the correct fix for overlapping memcpy which caused corrupt
MACs

ok pedro@
Implement a fix from OpenBSD 5.6-stable:

httpd was developed very rapidly in the weeks before 5.6 release,
and it has a few flaws.  It would be nice to get these flaws fully
remediated before the next release, and that requires the community
to want to use it.
Therefore here is a "jumbo" patch that brings in the most important
fixes.

committing on behalf of reyk@
Implement a fix from OpenBSD 5.6-stable:

Backport fix for CVE-2014-8602 - Limit the number of fetches performed
for a DNS query, to avoid the resolver being tricked into following an
endless series of delegations, consuming a lot of resources.
Many DNS
recursive resolvers are affected by this bug (including BIND,
Unbound,
and PowerDNS recursor). More details at:

http://www.unbound.net/pipermail/unbound-users/2014-December/003662.html

Diff from florian@, tested by myself.

ok pedro@