openbsd/src/lib, branch OPENBSD_3_2

Pull patch from -current:

2003-10-01T22:46:22+00:00

SECURITY FIX Fixed by markus@ security fix from http://www.openssl.org/news/secadv_20030930.txt ok markus@ deraadt@

MFC:

2003-08-03T02:29:29+00:00

Fix by millert@ Rename rootd to needslash and invert its value. This fixes the check for ENAMETOOLONG, though since we use strlcpy() and strlcat() this is not a big deal. Problem found by vincent@ ok deraadt@

Errata #11 (markus):

2003-03-19T23:39:13+00:00

Fix for Klima-Pokorny-Rosa attack on RSA in SSL/TLS

Errata #11 (markus):

2003-03-19T01:18:21+00:00

Enforce blinding on RSA operations involving private keys. millert@ markus@ ok

Pull patch from current:

2003-02-22T22:14:48+00:00

Fix by markus@ check for size < 0 when allocating memory, from openssl (-r1.34) markus@ deraadt@ ok

Pull patch from current:

2003-02-22T22:12:13+00:00

Fix by markus@ security fix from openssl 0.9.7a: In ssl3_get_record (ssl/s3_pkt.c), minimize information leaked via timing by performing a MAC computation even if incorrrect block cipher padding has been found. This is a countermeasure against active attacks where the attacker has to distinguish between bad padding and a MAC verification error. (CAN-2003-0078) markus@ ok

Apply http://www.isc.org/products/BIND/patches/bind4910.diff

2002-11-14T23:50:10+00:00

Fixes bugs listed in http://www.isc.org/products/BIND/bind-security.html

This commit was manufactured by cvs2git to create branch 'OPENBSD_3_2'.

2002-09-26T11:41:24+00:00

do not install mdc2 man pages; markus ok

2002-09-26T11:41:22+00:00

remove MDC2; patents

2002-09-26T11:39:50+00:00