openbsd/src/lib, branch OPENBSD_4_7 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_4_7 2011-02-11T03:23:39+00:00 MFC: 2011-02-11T03:23:39+00:00 djm 2011-02-11T03:23:39+00:00 urn:sha1:de026953401bceeb507b84983e244639462d6598 ---------------------------- revision 1.8 date: 2011/02/10 22:40:27; author: djm; state: Exp; lines: +7 -1 fix for CVE-2011-0014 "OCSP stapling vulnerability"; ok markus@ jasper@ miod@ AFAIK nothing in base uses this, though apache2 from ports may be affected. ---------------------------- Security fix for CVE-2010-4180 as mentioned in http://www.openssl.org/news/secadv_20101202.txt. 2010-12-15T09:44:25+00:00 jasper 2010-12-15T09:44:25+00:00 urn:sha1:e6411b47d6dcb44d9016266fae15f1292dfbd319 where clients could modify the stored session cache ciphersuite and in some cases even downgrade the suite to weaker ones. This code is not enabled by default. ok djm@ - Apply security fix for CVE-2010-3864. 2010-11-17T19:14:22+00:00 jasper 2010-11-17T19:14:22+00:00 urn:sha1:63a39dcec5af72c8e5548c4ab6e63f53ea446965 ok djm@ deraadt@ ecurity fix for CVE-2010-0740 2010-03-31T12:17:41+00:00 jasper 2010-03-31T12:17:41+00:00 urn:sha1:85441e218187c663da9c679f474a7160c85ee3f2 "In TLS connections, certain incorrectly formatted records can cause an OpenSSL client or server to crash due to a read attempt at NULL." http://openssl.org/news/secadv_20100324.txt ok djm@ sthen@ This commit was manufactured by cvs2git to create branch 'OPENBSD_4_7'. 2010-03-10T20:46:18+00:00 cvs2svn admin@example.com 2010-03-10T20:46:18+00:00 urn:sha1:b1588b57c8d7dac5211d733762cf8d4cd26aa459 It's unsetenv() that doesn't like `=' in the argument, not putenv(). 2010-03-10T20:46:16+00:00 kili 2010-03-10T20:46:16+00:00 urn:sha1:a7a853e149f5a2468fd738638c4641dd59d6bc31 ok millert@ cherrypick patch from OpenSSL 0.9.8m: 2010-03-04T11:02:42+00:00 djm 2010-03-04T11:02:42+00:00 urn:sha1:9f75721dec306b453d31851a26bad908e9605c4f *) Always check bn_wexpend() return values for failure. (CVE-2009-3245) [Martin Olsson, Neel Mehta] Use size_t in appropriate places; fixes sorting of big arrays; 2010-02-08T11:04:07+00:00 otto 2010-02-08T11:04:07+00:00 urn:sha1:f6129285462a0eff1c43458954cfc5ac8b927444 after the diff was written, I made it similar to the freebsd fix of the same code; pr6287 ok millert@ guenther@ use size_t to index arrays; avoids big array bugs; ok millert@ guenther@ 2010-02-08T11:01:52+00:00 otto 2010-02-08T11:01:52+00:00 urn:sha1:51ca5794e1468e2ad153e694158bc7be8a042399 Use MACHINE_CPU instead of MACHINE_ARCH to pick the correct machine dependent 2010-02-03T20:49:00+00:00 miod 2010-02-03T20:49:00+00:00 urn:sha1:aaa0cabd6a83ca6edba4b6122b65033db1337306 files or directories when applicable. The inspiration and name of MACHINE_CPU come from NetBSD, although the way to provide it to Makefiles is completely different. ok kettenis@