openbsd/src, branch OPENBSD_4_5 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_4_5 2010-03-31T12:16:44+00:00 Security fix for CVE-2010-0740 2010-03-31T12:16:44+00:00 jasper 2010-03-31T12:16:44+00:00 urn:sha1:2ee55d26ee7a373bc8d7e0cd1e4532884ada8fa0 "In TLS connections, certain incorrectly formatted records can cause an OpenSSL client or server to crash due to a read attempt at NULL." http://openssl.org/news/secadv_20100324.txt ok djm@ sthen@ MFC, original commit by djm@: 2010-03-12T13:26:41+00:00 jasper 2010-03-12T13:26:41+00:00 urn:sha1:5876608ee68cc67de9b401842a171c25c54031c2 --------------------------- cherrypick patch from OpenSSL 0.9.8m: *) Always check bn_wexpend() return values for failure. (CVE-2009-3245) [Martin Olsson, Neel Mehta] --------------------------- ok sthen@ Pull Ben Lauries blind prefix injection fix for CVE-2009-3555 from 2009-11-17T14:34:41+00:00 sthen 2009-11-17T14:34:41+00:00 urn:sha1:990837b47cd7f41d299b338edf67d7771c204288 openssl 0.9.8l. As suggested by markus@, for -stable the header change is being restricted to a private file, so the minor version is not cranked here. Discussed with markus, djm, deraadt. MFC: fixes for OpenSSL ASN.1 invalid memory accesses (CVE-2009-0590 and 2009-04-08T02:30:30+00:00 djm 2009-04-08T02:30:30+00:00 urn:sha1:90917d997a66b5127abae66212a5ff788b40772b CVE-2009-0789). This commit was manufactured by cvs2git to create branch 'OPENBSD_4_5'. 2009-02-18T15:24:57+00:00 cvs2svn admin@example.com 2009-02-18T15:24:57+00:00 urn:sha1:ba772f784ace9fbd80465f5d6c91340dda14ca7e Test to show glob bug introduced with POSIX char class support. 2009-02-18T15:24:55+00:00 millert 2009-02-18T15:24:55+00:00 urn:sha1:abdfc401087a2665c003eb5c01ed453a4cf8286e Add missing CURDIR 2009-02-18T15:17:55+00:00 millert 2009-02-18T15:17:55+00:00 urn:sha1:8bb5945fcf0ae1d7aeab55a1d8264aaca3c2259d kill whitespace at eol; 2009-02-13T23:36:17+00:00 jmc 2009-02-13T23:36:17+00:00 urn:sha1:0022884d4476647fcc43309b8c245c60ad1cab39 decribe 'F' better and mention flags are debugging aids; ok tedu@ jmc@ 2009-02-13T18:49:14+00:00 otto 2009-02-13T18:49:14+00:00 urn:sha1:5327674e2d04616a68f7f89905418f8fd3fa7cb9 correct function definitions; from Markus Bergkvist 2009-02-10T21:47:56+00:00 jmc 2009-02-10T21:47:56+00:00 urn:sha1:03ba8f736f8a96772bebb01f0fd7b1300d732472