openbsd/src, branch OPENBSD_4_6 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_4_6 2010-03-31T12:17:29+00:00 Security fix for CVE-2010-0740 2010-03-31T12:17:29+00:00 jasper 2010-03-31T12:17:29+00:00 urn:sha1:48b786510a2e23cb712e96454a283cc7216d9070 "In TLS connections, certain incorrectly formatted records can cause an OpenSSL client or server to crash due to a read attempt at NULL." http://openssl.org/news/secadv_20100324.txt ok djm@ sthen@ MFC, original commit by djm@: 2010-03-12T13:26:08+00:00 jasper 2010-03-12T13:26:08+00:00 urn:sha1:e1d514d70c111ea04798fa6e97072ea06e0ae866 --------------------------- cherrypick patch from OpenSSL 0.9.8m: *) Always check bn_wexpend() return values for failure. (CVE-2009-3245) [Martin Olsson, Neel Mehta] --------------------------- ok sthen@ Pull Ben Lauries blind prefix injection fix for CVE-2009-3555 from 2009-11-17T14:34:56+00:00 sthen 2009-11-17T14:34:56+00:00 urn:sha1:de2fb3aaad9c4aa5d5d324196d0e51de75946223 openssl 0.9.8l. As suggested by markus@, for -stable the header change is being restricted to a private file, so the minor version is not cranked here. Discussed with markus, djm, deraadt. This commit was manufactured by cvs2git to create branch 'OPENBSD_4_6'. 2009-06-25T14:33:52+00:00 cvs2svn admin@example.com 2009-06-25T14:33:52+00:00 urn:sha1:dff7a49e263b7f35da41af95b2c037ed7cf6f71a typo; 2009-06-25T14:33:50+00:00 jmc 2009-06-25T14:33:50+00:00 urn:sha1:853c477781aa5040102c78a01823a18b823076c8 fix rcs ids. ok sthen@ 2009-06-21T00:38:22+00:00 martynas 2009-06-21T00:38:22+00:00 urn:sha1:84b409ba6d9e714ff434ccacf0565cd051396526 abs conforms c99 -> imaxabs conforms c99. ok millert@ 2009-06-21T00:33:10+00:00 martynas 2009-06-21T00:33:10+00:00 urn:sha1:c2fd5f6b247d86a45d952c9b689af7c86ba86a46 make the regress target build the program before using it. 2009-06-09T18:16:40+00:00 phessler 2009-06-09T18:16:40+00:00 urn:sha1:0135dca112ec9b791518b53c41fed3a1cf49baaa OK millert@, deraadt@ Update to handle the default resolv order behavior. 2009-06-09T18:15:08+00:00 phessler 2009-06-09T18:15:08+00:00 urn:sha1:74570f0acac483344bd16784c3d1f408060f1f1b Add a note that the regress depends on the "family" keyword in resolv.conf OK millert@, deraadt@ quieten compiler by converting pointers to uintptr_t before truncating them 2009-06-08T19:21:08+00:00 deraadt 2009-06-08T19:21:08+00:00 urn:sha1:7da661713b58fcaf339fde465c90ead048d3745e to u_int32_t to do integer math with (in a situation where that is legit) ok otto millert