openbsd/src, branch OPENBSD_5_5_BASE A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_5_5_BASE 2014-02-27T21:04:58+00:00 This commit was manufactured by cvs2git to create tag 'OPENBSD_5_5_BASE'. 2014-02-27T21:04:58+00:00 cvs2svn admin@example.com 2014-02-27T21:04:58+00:00 urn:sha1:7461eefab242fc2979d88c1426d199ec5e56d34d SECURITY fixes backported from openssl-1.0.1f. ok mikeb@ 2014-02-27T21:04:57+00:00 jca 2014-02-27T21:04:57+00:00 urn:sha1:2f599a95f29ebaa4869bf0dfe86551f934af1b7f CVE-2013-4353 NULL pointer dereference with crafted Next Protocol Negotiation record in TLS handshake. Upstream: 197e0ea CVE-2013-6449 Fix crash with crafted traffic from a TLS 1.2 client. Upstream: ca98926, 0294b2b CVE-2013-6450 Fix DTLS retransmission from previous session. Upstream: 3462896 Once more, the default routing table id is inherited from the process 2014-02-26T20:56:11+00:00 claudio 2014-02-26T20:56:11+00:00 urn:sha1:4e4f0581648a8699ae532d5ccea19affc3ca144d like for any other process as well. OK by many solar's testsuite revealed insufficient validation of invalid input hashes. 2014-02-24T19:45:43+00:00 tedu 2014-02-24T19:45:43+00:00 urn:sha1:0a7c04879701c319753fb7b6664bf98b6b4e27b2 add a more complete check for the rounds parameter. ok deraadt in HISTORY, say where this actually came from; 2014-02-23T23:09:34+00:00 schwarze 2014-02-23T23:09:34+00:00 urn:sha1:2d56df9fd2f6fec6042cae8f61e95154cfdbcd3a ok deraadt@ bentley@ replace spaces with tabs for indentation 2014-02-17T21:05:39+00:00 stsp 2014-02-17T21:05:39+00:00 urn:sha1:da3120dd388a79fbfd0feeb6419947b29fcee754 remove redundant test 2014-02-17T09:00:20+00:00 tedu 2014-02-17T09:00:20+00:00 urn:sha1:cfb57f8dea58aa0fd855cf28daa6516a6085ae99 sticking strlen into a char leads to wraparound at 256. fix this and 2014-02-17T08:58:50+00:00 tedu 2014-02-17T08:58:50+00:00 urn:sha1:da514e89b9dcce7f1975dca5dd2e4e379b47ef09 introduce a new 'b' hash minor. still generate 'a' minors for now. reported by solar designer. diff by some combination of solar and jca. ok deraadt one of the examples needs -N to work again; 2014-02-10T19:21:50+00:00 jmc 2014-02-10T19:21:50+00:00 urn:sha1:55f16b7ea347148847219eb63a428404de53b011 the paper trail appears to be: reported in feebsd pr docs/185353 by rol robert-eckardt de fix suggested by peter wemm diff submitted to tech by allan jude Fix inet6_opt_init() to only check extlen when extbuff is not NULL 2014-02-07T09:50:04+00:00 mpi 2014-02-07T09:50:04+00:00 urn:sha1:10484202fb7550c7f0f57721abcdb8532cbd7b01 as per RFC 3542, from DragonFlyBSD via Eitan Adler. ok bluhm@