From owner-cvs-all@FreeBSD.ORG Thu Sep 28 13:04:19 2006 Return-Path: X-Original-To: cvs-all@FreeBSD.org Delivered-To: cvs-all@FreeBSD.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E292716A40F; Thu, 28 Sep 2006 13:04:19 +0000 (UTC) (envelope-from cperciva@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115]) by mx1.FreeBSD.org (Postfix) with ESMTP id 55CC243D67; Thu, 28 Sep 2006 13:04:16 +0000 (GMT) (envelope-from cperciva@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.13.6/8.13.6) with ESMTP id k8SD4GLv094729; Thu, 28 Sep 2006 13:04:16 GMT (envelope-from cperciva@repoman.freebsd.org) Received: (from cperciva@localhost) by repoman.freebsd.org (8.13.6/8.13.4/Submit) id k8SD4GqQ094728; Thu, 28 Sep 2006 13:04:16 GMT (envelope-from cperciva) Message-Id: <200609281304.k8SD4GqQ094728@repoman.freebsd.org> From: Colin Percival Date: Thu, 28 Sep 2006 13:04:16 +0000 (UTC) To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org X-FreeBSD-CVS-Branch: RELENG_5_5 Cc: Subject: cvs commit: src UPDATING src/crypto/openssl/crypto/asn1 tasn_dec.c src/crypto/openssl/crypto/dh dh.h dh_err.c dh_key.c src/crypto/openssl/crypto/dsa dsa.h dsa_err.c dsa_ossl.c src/crypto/openssl/crypto/rsa rsa.h rsa_eay.c rsa_err.c ... X-BeenThere: cvs-all@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: CVS commit messages for the entire tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Sep 2006 13:04:20 -0000 cperciva 2006-09-28 13:04:16 UTC FreeBSD src repository Modified files: (Branch: RELENG_5_5) . UPDATING crypto/openssl/crypto/asn1 tasn_dec.c crypto/openssl/crypto/dh dh.h dh_err.c dh_key.c crypto/openssl/crypto/dsa dsa.h dsa_err.c dsa_ossl.c crypto/openssl/crypto/rsa rsa.h rsa_eay.c rsa_err.c crypto/openssl/ssl s2_clnt.c s3_srvr.c ssl_lib.c sys/conf newvers.sh Log: Correct multiple vulnerabilities in crypto(3). Limit the size of public keys used in order to protect applications from a denial of service via insane key sizes. Security: FreeBSD-SA-06:23.openssl Approved by: so (cperciva) Revision Changes Path 1.342.2.35.2.6 +5 -0 src/UPDATING 1.1.1.2.16.1 +3 -0 src/crypto/openssl/crypto/asn1/tasn_dec.c 1.1.1.6.18.1 +5 -0 src/crypto/openssl/crypto/dh/dh.h 1.1.1.4.6.1.4.1 +1 -0 src/crypto/openssl/crypto/dh/dh_err.c 1.1.1.8.4.1.4.1 +6 -0 src/crypto/openssl/crypto/dh/dh_key.c 1.1.1.6.6.1.4.1 +6 -0 src/crypto/openssl/crypto/dsa/dsa.h 1.1.1.4.18.1 +2 -0 src/crypto/openssl/crypto/dsa/dsa_err.c 1.1.1.7.4.1.4.1 +12 -0 src/crypto/openssl/crypto/dsa/dsa_ossl.c 1.10.4.1.4.1 +13 -1 src/crypto/openssl/crypto/rsa/rsa.h 1.12.4.1.4.1 +45 -1 src/crypto/openssl/crypto/rsa/rsa_eay.c 1.1.1.4.18.1 +1 -0 src/crypto/openssl/crypto/rsa/rsa_err.c 1.12.2.1.4.1 +2 -1 src/crypto/openssl/ssl/s2_clnt.c 1.1.1.13.2.1.4.1 +1 -1 src/crypto/openssl/ssl/s3_srvr.c 1.1.1.11.2.1.4.1 +1 -1 src/crypto/openssl/ssl/ssl_lib.c 1.62.2.21.2.8 +1 -1 src/sys/conf/newvers.sh