Date: Thu, 28 Sep 2006 13:06:23 +0000 (UTC) From: Colin Percival <cperciva@FreeBSD.org> To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src UPDATING src/crypto/openssl/crypto/asn1 tasn_dec.c src/crypto/openssl/crypto/dh dh.h dh_err.c dh_key.c src/crypto/openssl/crypto/dsa dsa.h dsa_err.c dsa_ossl.c src/crypto/openssl/crypto/rsa rsa.h rsa_eay.c rsa_err.c ... Message-ID: <200609281306.k8SD6Ox5095448@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
cperciva 2006-09-28 13:06:23 UTC FreeBSD src repository Modified files: (Branch: RELENG_4_11) . UPDATING crypto/openssl/crypto/asn1 tasn_dec.c crypto/openssl/crypto/dh dh.h dh_err.c dh_key.c crypto/openssl/crypto/dsa dsa.h dsa_err.c dsa_ossl.c crypto/openssl/crypto/rsa rsa.h rsa_eay.c rsa_err.c crypto/openssl/ssl s2_clnt.c s3_srvr.c ssl_lib.c sys/conf newvers.sh Log: Correct multiple vulnerabilities in crypto(3). Limit the size of public keys used in order to protect applications from a denial of service via insane key sizes. Security: FreeBSD-SA-06:23.openssl Approved by: so (cperciva) Revision Changes Path 1.73.2.91.2.24 +5 -0 src/UPDATING 1.1.1.1.2.2.6.1 +3 -0 src/crypto/openssl/crypto/asn1/tasn_dec.c 1.1.1.1.2.4.8.1 +5 -0 src/crypto/openssl/crypto/dh/dh.h 1.1.1.1.2.3.8.1 +1 -0 src/crypto/openssl/crypto/dh/dh_err.c 1.1.1.1.2.7.6.1 +6 -0 src/crypto/openssl/crypto/dh/dh_key.c 1.1.1.1.2.4.8.1 +6 -0 src/crypto/openssl/crypto/dsa/dsa.h 1.1.1.1.2.3.8.1 +2 -0 src/crypto/openssl/crypto/dsa/dsa_err.c 1.1.1.1.2.7.6.1 +12 -0 src/crypto/openssl/crypto/dsa/dsa_ossl.c 1.2.2.8.4.1 +13 -1 src/crypto/openssl/crypto/rsa/rsa.h 1.2.4.8.4.1 +45 -1 src/crypto/openssl/crypto/rsa/rsa_eay.c 1.1.1.1.2.3.8.1 +1 -0 src/crypto/openssl/crypto/rsa/rsa_err.c 1.2.2.8.4.1 +2 -1 src/crypto/openssl/ssl/s2_clnt.c 1.1.1.1.2.9.4.1 +1 -1 src/crypto/openssl/ssl/s3_srvr.c 1.1.1.1.2.8.4.1 +1 -1 src/crypto/openssl/ssl/ssl_lib.c 1.44.2.39.2.27 +1 -1 src/sys/conf/newvers.sh
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200609281306.k8SD6Ox5095448>