From owner-cvs-src-old@FreeBSD.ORG Wed Apr 22 14:45:39 2009 Return-Path: Delivered-To: cvs-src-old@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 04DE6106581E for ; Wed, 22 Apr 2009 14:45:39 +0000 (UTC) (envelope-from cperciva@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [IPv6:2001:4f8:fff6::29]) by mx1.freebsd.org (Postfix) with ESMTP id E16A48FC12 for ; Wed, 22 Apr 2009 14:45:38 +0000 (UTC) (envelope-from cperciva@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.14.3/8.14.3) with ESMTP id n3MEjctW046762 for ; Wed, 22 Apr 2009 14:45:38 GMT (envelope-from cperciva@repoman.freebsd.org) Received: (from svn2cvs@localhost) by repoman.freebsd.org (8.14.3/8.14.3/Submit) id n3MEjcto046761 for cvs-src-old@freebsd.org; Wed, 22 Apr 2009 14:45:38 GMT (envelope-from cperciva@repoman.freebsd.org) Message-Id: <200904221445.n3MEjcto046761@repoman.freebsd.org> X-Authentication-Warning: repoman.freebsd.org: svn2cvs set sender to cperciva@repoman.freebsd.org using -f From: Colin Percival Date: Wed, 22 Apr 2009 14:07:14 +0000 (UTC) To: cvs-src-old@freebsd.org X-FreeBSD-CVS-Branch: RELENG_6_3 Subject: cvs commit: src UPDATING src/crypto/openssl/crypto/asn1 asn1.h asn1_err.c tasn_dec.c src/lib/libc/db/btree bt_split.c src/lib/libc/db/hash hash_buf.c src/lib/libc/db/mpool mpool.c src/sys/conf newvers.sh X-BeenThere: cvs-src-old@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: **OBSOLETE** CVS commit messages for the src tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Apr 2009 14:45:40 -0000 cperciva 2009-04-22 14:07:14 UTC FreeBSD src repository Modified files: (Branch: RELENG_6_3) . UPDATING crypto/openssl/crypto/asn1 asn1.h asn1_err.c tasn_dec.c lib/libc/db/btree bt_split.c lib/libc/db/hash hash_buf.c lib/libc/db/mpool mpool.c sys/conf newvers.sh Log: SVN rev 191381 on 2009-04-22 14:07:14Z by cperciva Don't leak information via uninitialized space in db(3) records. [09:07] Sanity-check string lengths in order to stop OpenSSL crashing when printing corrupt BMPString or UniversalString objects. [09:08] Security: FreeBSD-SA-09:07.libc Security: FreeBSD-SA-09:08.openssl Security: CVE-2009-0590 Approved by: re (kensmith) Approved by: so (cperciva) Revision Changes Path 1.416.2.37.2.15 +7 -0 src/UPDATING 1.1.1.7.20.1 +2 -0 src/crypto/openssl/crypto/asn1/asn1.h 1.1.1.4.22.1 +2 -0 src/crypto/openssl/crypto/asn1/asn1_err.c 1.1.1.2.10.1.4.1 +12 -0 src/crypto/openssl/crypto/asn1/tasn_dec.c 1.7.10.1 +1 -1 src/lib/libc/db/btree/bt_split.c 1.7.24.1 +6 -3 src/lib/libc/db/hash/hash_buf.c 1.12.10.1 +1 -1 src/lib/libc/db/mpool/mpool.c 1.69.2.15.2.14 +1 -1 src/sys/conf/newvers.sh