From owner-cvs-src-old@FreeBSD.ORG Wed Apr 22 14:52:04 2009 Return-Path: Delivered-To: cvs-src-old@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 6F91E106582D for ; Wed, 22 Apr 2009 14:52:04 +0000 (UTC) (envelope-from cperciva@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [IPv6:2001:4f8:fff6::29]) by mx1.freebsd.org (Postfix) with ESMTP id 575DC8FC1A for ; Wed, 22 Apr 2009 14:52:04 +0000 (UTC) (envelope-from cperciva@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.14.3/8.14.3) with ESMTP id n3MEq4RC047255 for ; Wed, 22 Apr 2009 14:52:04 GMT (envelope-from cperciva@repoman.freebsd.org) Received: (from svn2cvs@localhost) by repoman.freebsd.org (8.14.3/8.14.3/Submit) id n3MEq4r2047254 for cvs-src-old@freebsd.org; Wed, 22 Apr 2009 14:52:04 GMT (envelope-from cperciva@repoman.freebsd.org) Message-Id: <200904221452.n3MEq4r2047254@repoman.freebsd.org> X-Authentication-Warning: repoman.freebsd.org: svn2cvs set sender to cperciva@repoman.freebsd.org using -f From: Colin Percival Date: Wed, 22 Apr 2009 14:07:14 +0000 (UTC) To: cvs-src-old@freebsd.org X-FreeBSD-CVS-Branch: RELENG_6_4 Subject: cvs commit: src UPDATING src/crypto/openssl/crypto/asn1 asn1.h asn1_err.c tasn_dec.c src/lib/libc/db/btree bt_split.c src/lib/libc/db/hash hash_buf.c src/lib/libc/db/mpool mpool.c src/sys/conf newvers.sh X-BeenThere: cvs-src-old@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: **OBSOLETE** CVS commit messages for the src tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Apr 2009 14:52:07 -0000 cperciva 2009-04-22 14:07:14 UTC FreeBSD src repository Modified files: (Branch: RELENG_6_4) . UPDATING crypto/openssl/crypto/asn1 asn1.h asn1_err.c tasn_dec.c lib/libc/db/btree bt_split.c lib/libc/db/hash hash_buf.c lib/libc/db/mpool mpool.c sys/conf newvers.sh Log: SVN rev 191381 on 2009-04-22 14:07:14Z by cperciva Don't leak information via uninitialized space in db(3) records. [09:07] Sanity-check string lengths in order to stop OpenSSL crashing when printing corrupt BMPString or UniversalString objects. [09:08] Security: FreeBSD-SA-09:07.libc Security: FreeBSD-SA-09:08.openssl Security: CVE-2009-0590 Approved by: re (kensmith) Approved by: so (cperciva) Revision Changes Path 1.416.2.40.2.8 +7 -0 src/UPDATING 1.1.1.7.22.1 +2 -0 src/crypto/openssl/crypto/asn1/asn1.h 1.1.1.4.24.1 +2 -0 src/crypto/openssl/crypto/asn1/asn1_err.c 1.1.1.2.10.1.6.1 +12 -0 src/crypto/openssl/crypto/asn1/tasn_dec.c 1.7.12.2 +1 -1 src/lib/libc/db/btree/bt_split.c 1.7.26.2 +6 -3 src/lib/libc/db/hash/hash_buf.c 1.12.12.2 +1 -1 src/lib/libc/db/mpool/mpool.c 1.69.2.18.2.10 +1 -1 src/sys/conf/newvers.sh