Date: Wed, 7 Jan 2009 20:17:55 +0000 (UTC) From: "Simon L. Nielsen" <simon@FreeBSD.org> To: cvs-src-old@freebsd.org Subject: cvs commit: src UPDATING src/contrib/lukemftpd/src extern.h ftpcmd.y ftpd.c src/crypto/openssl/apps speed.c spkac.c verify.c x509.c src/crypto/openssl/ssl s2_clnt.c s2_srvr.c s3_clnt.c s3_srvr.c src/sys/conf newvers.sh Message-ID: <200901072057.n07Kvv48077359@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
simon 2009-01-07 20:17:55 UTC
FreeBSD src repository
Modified files: (Branch: RELENG_6_4)
. UPDATING
contrib/lukemftpd/src extern.h ftpcmd.y ftpd.c
crypto/openssl/apps speed.c spkac.c verify.c x509.c
crypto/openssl/ssl s2_clnt.c s2_srvr.c s3_clnt.c s3_srvr.c
sys/conf newvers.sh
Log:
SVN rev 186872 on 2009-01-07 20:17:55Z by simon
Prevent cross-site forgery attacks on lukemftpd(8) due to splitting
long commands into multiple requests. [09:01]
Fix incorrect OpenSSL checks for malformed signatures due to invalid
check of return value from EVP_VerifyFinal(), DSA_verify, and
DSA_do_verify. [09:02]
Security: FreeBSD-SA-09:01.lukemftpd
Security: FreeBSD-SA-09:02.openssl
Obtained from: NetBSD [SA-09:01]
Obtained from: OpenSSL Project [SA-09:02]
Approved by: so (simon)
Revision Changes Path
1.416.2.40.2.5 +6 -0 src/UPDATING
1.1.1.4.2.1.6.1 +1 -1 src/contrib/lukemftpd/src/extern.h
1.1.1.5.2.1.6.1 +31 -8 src/contrib/lukemftpd/src/ftpcmd.y
1.4.2.1.6.2 +8 -2 src/contrib/lukemftpd/src/ftpd.c
1.13.12.1 +1 -1 src/crypto/openssl/apps/speed.c
1.1.1.4.24.1 +1 -1 src/crypto/openssl/apps/spkac.c
1.1.1.5.24.1 +1 -2 src/crypto/openssl/apps/verify.c
1.1.1.10.12.1 +1 -1 src/crypto/openssl/apps/x509.c
1.13.2.1.6.1 +1 -1 src/crypto/openssl/ssl/s2_clnt.c
1.12.12.1 +2 -2 src/crypto/openssl/ssl/s2_srvr.c
1.1.1.12.12.1 +2 -2 src/crypto/openssl/ssl/s3_clnt.c
1.1.1.14.2.1.6.1 +1 -1 src/crypto/openssl/ssl/s3_srvr.c
1.69.2.18.2.8 +1 -1 src/sys/conf/newvers.sh
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200901072057.n07Kvv48077359>