From owner-cvs-src-old@FreeBSD.ORG Wed Jan 7 20:57:57 2009 Return-Path: Delivered-To: cvs-src-old@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id BDA7D10657C4 for ; Wed, 7 Jan 2009 20:57:57 +0000 (UTC) (envelope-from simon@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [IPv6:2001:4f8:fff6::29]) by mx1.freebsd.org (Postfix) with ESMTP id A823C8FC1E for ; Wed, 7 Jan 2009 20:57:57 +0000 (UTC) (envelope-from simon@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.14.3/8.14.3) with ESMTP id n07KvvFB077360 for ; Wed, 7 Jan 2009 20:57:57 GMT (envelope-from simon@repoman.freebsd.org) Received: (from svn2cvs@localhost) by repoman.freebsd.org (8.14.3/8.14.3/Submit) id n07Kvv48077359 for cvs-src-old@freebsd.org; Wed, 7 Jan 2009 20:57:57 GMT (envelope-from simon@repoman.freebsd.org) Message-Id: <200901072057.n07Kvv48077359@repoman.freebsd.org> X-Authentication-Warning: repoman.freebsd.org: svn2cvs set sender to simon@repoman.freebsd.org using -f From: "Simon L. Nielsen" Date: Wed, 7 Jan 2009 20:17:55 +0000 (UTC) To: cvs-src-old@freebsd.org X-FreeBSD-CVS-Branch: RELENG_6_4 Subject: cvs commit: src UPDATING src/contrib/lukemftpd/src extern.h ftpcmd.y ftpd.c src/crypto/openssl/apps speed.c spkac.c verify.c x509.c src/crypto/openssl/ssl s2_clnt.c s2_srvr.c s3_clnt.c s3_srvr.c src/sys/conf newvers.sh X-BeenThere: cvs-src-old@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: **OBSOLETE** CVS commit messages for the src tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Jan 2009 20:57:58 -0000 simon 2009-01-07 20:17:55 UTC FreeBSD src repository Modified files: (Branch: RELENG_6_4) . UPDATING contrib/lukemftpd/src extern.h ftpcmd.y ftpd.c crypto/openssl/apps speed.c spkac.c verify.c x509.c crypto/openssl/ssl s2_clnt.c s2_srvr.c s3_clnt.c s3_srvr.c sys/conf newvers.sh Log: SVN rev 186872 on 2009-01-07 20:17:55Z by simon Prevent cross-site forgery attacks on lukemftpd(8) due to splitting long commands into multiple requests. [09:01] Fix incorrect OpenSSL checks for malformed signatures due to invalid check of return value from EVP_VerifyFinal(), DSA_verify, and DSA_do_verify. [09:02] Security: FreeBSD-SA-09:01.lukemftpd Security: FreeBSD-SA-09:02.openssl Obtained from: NetBSD [SA-09:01] Obtained from: OpenSSL Project [SA-09:02] Approved by: so (simon) Revision Changes Path 1.416.2.40.2.5 +6 -0 src/UPDATING 1.1.1.4.2.1.6.1 +1 -1 src/contrib/lukemftpd/src/extern.h 1.1.1.5.2.1.6.1 +31 -8 src/contrib/lukemftpd/src/ftpcmd.y 1.4.2.1.6.2 +8 -2 src/contrib/lukemftpd/src/ftpd.c 1.13.12.1 +1 -1 src/crypto/openssl/apps/speed.c 1.1.1.4.24.1 +1 -1 src/crypto/openssl/apps/spkac.c 1.1.1.5.24.1 +1 -2 src/crypto/openssl/apps/verify.c 1.1.1.10.12.1 +1 -1 src/crypto/openssl/apps/x509.c 1.13.2.1.6.1 +1 -1 src/crypto/openssl/ssl/s2_clnt.c 1.12.12.1 +2 -2 src/crypto/openssl/ssl/s2_srvr.c 1.1.1.12.12.1 +2 -2 src/crypto/openssl/ssl/s3_clnt.c 1.1.1.14.2.1.6.1 +1 -1 src/crypto/openssl/ssl/s3_srvr.c 1.69.2.18.2.8 +1 -1 src/sys/conf/newvers.sh