Date: Wed, 29 Jun 2005 21:41:03 +0000 (UTC) From: "Simon L. Nielsen" <simon@FreeBSD.org> To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src UPDATING src/contrib/bzip2 bzip2.c bzlib.c compress.c decompress.c huffman.c src/sys/conf newvers.sh src/sys/netinet ip_fw2.c tcp_input.c tcp_seq.h Message-ID: <200506292141.j5TLf33C046669@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
simon 2005-06-29 21:41:03 UTC
FreeBSD src repository (doc,ports committer)
Modified files: (Branch: RELENG_5_4)
. UPDATING
contrib/bzip2 bzip2.c bzlib.c compress.c decompress.c
huffman.c
sys/conf newvers.sh
sys/netinet ip_fw2.c tcp_input.c tcp_seq.h
Log:
Correct ipfw packet matching errors with address tables.
Security: CAN-2005-2019
Security: FreeBSD-SA-05:13.ipfw
Correct bzip2 denial of service and permission race vulnerabilities.
Obtained from: Redhat, Steve Grubb via RedHat
Security: CAN-2005-0953, CAN-2005-1260
Security: FreeBSD-SA-05:14.bzip2
Approved by: obrien
Correct TCP connection stall denial-of-service vulnerabilities.
MFC: rev 1.270 of tcp_input.c, rev 1.25 of tcp_seq.h by ps: When a TCP
packets containing a timestamp is received, inadequate checking of
sequence numbers is performed, allowing an attacker to artificially
increase the internal "recent" timestamp for a connection.
A TCP packets with the SYN flag set is accepted for established
connections, allowing an attacker to overwrite certain TCP options.
Security: CAN-2005-0356, CAN-2005-2068
Security: FreeBSD-SA-05:15.tcp
Approved by: so (cperciva)
Revision Changes Path
1.342.2.24.2.12 +8 -0 src/UPDATING
1.1.1.2.12.1 +34 -9 src/contrib/bzip2/bzip2.c
1.1.1.2.12.1 +37 -14 src/contrib/bzip2/bzlib.c
1.1.1.2.12.1 +7 -5 src/contrib/bzip2/compress.c
1.1.1.2.12.1 +11 -5 src/contrib/bzip2/decompress.c
1.1.1.2.12.1 +18 -1 src/contrib/bzip2/huffman.c
1.62.2.18.2.8 +1 -1 src/sys/conf/newvers.sh
1.70.2.10.2.1 +20 -17 src/sys/netinet/ip_fw2.c
1.252.2.14.2.1 +24 -4 src/sys/netinet/tcp_input.c
1.22.2.1.2.1 +1 -0 src/sys/netinet/tcp_seq.h
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200506292141.j5TLf33C046669>