cvs commit: src UPDATING src/crypto/openssl/crypto/asn1 tasn_dec.c src/crypto/openssl/crypto/dh dh.h dh_err.c dh_key.c src/crypto/openssl/crypto/dsa dsa.h dsa_err.c dsa_ossl.c src/crypto/openssl/crypto/rsa rsa.h rsa_eay.c rsa_err.c ...

Colin Percival cperciva at FreeBSD.org
Thu Sep 28 06:06:27 PDT 2006


cperciva    2006-09-28 13:06:23 UTC

  FreeBSD src repository

  Modified files:        (Branch: RELENG_4_11)
    .                    UPDATING 
    crypto/openssl/crypto/asn1 tasn_dec.c 
    crypto/openssl/crypto/dh dh.h dh_err.c dh_key.c 
    crypto/openssl/crypto/dsa dsa.h dsa_err.c dsa_ossl.c 
    crypto/openssl/crypto/rsa rsa.h rsa_eay.c rsa_err.c 
    crypto/openssl/ssl   s2_clnt.c s3_srvr.c ssl_lib.c 
    sys/conf             newvers.sh 
  Log:
  Correct multiple vulnerabilities in crypto(3).
  Limit the size of public keys used in order to protect applications
  from a denial of service via insane key sizes.
  
  Security:       FreeBSD-SA-06:23.openssl
  Approved by:    so (cperciva)
  
  Revision         Changes    Path
  1.73.2.91.2.24   +5 -0      src/UPDATING
  1.1.1.1.2.2.6.1  +3 -0      src/crypto/openssl/crypto/asn1/tasn_dec.c
  1.1.1.1.2.4.8.1  +5 -0      src/crypto/openssl/crypto/dh/dh.h
  1.1.1.1.2.3.8.1  +1 -0      src/crypto/openssl/crypto/dh/dh_err.c
  1.1.1.1.2.7.6.1  +6 -0      src/crypto/openssl/crypto/dh/dh_key.c
  1.1.1.1.2.4.8.1  +6 -0      src/crypto/openssl/crypto/dsa/dsa.h
  1.1.1.1.2.3.8.1  +2 -0      src/crypto/openssl/crypto/dsa/dsa_err.c
  1.1.1.1.2.7.6.1  +12 -0     src/crypto/openssl/crypto/dsa/dsa_ossl.c
  1.2.2.8.4.1      +13 -1     src/crypto/openssl/crypto/rsa/rsa.h
  1.2.4.8.4.1      +45 -1     src/crypto/openssl/crypto/rsa/rsa_eay.c
  1.1.1.1.2.3.8.1  +1 -0      src/crypto/openssl/crypto/rsa/rsa_err.c
  1.2.2.8.4.1      +2 -1      src/crypto/openssl/ssl/s2_clnt.c
  1.1.1.1.2.9.4.1  +1 -1      src/crypto/openssl/ssl/s3_srvr.c
  1.1.1.1.2.8.4.1  +1 -1      src/crypto/openssl/ssl/ssl_lib.c
  1.44.2.39.2.27   +1 -1      src/sys/conf/newvers.sh


More information about the cvs-all mailing list