src/CHANGES-1.5.4 - diff

Return to CHANGES-1.5.4 CVS log

Up to [cvs.NetBSD.org] / src

Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.

Diff for /src/Attic/CHANGES-1.5.4 between version 1.1.2.116 and 1.1.2.117

-version 1.1.2.116, 2003/10/06 09:26:50
+version 1.1.2.117, 2003/11/06 08:26:19
 Line 2265  sys/dev/ic/wdc.c   1.132
 Line 2265  sys/dev/ic/wdc.c   1.132
 Line 2265  sys/dev/ic/wdc.c   1.132
          Fix a typo that prevented pre-ata drives from working since 1999.
          [bouyer, ticket #85]
+ sys/kern/kern_sysctl.c                  1.147 (via patch)
+         make debug_sysctl() sysctl MIB check more strict. from smak.
+         attack similar to NetBSD-SA2003-014 can be mounted due to this flaw.
+         [itojun, ticket #88]
+ crypto/dist/openssl/ssl/ssl_ciph.c      1.6 (via patch)
+         Correct some off-by-ones.  They currently don't matter, but this
+         is for future safety and consistency.
+         [itojun, ticket #90]
+ crypto/dist/openssl/ssl/s3_clnt.c       1.5
+ crypto/dist/openssl/ssl/s3_srvr.c       1.6
+         more fixes from 0.9.7c, from openbsd
+         [itojun, ticket #90]
+ crypto/dist/openssl/crypto/asn1/asn1_lib.c      1.7 (via patch)
+ crypto/dist/openssl/crypto/x509/x509_vfy.c      1.2 (via patch)
+         Fix various bugs revealed by running the NISCC test suite:
+         Stop out of bounds reads in the ASN1 code when presented with
+         invalid tags (CAN-2003-0543 and CAN-2003-0544).
+         If verify callback ignores invalid public key errors don't try to check
+         certificate signature with the NULL public key.
+         [itojun, ticket #95]
+ crypto/dist/openssl/crypto/asn1/a_bytes.c       patch
+ crypto/dist/openssl/ssl/ssl_ciph.c              patch
+         Changes between 0.9.6k and 0.9.6l  [04 Nov 2003]
+           *) Fix additional bug revealed by the NISCC test suite:
+                 Stop bug triggering large recursion when presented with
+                 certain ASN.1 tags (CAN-2003-0851). From Steve Henson.
+         [itojun, ticket#107]

CVSweb <webmaster@jp.NetBSD.org>