src-test2/contrib, branch stable/5

MFC r200392:

2009-12-14T01:06:55Z

Apply two vendor fixes for CVE-2009-3720. Security: CVE-2009-3720

MFC: bzip2 1.0.5

2008-04-17T00:53:13Z

MFC: rev 1.4: forward compatability with cvs-1.12 repository

2008-01-07T09:11:23Z

Correct a random value disclosure in random(4). [07:09]

2007-11-29T16:08:54Z

Correct a gtar directory traversal vulnerability. [07:10] Security: FreeBSD-SA-07:09.random Security: FreeBSD-SA-07:10.gtar

MFC:

2007-11-24T06:53:09Z

Import two binutils header files from FSF 2.15 branch. These fix binutils compilation on i386/amd64 with GCC 4.1 and have no other effect. This fixes RELENG_5 build on RELENG_7/HEAD.

MFC: sendmail 8.14.2

2007-11-11T17:09:13Z

Only write the PID file out when becoming a daemon.

2007-10-27T16:41:12Z

PR: bin/87891

Correct a bug in the patch for FreeBSD-SA-07:01.jail which prevented

2007-08-01T20:47:12Z

jails with custom fstab's from starting due to use of incorrect variable. [1] Correct buffer overflow in tcpdump(1). [SA-07:06] Reported by: Joel Hatton [1] Security: FreeBSD-SA-07:06.tcpdump

Update to 9.3.4-P1, which fixes the following:

2007-07-25T08:24:40Z

The DNS query id generation is vulnerable to cryptographic analysis which provides a 1 in 8 chance of guessing the next query id for 50% of the query ids. This can be used to perform cache poisoning by an attacker. This bug only affects outgoing queries, generated by BIND 9 to answer questions as a resolver, or when it is looking up data for internal uses, such as when sending NOTIFYs to slave name servers. All users are encouraged to upgrade. See also: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2926

Fix buffer overflow in libmagic(3).

2007-05-23T16:13:20Z

Security: FreeBSD-SA-07:04.file Approved by: so (cperciva)