src-test2/crypto, branch stable/4 FreeBSD source tree https://cgit-dev.freebsd.org/src-test2/atom?h=stable%2F4 2006-09-30T19:57:15Z Correct multiple vulnerabilities in OpenSSH. 2006-09-30T19:57:15Z Simon L. B. Nielsen simon@FreeBSD.org 2006-09-30T19:57:15Z urn:sha1:c704d5aba47b66caf6eba806948c22a2d99fe1a4 Security: FreeBSD-SA-06:22.openssh Correct problem in the 2006-09-28 patch concerning the handling of 2006-09-29T13:46:23Z Colin Percival cperciva@FreeBSD.org 2006-09-29T13:46:23Z urn:sha1:0cf1d7c6b1ce6c5af5a164e19eba63f709caf801 excessively large DH moduli. Reported by: Steve Kiernan (Juniper SIRT) Security: FreeBSD-SA-06:23.openssl Correct multiple vulnerabilities in crypto(3). 2006-09-28T13:05:59Z Colin Percival cperciva@FreeBSD.org 2006-09-28T13:05:59Z urn:sha1:1a6bbf9e63ad364f85d279d30c4ddc31514f55be Limit the size of public keys used in order to protect applications from a denial of service via insane key sizes. Security: FreeBSD-SA-06:23.openssl Correct incorrect PKCS#1 v1.5 padding validation in crypto(3). 2006-09-06T21:24:04Z Simon L. B. Nielsen simon@FreeBSD.org 2006-09-06T21:24:04Z urn:sha1:bbc07a0c27c701483b34ba3f9284f6692aeecc53 Security: FreeBSD-SA-06:19.openssl Correct a man-in-the-middle SSL version rollback vulnerability. 2005-10-11T11:52:01Z Colin Percival cperciva@FreeBSD.org 2005-10-11T11:52:01Z urn:sha1:14b1ff25f5c11c21509defe702bb643f735df1d7 Security: FreeBSD-SA-05:21.openssl MFC v1.2, Add -D_FREEFALL_CONFIG to CFLAGS via Makefile so that just 2005-07-11T13:25:54Z Ken Smith kensmith@FreeBSD.org 2005-07-11T13:25:54Z urn:sha1:e5fd8baf137fc4eac2801862731bcbd7c551107c defining _FREEFALL_CONFIG in /etc/make.conf is all that is required for the clusterisms to take effect. Check in the freebsd.org cluster modifications to make k5su actually 2005-05-04T16:51:57Z Peter Wemm peter@FreeBSD.org 2005-05-04T16:51:57Z urn:sha1:2e43ef2e354d7567a282fca1afb0004665e34de2 usable. In particular: * disable unix password authentication (ie: do kerberos only) * install k5su setuid by default * allow instances for things like ksu to the www account instead of only doing this for root. This stuff is only enabled by make.conf switches. MFC src/contrib/telnet/telnet.c 1.16: Correct buffer overflows in 2005-03-28T15:46:58Z Jacques Vidrine nectar@FreeBSD.org 2005-03-28T15:46:58Z urn:sha1:ac70898decf68c4e693283abde921817947359bc telnet(1). Security: CAN-2005-0468, CAN-2005-0469 Correct a heap buffer overflow in k5admind(8) when built with Kerberos 2004-05-05T20:19:48Z Jacques Vidrine nectar@FreeBSD.org 2004-05-05T20:19:48Z urn:sha1:d31cd5a2c1b0324e790873139901e7e434466425 IV support. Obtained from: Heimdal CVS Correctly validate the transited field in Kerberos tickets. 2004-05-05T19:49:41Z Jacques Vidrine nectar@FreeBSD.org 2004-05-05T19:49:41Z urn:sha1:040f6a17aa8760154decab8868c3ee4e6150f14d http://vuxml.freebsd.org/bfb36941-84fa-11d8-a41f-0020ed76ef5a.html Obtained from: Heimdal 0.5.3