src/contrib, branch releng/7.0FreeBSD source treehttps://cgit-dev.freebsd.org/src/atom?h=releng%2F7.02009-02-16T21:56:17ZCorrectly scrub telnetd's environment.2009-02-16T21:56:17ZColin Percivalcperciva@FreeBSD.org2009-02-16T21:56:17Zurn:sha1:bb602bfc7c7d3bf85832427c2e5f1d836d318194
Approved by: so (cperciva)
Security: FreeBSD-SA-09:05.telnetd
Correct ntpd(8) cryptographic signature bypass [SA-09:04].2009-01-13T21:19:27ZSimon L. B. Nielsensimon@FreeBSD.org2009-01-13T21:19:27Zurn:sha1:a5718404886956d936e753a6a5a314eefbf064eb
Correct BIND DNSSEC incorrect checks for malformed signatures
[SA-09:04].
Security: FreeBSD-SA-09:03.ntpd
Security: FreeBSD-SA-09:04.bind
Obtained from: ISC [SA-09:04]
Approved by: so (simon)
Prevent cross-site forgery attacks on lukemftpd(8) due to splitting2009-01-07T20:17:55ZSimon L. B. Nielsensimon@FreeBSD.org2009-01-07T20:17:55Zurn:sha1:636b4dcc16aaafd36ca1dec5ff590cd41b16adcf
long commands into multiple requests. [09:01]
Fix incorrect OpenSSL checks for malformed signatures due to invalid
check of return value from EVP_VerifyFinal(), DSA_verify, and
DSA_do_verify. [09:02]
Security: FreeBSD-SA-09:01.lukemftpd
Security: FreeBSD-SA-09:02.openssl
Obtained from: NetBSD [SA-09:01]
Obtained from: OpenSSL Project [SA-09:02]
Approved by: so (simon)
Improve randomization in BIND to prevent response spoofing.2008-07-13T18:42:38ZColin Percivalcperciva@FreeBSD.org2008-07-13T18:42:38Zurn:sha1:b1f3875d97266ccf14704af848bf9baa09c499b9
Security: FreeBSD-SA-08:06.bind
Approved by: so (cperciva)
Thanks to: remko, csjp
No thanks to: bronchitis
MFC: file version 4.23.2008-02-06T18:26:38ZDavid E. O'Brienobrien@FreeBSD.org2008-02-06T18:26:38Zurn:sha1:9fb0721520fc288908e64046ee5e09e591ee3b3c
Approved by: re(kensmith)
MFC: rev. 1.1.1.7 (Check for a failure return from cplus_demangle_type)2008-01-29T18:13:53ZDavid E. O'Brienobrien@FreeBSD.org2008-01-29T18:13:53Zurn:sha1:9386f49e3e1c2cb50d54acd627e783e5a39c0308
Approved by: re(kensmith)
This commit was manufactured by cvs2svn to create branch 'RELENG_7_0'.2008-01-18T05:06:00Zcvs2svncvs2svn@FreeBSD.org2008-01-18T05:06:00Zurn:sha1:f86934faa805728b12f7d0523f611dc038719c49MFC: rev 1.4: forward compatability with cvs-1.12 repository2008-01-07T09:08:53ZPeter Wemmpeter@FreeBSD.org2008-01-07T09:08:53Zurn:sha1:06fd214a87343e43930615cd7981e7170b97a5ef
Approved by: re (kensmith)
Merge from RELENG_7: 1.1.1.8.2.12008-01-05T23:04:59ZMarius Stroblmarius@FreeBSD.org2008-01-05T23:04:59Zurn:sha1:d8ff91e4d0cc4f55926565f5a559d095713680cb
On FreeBSD GCC 4.2.x checks for the existence of pthread_cancel() in
order to determine whether a program is running with multithreading
support. This check causes __gthread_active_p() to always return 1
however, regardless of whether the program was actually compiled with
-pthread or not, due to the fact that the FreeBSD libc contains a
pthread_cancel() stub. Fix this by using the __gthread_active_p()
version that GCC uses for Solaris and which actively checks for a
working POSIX threads implementation (if such functions exist) instead
of checking for the mere existence of corresponding functions.
On platforms without TLS support, i.e. on arm and sparc64 due to the
lack of GNU TLS support for these archs in binutils 2.15., the false
positives returned by __gthread_active_p() for non-threaded programs
cause the exception handling implementation GCC uses in this case to
crash. This is because GCC assumes that the POSIX threading functions
actually work when __gthread_active_p() returns 1 while in fact the
corresponding stubs in libc just immediately return.
Given that __gthread_active_p() is also used in a couple of other
places besides exception handling, this bug has great potential to
also cause problems in other areas and on all archs.
Approved by: re (kensmith)
This commit was manufactured by cvs2svn to create branch 'RELENG_7_0'.2007-12-22T06:32:46Zcvs2svncvs2svn@FreeBSD.org2007-12-22T06:32:46Zurn:sha1:ca0202a548c669f45a9e0a63fce138303da6fc65