src/sys, branch releng/6.4 FreeBSD source tree https://cgit-dev.freebsd.org/src/atom?h=releng%2F6.4 2010-09-20T14:58:08Z Fix an integer overflow in RLE length parsing when decompressing 2010-09-20T14:58:08Z Colin Percival cperciva@FreeBSD.org 2010-09-20T14:58:08Z urn:sha1:0df48150179039ce25e09b48c85aa39bffdbb4c4 corrupt bzip2 data. Approved by: so (cperciva) Security: FreeBSD-SA-10:08.bzip2 Change the current working directory to be inside the jail created by 2010-05-27T03:15:04Z Colin Percival cperciva@FreeBSD.org 2010-05-27T03:15:04Z urn:sha1:0f14c153efe45f7c6dd98f0324f0e6882817c815 the jail(8) command. [10:04] Fix a one-NUL-byte buffer overflow in libopie. [10:05] Correctly sanity-check a buffer length in nfs mount. [10:06] Approved by: so (cperciva) Approved by: re (kensmith) Security: FreeBSD-SA-10:04.jail Security: FreeBSD-SA-10:05.opie Security: FreeBSD-SA-10:06.nfsclient Fix BIND named(8) cache poisoning with DNSSEC validation. 2010-01-06T21:45:30Z Simon L. B. Nielsen simon@FreeBSD.org 2010-01-06T21:45:30Z urn:sha1:81f600082d4d0876877ba472d1ba69ddfa7f55aa [SA-10:01] Fix ntpd mode 7 denial of service. [SA-10:02] Fix ZFS ZIL playback with insecure permissions. [SA-10:03] Various FreeBSD 8.0-RELEASE improvements. [EN-10:01] Security: FreeBSD-SA-10:01.bind Security: FreeBSD-SA-10:02.ntpd Security: FreeBSD-SA-10:03.zfs Errata: FreeBSD-EN-10:01.freebsd Approved by: so (simon) Bump the patch level in the kernel version number, which was 2009-12-03T12:59:39Z Simon L. B. Nielsen simon@FreeBSD.org 2009-12-03T12:59:39Z urn:sha1:b306e646a2cd731cbd1693de169f7fd33aaf4e36 accidentally left out of main commit for SA-09:15, SA-09:15, and SA-09:17 in r200054. Approved by: so (simon) MFC r197711 (partial) to 6.x and 7.x: 2009-10-02T18:09:56Z Simon L. B. Nielsen simon@FreeBSD.org 2009-10-02T18:09:56Z urn:sha1:5cc2fb2ccd20458faa67041136476adcdb433423 - Add no zero mapping feature, disabled by default. [EN-09:05] MFC 178913,178914,179242,179243,180336,180340 to 6.x: - Fix kqueue pipe race conditions. [SA-09:13] MFC r192301 to 7.x; 6.x has slightly different fix: - Fix devfs / VFS NULL pointer race condition. [SA-09:14] Security: FreeBSD-SA-09:13.pipe Security: FreeBSD-SA-09:14.devfs Errata: FreeBSD-EN-09:05.null Submitted by: kib [SA-09:13] [SA-09:14] Submitted by: bz [EN-09:05] In collaboration with: jhb, kib, alc [EN-09:05] Approved by: so (simon) Fix BIND named(8) dynamic update message remote DoS. 2009-07-29T00:14:14Z Simon L. B. Nielsen simon@FreeBSD.org 2009-07-29T00:14:14Z urn:sha1:b00ac27ba5bfab50fde32290c7c2f29dd64f09f0 Obtained from: ISC Security: FreeBSD-SA-09:12.bind Security: CVE-2009-0696 Approved by: so (simon) Prevent integer overflow in direct pipe write code from circumventing 2009-06-10T10:31:11Z Colin Percival cperciva@FreeBSD.org 2009-06-10T10:31:11Z urn:sha1:7649a2ac49b94b4c9a8bb70eb127bec1e9b471dc virtual-to-physical page lookups. [09:09] Add missing permissions check for SIOCSIFINFO_IN6 ioctl. [09:10] Fix buffer overflow in "autokey" negotiation in ntpd(8). [09:11] Approved by: so (cperciva) Approved by: re (not really, but SVN wants this...) Security: FreeBSD-SA-09:09.pipe Security: FreeBSD-SA-09:10.ipv6 Security: FreeBSD-SA-09:11.ntpd Don't leak information via uninitialized space in db(3) records. [09:07] 2009-04-22T14:07:14Z Colin Percival cperciva@FreeBSD.org 2009-04-22T14:07:14Z urn:sha1:3d389dec20be1a2d8523e288debae0cee93201a2 Sanity-check string lengths in order to stop OpenSSL crashing when printing corrupt BMPString or UniversalString objects. [09:08] Security: FreeBSD-SA-09:07.libc Security: FreeBSD-SA-09:08.openssl Security: CVE-2009-0590 Approved by: re (kensmith) Approved by: so (cperciva) Correct ntpd(8) cryptographic signature bypass [SA-09:04]. 2009-01-13T21:19:27Z Simon L. B. Nielsen simon@FreeBSD.org 2009-01-13T21:19:27Z urn:sha1:8dab95485b6418eab464682d6ee0b91d2b3f11a3 Correct BIND DNSSEC incorrect checks for malformed signatures [SA-09:04]. Security: FreeBSD-SA-09:03.ntpd Security: FreeBSD-SA-09:04.bind Obtained from: ISC [SA-09:04] Approved by: so (simon) Prevent cross-site forgery attacks on lukemftpd(8) due to splitting 2009-01-07T20:17:55Z Simon L. B. Nielsen simon@FreeBSD.org 2009-01-07T20:17:55Z urn:sha1:c1371bc72e952b0e094cd5dd0dae7ff069f73b07 long commands into multiple requests. [09:01] Fix incorrect OpenSSL checks for malformed signatures due to invalid check of return value from EVP_VerifyFinal(), DSA_verify, and DSA_do_verify. [09:02] Security: FreeBSD-SA-09:01.lukemftpd Security: FreeBSD-SA-09:02.openssl Obtained from: NetBSD [SA-09:01] Obtained from: OpenSSL Project [SA-09:02] Approved by: so (simon)