swh:1:snp:2ca5d6eff8f04a671c0d5b13646cede522c64b7d

sort by:
Revision Author Date Message Commit Date
32eea13 Correct multiple vulnerabilities in OpenSSH. Security: FreeBSD-SA-06:22.openssh Approved by: so (simon) 30 September 2006, 19:58:07 UTC
e1415c3 Correct problem in the 2006-09-28 patch concerning the handling of excessively large DH moduli. Reported by: Steve Kiernan (Juniper SIRT) Security: FreeBSD-SA-06:23.openssl Approved by: so (cperciva) 29 September 2006, 13:46:41 UTC
4ee6cd2 Correct multiple vulnerabilities in crypto(3). Limit the size of public keys used in order to protect applications from a denial of service via insane key sizes. Security: FreeBSD-SA-06:23.openssl Approved by: so (cperciva) 28 September 2006, 13:06:23 UTC
a97ffec Correct multiple vulnerabilities in gzip(1). Security: FreeBSD-SA-06:21.gzip Approved by: so (simon) 19 September 2006, 14:13:53 UTC
89e9164 Correct incorrect PKCS#1 v1.5 padding validation in crypto(3). [1] Correct multiple denial-of-service vulnerabilities in BIND related to SIG Query Processing and Excessive Recursive Queries. [2] Security: FreeBSD-SA-06:19.openssl [1] Security: FreeBSD-SA-06:20.bind [2] Approved by: so (simon) 06 September 2006, 21:23:16 UTC
492727d Correct buffer overflow in the handling of LCP options in ppp(4) Security: FreeBSD-SA-06:18.ppp Approved by: so (cperciva) 23 August 2006, 22:06:40 UTC
bd24414 Correct a bug in the handling of multipart messages by sendmail(8) which can allow a malformed message to crash a sendmail queue processing process. Security: FreeBSD-SA-06:17.sendmail Approved by: so (cperciva) 14 June 2006, 16:01:20 UTC
731c09f Enable inadvertantly disabled "securenet" access controls in ypserv. [1] Correct a bug in the handling of backslash characters in smbfs which can allow an attacker to escape from a chroot(2). [2] Approved by: so (cperciva) Security: FreeBSD-SA-06:15.ypserv [1] Security: FreeBSD-SA-06:16.smbfs [2] 31 May 2006, 22:33:41 UTC
e789573 MFC: Correct a local information leakage bug affecting AMD FPUs. Security: FreeBSD-SA-06:14.fpu Approved by: so (cperciva) 19 April 2006, 07:03:14 UTC
b599634 Add missing code needed for the detection of IPSec packet replays. [1] Correctly identify the user running opiepasswd(1) when the login name differs from the account name. [2] Modify timeout handling logic in sendmail(8) to correct a reported signal handling race condition. [3] Approved by: so (cperciva) Security: FreeBSD-SA-06:11.ipsec [1] Security: FreeBSD-SA-06:12.opie [2] Security: FreeBSD-SA-06:13.sendmail [3] 22 March 2006, 16:03:25 UTC
e34df57 Correct a remote DoS in OpenSSH when using PAM and privilege separation. [06:09] Submitted by: des Correct a remote kernel panic when processing zero-length RPC records via TCP. [06:10] Security: FreeBSD-SA-06:09.openssh Security: FreeBSD-SA-06:10.nfs Approved by: so (cperciva) 01 March 2006, 14:24:52 UTC
18daa34 MFRELENG_5 sys/netinet/tcp_sack.c rev. 1.3.2.10: Avoid an infinite loop in sack scoreboard processing when the per-hole limits or global scoreboard limits are reached, or when memory exhaustion occurs. This can occur when an existing hole fails to be split due to limits or memory exhaustion. Security: FreeBSD-SA-06:08.sack Approved by: so (cperciva) 01 February 2006, 19:43:36 UTC
dcc499a MFC rev. 1.16 of sys/contrib/pf/net/pf_norm.c: Correct an error in pf handling of IP packet fragments which could result in a kernel panic. Security: FreeBSD-SA-06:07.pf Approved by: so (cperciva) 25 January 2006, 10:02:27 UTC
deb3171 Correct insecure temporary file usage in texindex. [06:01] Correct insecure temporary file usage in ee. [06:02] Correct a race condition when setting file permissions, sanitize file names by default, and fix a buffer overflow when handling files larger than 4GB in cpio. [06:03] Security: FreeBSD-SA-06:01.texindex Security: FreeBSD-SA-06:02.ee Security: FreeBSD-SA-06:03.cpio Approved by: so (cperciva) 11 January 2006, 08:08:08 UTC
7a34911 Correct a man-in-the-middle SSL version rollback vulnerability. Security: FreeBSD-SA-05:21.openssl Approved by: so@ (cperciva) 11 October 2005, 11:52:28 UTC
c9072ad MFC: Correct insecure temporary file usage. Security: FreeBSD-SA-05:20.cvsbug Approved by: so (cperciva) 07 September 2005, 13:44:36 UTC
8dae6eb Correct a buffer overflow which can occur when decompressing a carefully crafted deflated data stream. [1] Correct problems in the AES-XCBC-MAC IPsec authentication algorithm. [2] Submitted by: suz [2] Security: FreeBSD-SA-05:18.zlib [1], FreeBSD-SA-05:19.ipsec [2] Approved by: so (cperciva) 27 July 2005, 08:42:37 UTC
c87a9c0 MFC rev 1.116 of src/sys/fs/devfs/devfs_vnops.c: Correct devfs ruleset bypass. Submitted by: csjp Reviewed by: phk Security: FreeBSD-SA-05:17.devfs Approved by: so (cperciva) 20 July 2005, 13:36:32 UTC
3eb57b8 MFC rev. 1.6 of src/lib/libz/inftrees.c: Correct a buffer overflow which occurred in the handling of some particularly corrupt deflated data streams. Security: FreeBSD-SA-05:16.zlib Approved by: so (cperciva) 06 July 2005, 14:01:52 UTC
19a3e9d Correct ipfw packet matching errors with address tables. Security: CAN-2005-2019 Security: FreeBSD-SA-05:13.ipfw Correct bzip2 denial of service and permission race vulnerabilities. Obtained from: Redhat, Steve Grubb via RedHat Security: CAN-2005-0953, CAN-2005-1260 Security: FreeBSD-SA-05:14.bzip2 Approved by: obrien Correct TCP connection stall denial-of-service vulnerabilities. MFC: rev 1.270 of tcp_input.c, rev 1.25 of tcp_seq.h by ps: When a TCP packets containing a timestamp is received, inadequate checking of sequence numbers is performed, allowing an attacker to artificially increase the internal "recent" timestamp for a connection. A TCP packets with the SYN flag set is accepted for established connections, allowing an attacker to overwrite certain TCP options. Security: CAN-2005-0356, CAN-2005-2068 Security: FreeBSD-SA-05:15.tcp Approved by: so (cperciva) 29 June 2005, 21:41:03 UTC
6763884 Correct several denial-of-service vulnerabilities in tcpdump. Security: FreeBSD-SA-05:10.tcpdump Security: CAN-2005-1267, CAN-2005-1278, CAN-2005-1279, CAN-2005-1280 Obtained from: tcpdump.org Correct directory traversal and race condition vulnerabilities in gzip. Security: FreeBSD-SA-05:11.gzip Security: CAN-2005-0988, CAN-2005-1228 Obtained from: Steve Grubb via RedHat, Debian Approved by: so (nectar) 08 June 2005, 21:27:44 UTC
e8c5f9c Add a knob for disabling/enabling HTT, "machdep.hyperthreading_allowed". Default off due to information disclosure on multi-user systems. Submitted by: cperciva Reviewed by: jhb Approved by: re 13 May 2005, 00:12:57 UTC
f46198e Add a knob for disabling/enabling HTT, "machdep.hyperthreading_allowed". Default off due to information disclosure on multi-user systems. Submitted by: cperciva Reviewed by: jhb Approved by: re 13 May 2005, 00:03:01 UTC
90487ac Revert 1.228.2.2.2.1, it causes more problems than it fixes. Approved by: re 07 May 2005, 17:51:09 UTC
e8590b0 MFC: Fix two issues which were missed in FreeBSD-SA-05:08.kmem. Reported by: Uwe Doering Approved by: re (kensmith) 07 May 2005, 03:58:25 UTC
40945e9 Merge from the English version: relnotes/common/new.sgml 1.761.2.41.2.8 -> 1.761.2.41.2.9 Submitted by: den Approved by: re (implicitly) 06 May 2005, 18:57:44 UTC
852261e I think that's a wrap for 5.4... Approved by: re (implicit) 06 May 2005, 04:12:22 UTC
9aba098 MFC v1.14.6.1 and v1.14.6.2: > Log: > enclose getservbyport(3) call with mutex lock. > since our getservbyport(3) is thread-safe on CURRENT, we don't need > this workaround on CURRENT. however, it is not MFC'ed to RELENG_5, > yet. so, we need this for RELENG_5. > this fix is candidate for MFS to be in time for 5.4-RELEASE. > > Found by: tools/regression/lib/libc/resolv/resolv -r > Reviewed by: hrs > Tested by: hrs Work done by: ume (he requested merge but I approved it too late) Approved by: re (scottl approved me doing merge so tagging can be done) 06 May 2005, 04:10:44 UTC
d2c76a3 Prep for 5.4-RELEASE tagging. Approved by: re (implicit) 06 May 2005, 03:43:10 UTC
10f891d If we are going to 1. Copy a NULL-terminated string into a fixed-length buffer, and 2. copyout that buffer to userland, we really ought to 0. Zero the entire buffer first. Security: FreeBSD-SA-05:08.kmem Approved by: re (kensmith) 06 May 2005, 02:51:10 UTC
168bb39 Correctly validate inputs to the i386_get_ldt syscall. Security: FreeBSD-SA-05:07.ldt Approved by: re (kensmith) 06 May 2005, 02:40:49 UTC
e4ce17a Correct improper permissions on /dev/iir. The earlier permissions of 0644 allowed for people to do Evil Things via ioctl(2). Security: FreeBSD-SA-05:06.iir Approved by: re (kensmith) 06 May 2005, 02:34:18 UTC
0a96ce9 MFC: Properly lock calls to xpt_done() Approved by: re 06 May 2005, 00:54:02 UTC
7aec5d8 MFC: Don't forget a comma. Approved by: re 06 May 2005, 00:52:59 UTC
7dafae7 MFC: Remove an extra mutex unlock. Approved by: re 06 May 2005, 00:52:14 UTC
da8fc0f MFC: Don't ask busdma for an alignment for buffers. Approved by: re 06 May 2005, 00:51:29 UTC
a4068aa Insta-MFC 1.86: Fix link on IBM/Intel blade servers Approved by: re 06 May 2005, 00:38:51 UTC
d0bad5f MFC rev 1.228.2.4: Workaround for ttwwakeup() panic. Approved by: re 06 May 2005, 00:34:42 UTC
dc26535 MFC rev 1.6: Put gnome-lite and kde-lite on disc2 for ia64. Approved by: re (kensmith) 05 May 2005, 22:18:36 UTC
267f039 MFen 1.761.2.41.2.8-9 Obtained from: The FreeBSD Simplified Chinese Project CVS Approved by: re (hrs) 05 May 2005, 18:33:08 UTC
97cb591 Bump the following version numbers: release.current -> 5.4-RELEASE release.manpath.xorg -> 6.8.2 release.manpath.netbsd -> 2.0.2 release.manpath.freebsd -> 5.4-RELEASE Approved by: re (implicitly) 05 May 2005, 17:53:27 UTC
a0a3287 New release notes (MFS): syslogd(8) -S option. Approved by: re (implicitly) 05 May 2005, 17:49:08 UTC
9102275 Add -S option which allows to change the pathname of the privileged socket /var/run/logpriv. MFS from: src/usr.sbin/syslogd/syslogd.8 1.52.2.5 src/usr.sbin/syslogd/syslogd.c 1.131.2.3 Approved by: re (kensmith) 05 May 2005, 17:46:04 UTC
076d4e3 Merge the following from the English version: 1.761.2.41.2.7 -> 1.761.2.41.2.8 new.sgml Approved by: re (murray) 05 May 2005, 13:21:56 UTC
b6bc43a Typo fixes. Approved by: re@ (hrs) 05 May 2005, 12:42:22 UTC
6d177e6 Merge the following from the English version: 1.761.2.41.2.5 -> 1.761.2.41.2.7 new.sgml Approved by: re (hrs) 04 May 2005, 16:23:58 UTC
9ef834c MFC rev. 1.86: fix a typo. Approved by: re (kensmith) 03 May 2005, 12:49:12 UTC
f2daefe MFen 1.761.2.41.2.5 -> 1.761.2.41.2.7 Obtained from: The FreeBSD Simplified Chinese Project CVS Approved by: re (hrs) 02 May 2005, 14:21:37 UTC
774e3e2 Merge rev 1.57: Fix speaker output for the AD1888 codec. Approved by: re 01 May 2005, 14:32:06 UTC
861f84c Prep for the RC4 builds. Approved by: re (implicit) 01 May 2005, 14:26:31 UTC
81ad4e5 MFC/R5: Open slices in R/W so we can modify. Approved by: re 01 May 2005, 09:50:52 UTC
be0c1fd MFC/R5: Add new solaris slice type Don't prefix /dev if it is already an absolute path. Use correct open mode (possibly r/w) if we resort to opening a slice. Approved by: re 01 May 2005, 08:41:35 UTC
b5d87c8 MFC rev. 1.29.2.1: correctly handle inputs with missing newline at EOF in -f mode. Approved by: re 01 May 2005, 06:55:21 UTC
8a14d04 MFC: Fix the apm module on pc98. Approved by: re (scottl) 01 May 2005, 06:13:31 UTC
0ff82ff MFC: Add KDB_STOP_NMI option. Approved by: re (scottl) 01 May 2005, 06:11:35 UTC
43e27d1 MFC: KDB_STOP_NMI functionality. Insta-MFC cleared by RE to facilitate 5.4-RC4. Approved by: re 01 May 2005, 05:38:14 UTC
67dd6d0 MFC revision 1.26: Add PROC_UNLOCK(p) to PTRACESTOP_SC(p, td, flag), in order to catch up to changes in the behaviour of ptracestop(). Approved by: re (kensmith) 01 May 2005, 04:03:06 UTC
5582cf8 MFC of revision 1.5 : > date: 2005/04/17 23:30:20; author: kensmith; state: Exp; lines: +0 -3 > Needed to drop "lang/gnat", "print/teTeX", and "textproc/docproj-jadetex" > to make the packages fit on the CDs... Approved by: re (scottl) 01 May 2005, 03:52:37 UTC
973d199 MFC 1.17 - 1.21 1. Make sure that the /etc/namedb symlink is pointing to the right place. 2. Unmount the devfs when stop'ing (including on shutdown). 3. Require cleanvar. Approved by: re (kensmith) 01 May 2005, 01:29:12 UTC
4b1b5ed MFC 1.12: Make the Z8530 more reliable as low-level console. Approved by: re (kensmith) 01 May 2005, 01:06:40 UTC
649de3c Merge from RELENG_5: src/sys/amd64/amd64/mp_machdep.c 1.242.2.9 src/sys/i386/i386/mp_machdep.c 1.235.2.8 Workaround Opteron Errata 106 by enabling interrupts in SMP TLB shootdowns. Approved by: re 30 April 2005, 19:42:56 UTC
7b9346f Merge from RELENG_5: 1.19.2.2 Some changes to intr_execute_handlers(): - Fix NULL pointer dereferences caused when an ithread or a handler is NULL which happens when a stray interrupt triggers after the respective device interrupt was torn down. - Remove the critical section around INTR_FAST handlers which actually was a nested critical section. Both tl0_intr() and tl1_intr() already enter a critical section for calling intr_execute_handlers(). Approved by: re (kensmith) 30 April 2005, 16:19:04 UTC
dfe15ed Merge from RELENG_5: cpufunc.h 1.18.2.1; tick.c 1.14.4.2 - Add a workaround for a bug in BlackBird CPUs (said to be part of the SpitFire erratum #54) which can cause writes to the TICK_CMPR register to fail. This seems to fix the dying clocks problem reported by jhb@ and kris@. - In tick_init() just use tick_stop() for stopping the tick interrupts until a proper handler is set up later. This also stops the system tick interrupt on USIII systems earlier. - Some minor changes, e.g. use FBSDID, remove unused headers, etc. Requested by: kris Approved by: re (kensmith) 30 April 2005, 16:17:23 UTC
6066a59 Merge rev 1.2.2.2: Don't pretend to support CAM_DATA_PHYS. Approved by: re 30 April 2005, 15:58:47 UTC
344eb7e MFC rev 1.9.2.5: Don't include the EHCI driver in the PAE kernel. Approved by: re 30 April 2005, 15:55:39 UTC
c8fe2b4 MFC Rev 1.64.2.2: Create the alias rdpt device. Approved by: re 30 April 2005, 15:53:24 UTC
a224ba4 Revert part of rev 1.221.2.7 which MFCed documentation for a feature which does not yet exist in RELENG_5. Approved by: re (scottl) 30 April 2005, 15:45:07 UTC
99a8d36 MFC Revision 1.261: Wake up swapper process. Approved by: re (kersmith) 28 April 2005, 23:45:03 UTC
7ef24c8 MFC: Fix race between thread_stopped and kern_wait. Approved by: re (kensmith) 28 April 2005, 23:42:10 UTC
270d758 MFC: Add the vm.exec_map_entries tunable and read-only sysctl, which controls the number of entries in exec_map (maximum number of simultaneous execs that can be handled by the kernel). The default value of 16 is insufficient on heavily loaded machines (particularly SMP machines), and if it is exceeded then executing further processes will generate a SIGABRT. This is a workaround until a better solution can be implemented. Approved by: re (kensmith) 28 April 2005, 23:41:38 UTC
4f506b9 MFC Revision 1.251: Inherit signal mask from parent process. Approved by: re (kensmith) 28 April 2005, 23:37:19 UTC
e265808 MFC: Add support for the P600 and name the E400 Approved by: re 28 April 2005, 20:45:58 UTC
d9726ad MFC: Provide a way to soft reset a proxy controller such as an MSA20 or MSA500. Approved by: re 28 April 2005, 20:43:28 UTC
f65d3ab MF5: add i386_[gs]et_[fg]sbase(2) stubs to make a usable libc.so.5 for 6.x's compat5x packages when paired with 6.x's libpthread.so.0. Approved by: re (kensmith) 27 April 2005, 17:53:47 UTC
e06465b MF5: Close a race between sleepq_broadcast() and sleepq_catch_signals() by merging sleepq_resume_thread() and sleepq_remove_thread(). This also reduces the overall number of lock operations for sleep queue operations. Approved by: re (kensmith) 27 April 2005, 17:39:30 UTC
cfdf1e7 MFC: SA-05:05.cvs, restore(8) reads FreeBSD 1 dumps, syslogd(8) supports more characters in hostname specifications. Approved by: re (hrs) 26 April 2005, 14:45:56 UTC
0c7f116 Merge the following from the English version: 1.227.2.25 -> 1.227.2.26.2.2 hardware/common/dev.sgml Update also Russian override of dev-auto.sgml Approved by: re (hrs) 26 April 2005, 06:38:34 UTC
32615ed Remove the ACPI_MAX_THREADS option. Approved by: re 25 April 2005, 20:15:49 UTC
37e78f4 MFC r1.14: Do not try to store 64 bits into 32 bit errno variable. Approved by: re (kensmith) 25 April 2005, 20:04:53 UTC
12edfb2 MFC 1.53: Fix panics with misconfigured routing: - Backout previous revision, the check is useless. - Turn node to queue mode, since it is edge node. Approved by: re (kensmith) 25 April 2005, 17:24:36 UTC
486aba9 MFC 1.28: Fix error in synproxy connection completion. Source and destination windows were confused, one instead of other. Approved by: re (kensmith) 25 April 2005, 15:24:30 UTC
0201cfb MFC: Add and document the debug.acpi.max_threads tunable and return the default number of task threads to start to 3. Approved by: re (kensmith but earlier version) 22 April 2005, 23:31:31 UTC
f7d200b MFC revision 1.31: Use bsdtar instead of GNU tar Approved by: re (kensmith) 22 April 2005, 20:31:22 UTC
6d5074c MFC: Correct multiple security related errors: a buffer overflow, NULL pointer dereferences, possible use of uninitialized variables, and memory leaks. Security: CAN-2005-0753 Security: FreeBSD-SA-05:05.cvs Approved by: re (kensmith) 22 April 2005, 18:03:18 UTC
a9c50ec MFC: sync usage and fix nomatch parsing. Approved by: re@ (kensmith) 22 April 2005, 03:44:07 UTC
53ab8b9 MFC: 1.158 Initialize mii/phy before probing same. Approved by: re@ (kensmith) 22 April 2005, 03:41:09 UTC
e48e650 This commit was manufactured by cvs2svn to create branch 'RELENG_5_4'. 20 April 2005, 19:11:07 UTC
754fe4a Fix two typos. Approved by: re (hrs@) 20 April 2005, 00:51:39 UTC
f0e5a8f Merge the following from the English version: 1.761.2.41.2.3 -> 1.761.2.41.2.5 new.sgml Approved by: re (hrs) 19 April 2005, 14:55:53 UTC
63cab55 MFen 1.761.2.41.2.3 -> 1.761.2.41.2.5 Approved by: re (hrs) 19 April 2005, 09:37:18 UTC
15059a8 MFC: stop i386_vm86() from either panicing or trashing random pages. Approved by: re (kensmith) 18 April 2005, 21:36:17 UTC
3e16f1e MFC 1.10: Fix overflow of buf. Approved by: re (kensmith) 18 April 2005, 17:11:05 UTC
0eba815 Print amd64-specific security advisory only for amd64 Reviewed by: re (hrs) Approved by: re (hrs) 18 April 2005, 08:33:40 UTC
0e4df07 Merge the following from the English version: 1.761.2.39 -> 1.761.2.41.2.3 relnotes/common/new.sgml Approved by: re (hrs) 18 April 2005, 08:26:08 UTC
7a84b2a MF5STABLE 1.21.2.5: - Add Dell PERC 4ei to the list of supported devices. It's an alias used by Dell sometimes for PERC 4e/Si. [1] - Delete some trailing whitespace. Rapported by: Jon Kuster <kwsn@earthlink.net> [1] Approved by: re (hrs) 16 April 2005, 18:26:19 UTC
270435f Getting ready for the RC3 builds. Approved by: re (implicit) 16 April 2005, 16:09:44 UTC
c2fa65c MFC 1.844: Document FreeBSD-SA-05:04.ifconf. Approved by: re (hrs) 16 April 2005, 14:45:30 UTC
0a8e794 MFC: Explicitly install linux_base 8. Approved by: re (kensmith) 15 April 2005, 22:20:20 UTC
56be05a MFC 1.27: Fix mss byte order, only affects synproxy code path. Submitted by: John L. Scarfone via OpenBSD Reviewed by: mlaier Obtained from: OpenBSD, rev. 1.483 Approved by: re (kensmith) 15 April 2005, 13:23:12 UTC
93a8197 Merge the following from the English version: 1.27.2.2 -> 1.27.2.3 install.sgml 1.9 -> 1.8.2.1 layout.sgml 1.16 -> 1.14.2.1 trouble.sgml Approved by: re (hrs) 15 April 2005, 07:06:26 UTC
back to top