Go to file
christos 90f5d4a3e0 Apply patch-CVE-2006-4339.txt
Daniel Bleichenbacher recently described an attack on PKCS #1 v1.5
signatures. If an RSA key with exponent 3 is used it may be possible
to forge a PKCS #1 v1.5 signature signed by that key. Implementations
may incorrectly verify the certificate if they are not checking for
excess data in the RSA exponentiation result of the signature.

Since there are CAs using exponent 3 in wide use, and PKCS #1 v1.5 is
used in X.509 certificates, all software that uses OpenSSL to verify
X.509 certificates is potentially vulnerable, as well as any other use
of PKCS #1 v1.5. This includes software that uses OpenSSL for SSL or
TLS.
2006-09-05 12:24:08 +00:00
bin Fix typo, update date. 2006-09-04 20:30:36 +00:00
common complete initialization. 2006-08-27 22:31:55 +00:00
crypto Apply patch-CVE-2006-4339.txt 2006-09-05 12:24:08 +00:00
dist Typo. 2006-08-28 21:21:52 +00:00
distrib Fix two oversights from last update 2006-09-04 22:03:50 +00:00
doc Mention ECN and mark me responsible. 2006-09-05 00:43:44 +00:00
etc Initial import of NetBSD/landisk port by NONAKA Kimihiro <nonaka@NetBSD.org> 2006-09-01 21:26:18 +00:00
games PR/34175: Zafer Aydogan: touch the window to cause a refresh after help 2006-08-09 14:29:40 +00:00
gnu Add gcc4 mknative files for sh5el. 2006-09-04 20:01:28 +00:00
include Add efun(3) 2006-08-26 18:11:12 +00:00
lib Import of TCP ECN algorithm for congestion control. 2006-09-05 00:29:35 +00:00
libexec Pay attention to the new LFS_CLEANER_MUST_CLEAN flag in the Ifile. 2006-09-01 19:43:51 +00:00
regress Add -fno-reorder-blocks for gcc4, to avoid duplicate label definition 2006-09-02 21:27:41 +00:00
rescue Add mount_tmpfs(8) to /rescue. Ok with christos. 2006-08-16 16:50:59 +00:00
sbin Import of TCP ECN algorithm for congestion control. 2006-09-05 00:29:35 +00:00
share Import of TCP ECN algorithm for congestion control. 2006-09-05 00:29:35 +00:00
sys Switch dreamcast to MI todr(9). 2006-09-05 11:09:36 +00:00
tools Allow for building a crosstools version of gprof. 2006-08-27 07:04:00 +00:00
usr.bin Fix uninitialized variables. 2006-09-05 12:11:27 +00:00
usr.sbin Use "stty size" to acquire screen width reliably. 2006-09-03 09:19:07 +00:00
x11 Remove Xpmax stuff. 2006-07-30 03:25:43 +00:00
build.sh Recognize MACHINE=landisk (sh3el). 2006-09-01 21:52:55 +00:00
BUILDING mkisofs is in pkgsrc/sysutils/cdrtools now, not pkgsrc/sysutils/cdrecord. 2006-01-29 14:03:59 +00:00
Makefile remove support for building (with) GCC 2.95. also: 2006-06-02 22:16:18 +00:00
Makefile.inc don't set KERNSRCDIR here; pull in <bsd.kernobj.mk> if you need it 2002-04-10 14:53:43 +00:00
UPDATING Mention acorn32 console changes, since they'll break builds with custom 2006-08-15 20:48:01 +00:00