OpenBSD src changes summary for 2016-06-25 ==========================================
lib/libssl sbin/fdisk share/man usr.sbin/pkg_add == lib =============================================================== 01/04 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/lib libssl ~ src/crypto/ocsp/ocsp_cl.c > Fix the ocsp code to actually check for errors when comparing time values > which was not being done due to a lack of checking of the return code for > X509_cmp_time. Ensure that we only compare GERNERALIZEDTIME values because > this is what is specified by RFC6960. > Issue reported, and fix provided by Kazuki Yamaguchi <[email protected]> > ok bcook@ (beck@) ~ src/crypto/ocsp/ocsp_srv.c > Fix from [email protected] to ensure that OCSP uses > Generalized Time on requests as per RFC6960 (beck@) ~ src/crypto/ocsp/ocsp_cl.c ~ src/crypto/ocsp/ocsp_srv.c TAGGED OPENBSD_5_8 > Fix several issues in the OCSP code that could result in the incorrect > generation and parsing of OCSP requests. This remediates a lack of error > checking on time parsing in these functions, and ensures that only > GENERALIZEDTIME formats are accepted for OCSP, as per RFC 6960 > Issues reported, and fixes provided by Kazuki Yamaguchi <[email protected]> > and Kinichiro Inoguchi <[email protected]> (beck@) ~ src/crypto/ocsp/ocsp_cl.c ~ src/crypto/ocsp/ocsp_srv.c TAGGED OPENBSD_5_9 > Fix several issues in the OCSP code that could result in the incorrect > generation and parsing of OCSP requests. This remediates a lack of error > checking on time parsing in these functions, and ensures that only > GENERALIZEDTIME formats are accepted for OCSP, as per RFC 6960 > Issues reported, and fixes provided by Kazuki Yamaguchi <[email protected]> > and Kinichiro Inoguchi <[email protected]> (beck@) == sbin ============================================================== 02/04 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sbin fdisk ~ fdisk.c > Move pledge after opendev and DIOCGPDINFO. Fixes e.g. fdisk /dev/tty. > This diff by deraadt was overlooked far too many times, mostly by me. > It's the original fix of the pledge disklabel breakage found by espie. > diff by deraadt; ok semarie, tb. (tb@) == share ============================================================= 03/04 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/share man ~ man4/umb.4 > Add Medion Mobile S4222 > Remove deprecated Tn at the same time. > OK jmc@ (feinerer@) == usr.sbin ========================================================== 04/04 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.sbin pkg_add ~ OpenBSD/PackingElement.pm ~ OpenBSD/PackingList.pm > recognize @option is-branch > so that it trickles to snapshots and then can be used in ports (espie@) =============================================================================== _______________________________________________ odc mailing list [email protected] http://www.squish.net/mailman/listinfo/odc
