On 2014-04-08 13:27, Xin LI wrote:
Author: delphij
Date: Tue Apr 8 18:27:32 2014
New Revision: 264265
URL: http://svnweb.freebsd.org/changeset/base/264265
Log:
Fix NFS deadlock vulnerability. [SA-14:05]
Fix "Heartbleed" vulnerability and ECDSA Cache Side-channel
Attack in OpenSSL. [SA-14:06]
Modified:
head/crypto/openssl/crypto/bn/bn.h
head/crypto/openssl/crypto/bn/bn_lib.c
head/crypto/openssl/crypto/ec/ec2_mult.c
head/crypto/openssl/ssl/d1_both.c
head/crypto/openssl/ssl/t1_lib.c
head/sys/fs/nfsserver/nfs_nfsdserv.c
__FreeBSD_version is needed too.
Also, that this was a partial release of 1.0.1g is confusing a LOT of
users. They think they are still vulnerable. They expect to see 1.0.1g
in 'openssl version'. We could have our own version string in 'openssl
version' to remedy this.
--
Regards,
Bryan Drewery
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/svn-src-head
To unsubscribe, send any mail to "[email protected]"
