cvs commit: src UPDATING src/contrib/bind9/lib/dns validator.c src/contrib/tcpdump print-bgp.c print-isoclns.c print-ldp.c print-rsvp.c src/gnu/usr.bin/gzip gzip.c src/sys/conf newvers.sh

Wed Jun 8 21:29:15 GMT 2005

simon       2005-06-08 21:29:15 UTC

  FreeBSD src repository (doc,ports committer)

  Modified files:        (Branch: RELENG_5_3)
    .                    UPDATING 
    contrib/bind9/lib/dns validator.c 
    contrib/tcpdump      print-bgp.c print-isoclns.c print-ldp.c 
                         print-rsvp.c 
    gnu/usr.bin/gzip     gzip.c 
    sys/conf             newvers.sh 
  Log:
  Correct several denial-of-service vulnerabilities in tcpdump.

  Security:       FreeBSD-SA-05:10.tcpdump
  Security:       CAN-2005-1267, CAN-2005-1278, CAN-2005-1279, CAN-2005-1280
  Obtained from:  tcpdump.org

  Correct directory traversal and race condition vulnerabilities in gzip.

  Security:       FreeBSD-SA-05:11.gzip
  Security:       CAN-2005-0988, CAN-2005-1228
  Obtained from:  Steve Grubb via RedHat, Debian

  Correct BIND 9 DNSSEC remote denial of service vulnerability.

  Security:       FreeBSD-SA-05:12.bind9
  Security:       CAN-2005-0034
  Obtained from:  ISC
  Submitted by:   trhodes

  Approved by:    so (nectar, cperciva)

  Revision         Changes    Path
  1.342.2.13.2.19  +8 -0      src/UPDATING
  1.1.1.1.2.1.2.1  +3 -1      src/contrib/bind9/lib/dns/validator.c
  1.1.1.5.4.1      +5 -2      src/contrib/tcpdump/print-bgp.c
  1.12.4.1         +5 -2      src/contrib/tcpdump/print-isoclns.c
  1.1.1.1.4.1      +3 -0      src/contrib/tcpdump/print-ldp.c
  1.1.1.1.4.1      +9 -2      src/contrib/tcpdump/print-rsvp.c
  1.11.4.1         +10 -8     src/gnu/usr.bin/gzip/gzip.c
  1.62.2.15.2.21   +1 -1      src/sys/conf/newvers.sh