aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Upgrade to version 8.3.3.Doug Barton2002-07-15228-5037/+12073
| | | | | | | Approved by: security-officer Notes: svn path=/releng/4.4/; revision=100055
* MFC 1.6: Correct a buffer overflow when handling malformed NFSJacques Vidrine2002-07-122-2/+13
| | | | | | | packets. Notes: svn path=/releng/4.4/; revision=99870
* MFS: prevent tracing of previously privileged processes.Dag-Erling Smørgrav2002-07-113-3/+7
| | | | Notes: svn path=/releng/4.4/; revision=99779
* This commit was manufactured by cvs2svn to create branch 'RELENG_4_4'.cvs2svn2002-07-011-0/+105
| | | | Notes: svn path=/releng/4.4/; revision=99184
* This commit was manufactured by cvs2svn to create branch 'RELENG_4_4'.cvs2svn2002-07-011-0/+21
| | | | Notes: svn path=/releng/4.4/; revision=99183
* Note FreeBSD-SA-02:28.resolv and patch level bump.Jacques Vidrine2002-06-261-1/+4
| | | | Notes: svn path=/releng/4.4/; revision=98898
* Add the security fix FreeBSD-SA-02:28.resolv to the 4.4 branchJulian Elischer2002-06-263-2/+7
| | | | | | | | | | | | This branch is the one that some really big security consious organisations are running.. It needs to be maintained. (already done: newvers.sh) Obtained from: Other branches Notes: svn path=/releng/4.4/; revision=98896
* Update the patch level too.Julian Elischer2002-06-261-1/+1
| | | | | | | | | | | | Forgotten by: whoever applied the patch.. I was committing it too and they beat me by about 5 seconds, but they didn't change this.. For the record 4.4 is very important to me specifically and FreeBSD genarally as a lot of MAJOR banks are running it internally. Notes: svn path=/releng/4.4/; revision=98893
* Note FreeBSD-SA-02:27 and patch level bump.Jacques Vidrine2002-05-291-1/+4
| | | | Notes: svn path=/releng/4.4/; revision=97505
* Back out previous commit. The bug which it was intended to addressJacques Vidrine2002-05-282-8/+3
| | | | | | | | | | is a result of interaction with the syncache, but the latter does not exist on this branch. Reported by: silby Notes: svn path=/releng/4.4/; revision=97422
* MFC src/sys/kern/uipc_socket.c rev 1.116Jacques Vidrine2002-05-282-3/+8
| | | | | | | | | | src/sys/kern/uipc_socket2.c rev 1.87, 1.94 Make sure that sockets undergoing accept filtering are aborted in a LRU fashion when the listen queue fills up. Notes: svn path=/releng/4.4/; revision=97415
* Bump patch level.Jacques Vidrine2002-05-281-1/+1
| | | | Notes: svn path=/releng/4.4/; revision=97414
* Note 4.4-RELEASE-p12.Jacques Vidrine2002-05-151-2/+2
| | | | Notes: svn path=/releng/4.4/; revision=96666
* Bump patch level for k5su issue.Jacques Vidrine2002-05-151-1/+1
| | | | Notes: svn path=/releng/4.4/; revision=96665
* MFC 1.206 src/UPDATINGJacques Vidrine2002-05-154-0/+17
| | | | | | | | | | 1.6 src/kerberos5/usr.bin/k5su/Makefile 1.187 src/share/examples/etc/make.conf (etc/defaults/make.conf) 1.44 src/share/man/man5/make.conf.5 Turn on the set-user-ID bit for k5su if ENABLE_SUID_K5SU is defined. Notes: svn path=/releng/4.4/; revision=96659
* MFC 1.312: Remove dangerous use of globbing.Jacques Vidrine2002-05-091-1/+3
| | | | Notes: svn path=/releng/4.4/; revision=96260
* Add cross-references to applicable security advisories. AlsoBruce A. Mah2002-05-021-4/+4
| | | | | | | | | be more consistent about the format of the names we give for advisories. Approved by: nectar Notes: svn path=/releng/4.4/; revision=95956
* Update patchlevel per current count.Jeroen Ruigrok van der Werven2002-04-301-1/+1
| | | | Notes: svn path=/releng/4.4/; revision=95779
* Note change for FreeBSD-SA-02:23.stdio.Jacques Vidrine2002-04-251-0/+4
| | | | Notes: svn path=/releng/4.4/; revision=95453
* Fix bogon introduced when MFCing: In FreeBSD 4.x, the second argumentJacques Vidrine2002-04-221-1/+1
| | | | | | | to vn_open is type `int', not `int *'. Notes: svn path=/releng/4.4/; revision=95279
* MFC 1.137 src/sys/kern/kern_descrip.cJacques Vidrine2002-04-214-1/+64
| | | | | | | | | | | | 1.162 src/sys/kern/kern_exec.c 1.41 src/sys/sys/filedesc.h When exec'ing a set[ug]id program, make sure that the stdio file descriptors (0, 1, 2) are allocated by opening /dev/null for any which are not already open. Notes: svn path=/releng/4.4/; revision=95206
* Note fixes for:Jacques Vidrine2002-04-162-2/+6
| | | | | | | | = mmap/msync bug which can panic the kernel. = TCP broadcast connection bug. Notes: svn path=/releng/4.4/; revision=94876
* MFC 1.148, 1.149: The TCP code did not do sufficient checks on whetherJacques Vidrine2002-04-151-7/+8
| | | | | | | incoming packets were destined for a broadcast IP address. Notes: svn path=/releng/4.4/; revision=94783
* MFC 1.213: Fix mmap/msync bug which can panic the kernel.Jacques Vidrine2002-04-151-1/+4
| | | | Notes: svn path=/releng/4.4/; revision=94782
* MFC 1.12: correct bug introduced in 1.11 where ZFREE was moved to aChris D. Faulhaber2002-03-241-2/+6
| | | | | | | | | point after the structural members were clobbered by stores into a union'd structure. MFC 1.13: correct deflate window size check. Notes: svn path=/releng/4.4/; revision=93114
* MFC sys/net/zlib.c 1.13: correct deflate window size checkChris D. Faulhaber2002-03-241-1/+1
| | | | Notes: svn path=/releng/4.4/; revision=93113
* Add 4.4-RELEASEp9.Jacques Vidrine2002-03-071-0/+3
| | | | Notes: svn path=/releng/4.4/; revision=91812
* Bump patch level for FreeBSD-SA-02:13 (OpenSSH off-by-one bug).Jacques Vidrine2002-03-071-1/+1
| | | | Notes: svn path=/releng/4.4/; revision=91811
* Update version string.Jacques Vidrine2002-03-071-1/+1
| | | | Notes: svn path=/releng/4.4/; revision=91810
* MFC 1.8: Fix off-by-one error.Jacques Vidrine2002-03-071-1/+1
| | | | Notes: svn path=/releng/4.4/; revision=91809
* Note zlib fix and bzip2 update, bump patch level (-p8)Chris D. Faulhaber2002-02-231-1/+6
| | | | Notes: svn path=/releng/4.4/; revision=91153
* Bump patch level (-p8) for zlib fix and bzip2 update.Chris D. Faulhaber2002-02-231-1/+1
| | | | Notes: svn path=/releng/4.4/; revision=91152
* MFC: update bzip2 to version 1.0.2 to fix insecure permissions duringChris D. Faulhaber2002-02-2327-427/+837
| | | | | | | symlink dereferencing and a race condition while creating new files. Notes: svn path=/releng/4.4/; revision=91151
* MFC 1.11: Error handling fixes for inflate.Chris D. Faulhaber2002-02-231-4/+7
| | | | Notes: svn path=/releng/4.4/; revision=91092
* MFC 1.3: Error handling fixes for inflate.Chris D. Faulhaber2002-02-231-4/+9
| | | | Notes: svn path=/releng/4.4/; revision=91091
* This commit was manufactured by cvs2svn to create branch 'RELENG_4_4'.cvs2svn2002-02-0426363-0/+9281176
| | | | Notes: svn path=/releng/4.4/; revision=90217
* This time for sure ... revision 1.3 was supposed to be on this branch.Jacques Vidrine2002-01-291-2/+4
| | | | | | | Don't use __FBSDID here because we don't have it. Notes: svn path=/releng/4.4/; revision=89964
* Note changes to standard-supfile, sdiff and gzip. We are now at p7.Warner Losh2002-01-282-2/+12
| | | | Notes: svn path=/releng/4.4/; revision=89898
* MFC 1.2: Fix temporary file handling.Jacques Vidrine2002-01-281-95/+24
| | | | Notes: svn path=/releng/4.4/; revision=89896
* MFC 1.6: Use mktemp(1) when creating temporary files.Jacques Vidrine2002-01-282-11/+16
| | | | Notes: svn path=/releng/4.4/; revision=89895
* The 'standard-supfile' should track its own branch.Crist J. Clark2002-01-281-1/+1
| | | | | | | Approved by: security-officer@ Notes: svn path=/releng/4.4/; revision=89888
* Move 4.3 header info. Add p3 and p4.Warner Losh2002-01-271-7/+23
| | | | Notes: svn path=/releng/4.4/; revision=89852
* Eliminate ptrace/exec race.Jacques Vidrine2002-01-2312-6/+47
| | | | | | | | | | | | | MFC 1.191 src/sys/sys/proc.h MFC 1.44 src/sys/kern/kern_exec.c (execve) Add P_INEXEC flag to indicate that a process is currently exec'ing. sys/kern/sys_process.c (ptrace) sys/miscfs/procfs/... Do not allow debugging of a process during exec. Notes: svn path=/releng/4.4/; revision=89719
* Bump patchlevel for fixes to k5su and fstatfs.Jacques Vidrine2002-01-171-1/+1
| | | | Notes: svn path=/releng/4.4/; revision=89461
* MFC 1.216: Return EBADF if some vnode field has been reset to a NULL pointer.Jacques Vidrine2002-01-171-0/+2
| | | | Notes: svn path=/releng/4.4/; revision=89460
* MFC 1.1.1.4: Don't use getlogin() to determine whether we are root.Jacques Vidrine2002-01-171-6/+7
| | | | Notes: svn path=/releng/4.4/; revision=89459
* Fix the footer in Japanese which is likely to misleadHiroki Sato2002-01-031-1/+1
| | | | | | | the readers. Notes: svn path=/releng/4.4/; revision=88850
* Bump patchlevel for fix to pw(8).Jacques Vidrine2001-12-212-1/+5
| | | | Notes: svn path=/releng/4.4/; revision=88362
* MFC 1.18: Use correct mode for temporary file.Jacques Vidrine2001-12-211-1/+1
| | | | Notes: svn path=/releng/4.4/; revision=88350
* MFC directory permission fix.Wes Peters2001-12-071-1/+1
| | | | | | | Approved by: security-officer Notes: svn path=/releng/4.4/; revision=87513