1
0
mirror of https://git.FreeBSD.org/src.git synced 2024-12-24 11:29:10 +00:00
freebsd/contrib
Gregory Neil Shapiro 3df48792f2 An additional fix for the openssl Weak DH remediation:
The import of openssl to address the FreeBSD-SA-15:10.openssl security
advisory includes a change which rejects handshakes with DH parameters
below 768 bits.  sendmail releases prior to 8.15.2 (not yet released),
defaulted to a 512 bit DH parameter setting for client connections.

The first fix committed last week changed the default to 1024 bits.

This commit fixes the case where the DHParameters option is set to a
file which doesn't exist, which is the case on newer versions of
FreeBSD which enable STARTTLS by default by auto-creating TLS
certificates.

MFC after:	2 days
2015-06-23 04:33:54 +00:00
..
amd
apr
apr-util
atf Import proposed fix from upstream for 2015-05-21 05:06:08 +00:00
binutils Copy new attribute types when linking. bfd will copy attributes as needed, 2015-05-05 10:35:29 +00:00
bmake Merge bmake-20150606 2015-06-11 04:00:22 +00:00
bsnmp
byacc
bzip2
com_err
compiler-rt compiler-rt: add floatditf and floatunditf 2015-04-07 19:31:29 +00:00
dialog
diff Fix the wrong format, format specifies type 'int' but the argument has type 2015-06-01 06:14:17 +00:00
dma
dtc Silence clang warning about extraneous parenthesis 2015-06-05 17:18:10 +00:00
ee
elftoolchain elfcopy: Handle objects without a ".shstrtab" section string table 2015-06-13 14:24:31 +00:00
expat
file MFV r284276: Fix long options. 2015-06-11 17:32:36 +00:00
flex
gcc Fix compilation of this macro under gcc-4.9 for MIPS32. 2015-06-18 13:40:08 +00:00
gcclibs libgomp: bring initial BSD support from upstream. 2015-04-28 21:32:27 +00:00
gdb Update intree gdb/kgdb to handle 2 dwarf types: 2015-05-17 15:49:38 +00:00
gdtoa
gperf Convert texinfo to mdoc(7) using texi2mdoc 2015-03-02 11:48:00 +00:00
groff Significant upgrades to sa(4) and mt(1). 2015-02-23 21:59:30 +00:00
hyperv/tools
ipfilter ipf(1): Use strchr(3) instead of deprecated index(3) 2015-05-22 18:31:26 +00:00
jemalloc Add aarch64 (arm64) #define for jemalloc 2015-03-12 08:52:00 +00:00
ldns Add a script that runs configure for both ldns and drill. 2015-04-27 12:02:16 +00:00
ldns-host
less
libarchive MFV r282927,r282928,r282930 (kientzle): 2015-05-14 22:35:26 +00:00
libbegemot
libc-pwcache
libc-vis
libc++ Pull in r233552 from upstream libc++ trunk (by Eric Fiselier): 2015-03-30 19:36:33 +00:00
libcxxrt Update libcxxrt upgrade instructions 2015-06-18 14:29:46 +00:00
libexecinfo
libgnuregex
libpcap
libreadline
libstdc++
libucl Update libucl to git version 8d3b186 2015-03-02 21:41:09 +00:00
libxo Unbreak libxo's handling of characters not representable in current locale 2015-06-13 15:14:39 +00:00
llvm Upgrade our copy of clang and llvm to 3.6.1 release. 2015-05-25 13:43:03 +00:00
mdocml Replace the gunzip(1) system by a minimalistic zlib based implementation. 2015-06-03 13:32:28 +00:00
mknod
mtree
ncurses
netbsd-tests Fix warning of implicit declaration of function 'mkdir'. 2015-05-31 02:21:35 +00:00
netcat MFV r282611: netcat from OpenBSD 5.7. 2015-05-07 22:54:31 +00:00
ngatm
ntp MFV ntp 4.2.8p2 (r281348) 2015-05-04 04:45:59 +00:00
nvi Update nvi to 2.1.3 which fixes the data corruption when locale conversion 2015-04-10 17:50:28 +00:00
ofed Define BINDIR for some test utilities. 2015-03-19 15:55:02 +00:00
one-true-awk
openbsm
openpam
openresolv MFV r225523, r282431: 2015-05-04 21:07:20 +00:00
opie
pam_modules/pam_passwdqc
pf
pjdfstest Fix race when testing for ETXTBSY writing to ${n0} (process image) by making 2015-04-16 03:35:47 +00:00
pnpinfo
sendmail An additional fix for the openssl Weak DH remediation: 2015-06-23 04:33:54 +00:00
serf
smbfs Remove the const qualifier from iconv(3) to comply with POSIX: 2015-04-15 09:09:20 +00:00
sqlite3 Import sqlite3 3.8.9 2015-05-01 21:59:32 +00:00
subversion
tcp_wrappers
tcpdump Remove "capability mode sandbox enabled" messages. 2015-05-04 21:44:51 +00:00
tcsh
telnet
tnftp
top Move contrib/top/top.X to contrib/top/top.xs and move 2015-06-08 19:45:24 +00:00
traceroute The code starts with base + 1 as the first port. Fix to documentation 2015-05-31 12:18:30 +00:00
tzcode
tzdata MFV of 284395,tzdata2015e 2015-06-15 00:59:47 +00:00
unbound Upgrade Unbound to 1.5.3. 2015-04-27 12:06:13 +00:00
unvis
vis
wpa Merge wpa_supplicant/hostapd 2.4. 2015-04-21 01:45:11 +00:00
xz MFV r281278: 2015-04-09 18:03:27 +00:00