[src/netbsd-6-1]: src/doc Ticket 1281

[riz <riz%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/5855ef68224e
branches:  netbsd-6-1
changeset: 776064:5855ef68224e
user:      riz <riz%NetBSD.org@localhost>
date:      Thu Mar 19 16:47:41 2015 +0000

description:
Ticket 1281

diffstat:

 doc/CHANGES-6.1.6 |  21 ++++++++++++++++++++-
 1 files changed, 20 insertions(+), 1 deletions(-)

diffs (32 lines):

diff -r 847f7666c868 -r 5855ef68224e doc/CHANGES-6.1.6
--- a/doc/CHANGES-6.1.6 Thu Mar 19 16:47:13 2015 +0000
+++ b/doc/CHANGES-6.1.6 Thu Mar 19 16:47:41 2015 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: CHANGES-6.1.6,v 1.1.2.34 2015/03/17 19:38:32 snj Exp $
+# $NetBSD: CHANGES-6.1.6,v 1.1.2.35 2015/03/19 16:47:41 riz Exp $
 
 A complete list of changes from the NetBSD 6.1.5 release to the NetBSD 6.1.6
 release:
@@ -4174,3 +4174,22 @@
        sync pigz with HEAD.
        [mrg, ticket #1268]
 
+crypto/external/bsd/openssl/dist/crypto/asn1/a_type.c 1.2
+crypto/external/bsd/openssl/dist/crypto/asn1/tasn_dec.c 1.2
+crypto/external/bsd/openssl/dist/crypto/pkcs7/pk7_doit.c 1.2
+crypto/external/bsd/openssl/dist/crypto/pkcs7/pk7_lib.c 1.2
+crypto/external/bsd/openssl/dist/doc/crypto/d2i_X509.pod 1.2
+crypto/external/bsd/openssl/dist/ssl/s2_lib.c  1.3
+crypto/external/bsd/openssl/dist/ssl/s2_srvr.c 1.2
+
+       Address OpenSSL Security Advisory [19 Mar 2015]:
+       Reclassified: RSA silently downgrades to EXPORT_RSA [Client] (CVE-2015-0204)
+       Segmentation fault in ASN1_TYPE_cmp (CVE-2015-0286)
+       ASN.1 structure reuse memory corruption (CVE-2015-0287)
+       PKCS7 NULL pointer dereferences (CVE-2015-0289)
+       Base64 decode (CVE-2015-0292)
+       DoS via reachable assert in SSLv2 servers (CVE-2015-0293)
+       Use After Free following d2i_ECPrivatekey error (CVE-2015-0209)
+       X509_to_X509_REQ NULL pointer deref (CVE-2015-0288)
+       [spz, ticket #1281]
+