delphij's Chaos选择chaos这个词是因为~~实在很难找到一个更合适的词来形容这儿了……

Security

共 294 篇文章。

Apache又来了安全公告。。。

• Security

刚刚想睡觉的时候收到了commit mail:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24


clement     2004/05/28 08:27:02 PDT

  FreeBSD ports repository
  Modified files:
    www/apache2          Makefile 
  Added files:
    www/apache2/files    patch-modules:ssl:ssl_engine_kernel.c 
  Log:
  - Import security fix from Apache CVS...
  * modules/ssl/ssl_engine_kernel.c (ssl_hook_UserCheck): Fix buffer
  overflow in FakeBasicAuth code if client's subject DN exceeds 6K in
  length (CVE CAN-2004-0488); switch to using apr-util base64 encoder
  functions.
  - ... and of course bump PORTREVISION.
  
  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0488
  http://secunia.com/advisories/11534/
  
  Reported by:    Charles-Damien Orbello <tazma@cultdeadsheep.org>
  
  Revision  Changes    Path
  1.178     +1 -0      ports/www/apache2/Makefile
  1.1       +39 -0     ports/www/apache2/files/patch-modules:ssl:ssl_engine_kernel.c (new)
阅读全文… ( 本文约 140 字，阅读大致需要 1 分钟 )

啊？还能这么玩呢？

• Development
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31

des         2004/05/18 23:40:52 PDT

  FreeBSD src repository

  Modified files:        (Branch: RELENG_4_7)
    .                    UPDATING 
  Modified files:        (Branch: RELENG_4_8)
    .                    UPDATING 
  Modified files:        (Branch: RELENG_4_9)
    .                    UPDATING 
  Modified files:        (Branch: RELENG_5_0)
    .                    UPDATING 
  Modified files:        (Branch: RELENG_5_1)
    .                    UPDATING 
  Modified files:        (Branch: RELENG_5_2)
    .                    UPDATING 
  Modified files:        (Branch: RELENG_4_7)
    sys/conf             newvers.sh 
  Log:
  Bump and document patch level.
  
  Approved by:    so
  
  Revision        Changes    Path
  1.73.2.74.2.31  +3 -0      src/UPDATING
  1.73.2.80.2.24  +3 -0      src/UPDATING
  1.73.2.89.2.9   +3 -0      src/UPDATING
  1.229.2.27      +3 -0      src/UPDATING
  1.251.2.19      +3 -0      src/UPDATING
  1.282.2.15      +3 -0      src/UPDATING
  1.44.2.26.2.29  +1 -1      src/sys/conf/newvers.sh

很想知道是怎么commit的……

参与评论

FreeBSD 4.10-RC3 is delaying again

• Development

To summarize the release engineering process: 4.10-RC3 has delayed again so 4.10-RELEASE won’t be released soon. Recently, RELENG_4_10 branch has received several critical bugfixes. I personally requested a MFC for a security vulnerablity related with timedc, and Tim has MFC’ed some other security related fixes. Matthew Dillon has submitted some VM patches (committed by Ken Smith) and they all get into RC3.

阅读全文… ( 本文约 140 字，阅读大致需要 1 分钟 )

src/usr.sbin/timed/timedc/timedc.c MFC Requested for 4.10-R

• Security

I have requested src/usr.sbin/timed/timedc/timedc.c, v 1.5 to be MFC’ed to RELENG_4 and RELENG_4_10 so it will get its way into the upcoming release. It has not decided whether this will be merged into RELENG_4_10 yet, however, it is very likely that this will.

阅读全文… ( 本文约 88 字，阅读大致需要 1 分钟 )

Is it practical to trust my mail system?

• Security

Yesterday someone has asked me about my diary system, I told her that my diary is managed by my own diary software, which is a close-source system (written in C#) and I do not want to share it with others because it is technically not a friendly one.

阅读全文… ( 本文约 180 字，阅读大致需要 1 分钟 )
搜索文章… (按 ESC 退出)