src, branch releng/8.4

Fix a regression introduced with previous SA-15:16.openssl

2015-07-30T10:09:31+00:00

changeset.  The problem is specific to FreeBSD 8.x.

Submitted by:	jkim
Pointy hat to:	delphij
Approved by:	so

Fix resource exhaustion in TCP reassembly. [SA-15:15]

2015-07-28T19:59:22+00:00

Fix OpenSSH multiple vulnerabilities. [SA-15:16]

Fix BIND remote denial of service vulnerability. [SA-15:17]

Approved by:	so

Fix resource exhaustion due to sessions stuck in LAST_ACK state.

2015-07-21T23:42:56+00:00

Security:	CVE-2015-5358
Security:	SA-15:13.tcp
Submitted by:	Jonathan Looney (Juniper SIRT)
Approved by:	so

Fix BIND resolver remote denial of service when validating.

2015-07-07T21:44:01+00:00

Security:	CVE-2015-4620
Security:	FreeBSD-SA-15:11.bind
Approved by:	so

[EN-15:08] Revised: Improvements to sendmail TLS/DH interoperability.

2015-06-30T23:21:59+00:00

Approved by:	so

Raise the default for sendmail client connections to 1024-bit DH

2015-06-18T05:36:45+00:00

parameters to imporve TLS/DH interoperability with newer SSL/TLS
suite, notably OpenSSL after FreeBSD 10.1-RELEASE-p12 (FreeBSD-
SA-15:10.openssl).

This is MFC of r284436 (gshapiro), the original commit message
was:

===
The import of openssl to address the FreeBSD-SA-15:10.openssl security
advisory includes a change which rejects handshakes with DH parameters
below 768 bits.  sendmail releases prior to 8.15.2 (not yet released),
defaulted to a 512 bit DH parameter setting for client connections.
This commit chages that default to 1024 bits.  sendmail 8.15.2, when
released well use a default of 2048 bits.
===

Reported by:	Frank Seltzer
Errata Notice:	FreeBSD-EN-15:08.sendmail
Approved by:	so

Fix OpenSSL multiple vulnerabilities.

2015-06-12T07:23:55+00:00

Security:	FreeBSD-SA-15:10.openssl
Approved by:	so

Update base system file(1) to 5.22 to address multiple denial of

2015-06-09T22:13:53+00:00

service issues. [EN-15:06]

Approved by:	so

Fix bug with freebsd-update(8) that does not ensure the previous

2015-05-13T22:52:51+00:00

upgrade was completed. [EN-15:04]

Approved by:	so

Improve patch for SA-15:04.igmp to solve a potential buffer overflow.

2015-04-07T20:21:23+00:00

Fix multiple vulnerabilities of ntp. [SA-15:07]

Fix Denial of Service with IPv6 Router Advertisements. [SA-15:09]

Approved by:	so