head 1.2; access; symbols pkgsrc-2016Q1:1.1.0.6 pkgsrc-2016Q1-base:1.1 pkgsrc-2015Q4:1.1.0.4 pkgsrc-2015Q4-base:1.1 pkgsrc-2015Q3:1.1.0.2 pkgsrc-2015Q3-base:1.1; locks; strict; comment @// @; 1.2 date 2016.05.19.21.58.43; author joerg; state dead; branches; next 1.1; commitid eJiO3Ysuf1e8J87z; 1.1 date 2015.09.13.02.31.22; author joerg; state Exp; branches; next ; commitid GIdRZPpEY2RZj2By; desc @@ 1.2 log @Update to Botan 1.11.29: - CVE-2016-2849: side channel attack against DSA and ECDSA - CVE-2016-2850: failure to enforce TLS policies could lead to weaker algorithms being choosen - CVE-2016-2195: heap overflow in ECC point decoding - CVE-2016-2196: heap overflow in P-521 reduction - CVE-2016-2194: DOS against the modular reduction - CVE-2015-7824: padding oracle attack against TLS CBC - CVE-2015-7825: DOS due to certificate chains - CVE-2015-7826: wildcard certifications verification failures - CVE-2015-7827: protection against PKCS#1 side channel issues - CVE-2015-5726: potential DOS with invalid zero-length BER - CVE-2015-5727: unbound memory use with BER - deprecation or removal of various insecure crypto primitives - TLS heartbeat removed - various other bugfixes and improvements. @ text @$NetBSD: patch-src_lib_utils_read__cfg.cpp,v 1.1 2015/09/13 02:31:22 joerg Exp $ --- src/lib/utils/read_cfg.cpp.orig 2015-08-23 22:01:34.263572670 +0000 +++ src/lib/utils/read_cfg.cpp @@@@ -6,6 +6,7 @@@@ */ #include +#include namespace Botan { @ 1.1 log @Add missing stdexcept includes. Add missing libraries for socket functions on Solaris. Check privileges for mlock use on Solaris before trying to lock the resource buffer. @ text @d1 1 a1 1 $NetBSD$ @