MITM attacks against portsnap and freebsd-update

2014-04-10 Thread David Noel
/query-pr.cgi?pr=188432 Retiring portsnap: http://www.freebsd.org/cgi/query-pr.cgi?pr=188433 David Noel ___ freebsd-bugs@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-bugs To unsubscribe, send any mail to "freebsd-bugs-unsubscr...@freebsd.org"

misc/188434: Freeze attacks against freebsd-update

2014-04-10 Thread David Noel
ate-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Thu Apr 10 16:50:00 UTC 2014 >Closed-Date: >Last-Modified: >Originator: David Noel >Release:9.2 >Organization: >Environment: >Description: freebsd-update is vulnerable

kern/188433: Retiring portsnap

2014-04-10 Thread David Noel
: >Class: change-request >Submitter-Id: current-users >Arrival-Date: Thu Apr 10 16:40:00 UTC 2014 >Closed-Date: >Last-Modified: >Originator: David Noel >Release: >Organization: >Environment: >Description: With the inclusion of svnlite in 10 the ques

kern/188430: Freeze attacks against portsnap

2014-04-10 Thread David Noel
Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Thu Apr 10 16:30:00 UTC 2014 >Closed-Date: >Last-Modified: >Originator: David Noel >Release:9.2 >Organization: >Environment: >Description: Portsnap is vulnerable to freeze at

kern/188432: MITM attacks against portsnap mirrors (pmirror.sh)

2014-04-10 Thread David Noel
>Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Thu Apr 10 16:30:01 UTC 2014 >Closed-Date: >Last-Modified: >Originator: David Noel >Release:9.2 >Organization: >Environment: >Description: The portsnap mirror

kern/188429: MITM attacks against freebsd-update

2014-04-10 Thread David Noel
Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Thu Apr 10 16:30:00 UTC 2014 >Closed-Date: >Last-Modified: >Originator: David Noel >Release:9.2 >Organization: >Environment: >Description: freebsd-update.sh extracts fetched d

bin/188428: MITM attacks against portsnap

2014-04-10 Thread David Noel
Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Thu Apr 10 16:20:00 UTC 2014 >Closed-Date: >Last-Modified: >Originator: David Noel >Release:9.2 >Organization: >Environment: >Description: Portsnap extracts fetched data prior to its