Fix OpenSSH remote Denial of Service vulnerability. [SA-16:33]

Fix OpenSSL remote DoS vulnerability. [SA-16:35]

Security: FreeBSD-SA-16:33.openssh
Security: FreeBSD-SA-16:35.openssl
Approved by: so

Fix multiple OpenSSL vulnerabilitites.

Approved by: so
Security: FreeBSD-SA-16:26.openssl

Fix OpenSSH remote Denial of Service vulnerability. [SA-16:33]

Fix OpenSSL remote DoS vulnerability. [SA-16:35]

Security: FreeBSD-SA-16:33.openssh
Security: FreeBSD-SA-16:35.openssl
Approved by: so

Fix multiple OpenSSL vulnerabilitites.

Approved by: so
Security: FreeBSD-SA-16:26.openssl

- Copy stable/10@296371 to releng/10.3 in preparation for 10.3-RC1
builds.
- Update newvers.sh to reflect RC1.
- Update __FreeBSD_version to reflect 10.3.
- Update default pkg(8) configuration to use the quarterly branch.

Approved by: re (implicit)

Merge OpenSSL 1.0.1q.

MFC: r284283

Merge OpenSSL 1.0.1n.

MFC: r280297

Merge OpenSSL 1.0.1m.

Relnotes: yes

MFC: r276861, r276863

Merge OpenSSL 1.0.1k.

MFC: r269682

Merge OpenSSL 1.0.1i.

MFC: r261037, r264278

Merge OpenSSL 1.0.1f and 1.0.1g.

MFC r260403 (MFV r260399):

Apply vendor commits:

197e0ea Fix for TLS record tampering bug. (CVE-2013-4353).
3462896 For DTLS we might need to retransmit messages from the
previous session so keep a copy of write context in DTLS
retransmission buffers instead of replacing it after
sending CCS. (CVE-2013-6450).
ca98926 When deciding whether to use TLS 1.2 PRF and record hash
algorithms use the version number in the corresponding
SSL_METHOD structure instead of the SSL structure. The
SSL structure version is sometimes inaccurate.
Note: OpenSSL 1.0.2 and later effectively do this already.
(CVE-2013-6449).

Security: CVE-2013-4353
Security: CVE-2013-6449
Security: CVE-2013-6450

Copy head (r256279) to stable/10 as part of the 10.0-RELEASE cycle.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

Merge OpenSSL 1.0.1e.

Approved by: secteam (simon), benl (silence)

Merge OpenSSL 1.0.1c.

Approved by: benl (maintainer)

Merge OpenSSL 0.9.8x.

Reviewed by: stas
Approved by: benl (maintainer)
MFC after: 3 days

Merge OpenSSL 0.9.8m into head.

This also "reverts" some FreeBSD local changes so we should now
be back to using entirely stock OpenSSL. The local changes were
simple $FreeBSD$ lines additions, which were required in the CVS
days, and the patch for FreeBSD-SA-09:15.ssl which has been
superseded with OpenSSL 0.9.8m's RFC5746 'TLS renegotiation
extension' support.

MFC after: 3 weeks

Merge OpenSSL 0.9.8k into head.

Approved by: re

This commit was generated by cvs2svn to compensate for changes in r162911,
which included commits to RCS files with non-trunk default branches.

Vendor import of OpenSSL 0.9.8d.

Vendor import of OpenSSL 0.9.8b

Vendor import of OpenSSL 0.9.7e.

Vendor import of OpenSSL release 0.9.7. This release includes
support for AES and OpenBSD's hardware crypto.

Import of OpenSSL 0.9.6f.

Import of OpenSSL 0.9.6e.

Initial import of OpenSSL 0.9.6a

Import of OpenSSL 0.9.6-STABLE snapshot dated 2001-02-10

Initial import of OpenSSL 0.9.6

Initial import of OpenSSL 0.9.5a

Initial import of OpenSSL 0.9.4, sans IDEA and RSA code for patent
infringement reasons.