openbsd/src/lib/libssl, branch OPENBSD_4_6 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_4_6 2010-03-31T12:17:29+00:00 Security fix for CVE-2010-0740 2010-03-31T12:17:29+00:00 jasper 2010-03-31T12:17:29+00:00 urn:sha1:48b786510a2e23cb712e96454a283cc7216d9070 "In TLS connections, certain incorrectly formatted records can cause an OpenSSL client or server to crash due to a read attempt at NULL." http://openssl.org/news/secadv_20100324.txt ok djm@ sthen@ MFC, original commit by djm@: 2010-03-12T13:26:08+00:00 jasper 2010-03-12T13:26:08+00:00 urn:sha1:e1d514d70c111ea04798fa6e97072ea06e0ae866 --------------------------- cherrypick patch from OpenSSL 0.9.8m: *) Always check bn_wexpend() return values for failure. (CVE-2009-3245) [Martin Olsson, Neel Mehta] --------------------------- ok sthen@ Pull Ben Lauries blind prefix injection fix for CVE-2009-3555 from 2009-11-17T14:34:56+00:00 sthen 2009-11-17T14:34:56+00:00 urn:sha1:de2fb3aaad9c4aa5d5d324196d0e51de75946223 openssl 0.9.8l. As suggested by markus@, for -stable the header change is being restricted to a private file, so the minor version is not cranked here. Discussed with markus, djm, deraadt. This commit was manufactured by cvs2git to create branch 'OPENBSD_4_6'. 2009-06-25T14:33:52+00:00 cvs2svn admin@example.com 2009-06-25T14:33:52+00:00 urn:sha1:dff7a49e263b7f35da41af95b2c037ed7cf6f71a add ipsCA as a valid authority. 2009-05-25T21:07:38+00:00 dlg 2009-05-25T21:07:38+00:00 urn:sha1:38e70c5ee4aec1ddb9faef430ea6afd40731045d ok beck@ resync libssl/libcrypto pod documentation - quite a few more pages and 2009-04-10T06:04:49+00:00 djm 2009-04-10T06:04:49+00:00 urn:sha1:ddce03a424f04646910a56a719d278d7b5cb7062 MLINKS; feedback and ok jmc@ crankus majoris 2009-04-06T06:34:22+00:00 djm 2009-04-06T06:34:22+00:00 urn:sha1:399f560f3677e40588e2e56f3bde074ad6bd2dfb resolve conflicts 2009-04-06T06:33:20+00:00 djm 2009-04-06T06:33:20+00:00 urn:sha1:02266ad76553362863ec35a28c86ea7a4f5acdf9 This commit was generated by cvs2git to track changes on a CVS vendor 2009-04-06T06:30:08+00:00 djm 2009-04-06T06:30:08+00:00 urn:sha1:1dff14a44bd5019233a56816ba48f43b19cac92c branch. import of OpenSSL 0.9.8k 2009-04-06T06:30:08+00:00 djm 2009-04-06T06:30:08+00:00 urn:sha1:40d5d67842948fbf904eb73da8f09a2ebcd2e243