diff options
| author | tedu <> | 2015-03-19 14:02:30 +0000 |
|---|---|---|
| committer | tedu <> | 2015-03-19 14:02:30 +0000 |
| commit | 0c64b73d516a83e3b8fcec4d3cfe069fc26e3a9f (patch) | |
| tree | 2c65397650d4960ce2013813a11bf290ce1fecbe /src/lib/libcrypto/stack/stack.c | |
| parent | 42143ecdee76b07d30e60289dfff61b5d249ceb4 (diff) | |
| download | openbsd-0c64b73d516a83e3b8fcec4d3cfe069fc26e3a9f.tar.gz openbsd-0c64b73d516a83e3b8fcec4d3cfe069fc26e3a9f.tar.bz2 openbsd-0c64b73d516a83e3b8fcec4d3cfe069fc26e3a9f.zip | |
Fix several crash causing defects from OpenSSL.
These include:
CVE-2015-0209 - Use After Free following d2i_ECPrivatekey error
CVE-2015-0286 - Segmentation fault in ASN1_TYPE_cmp
CVE-2015-0287 - ASN.1 structure reuse memory corruption
CVE-2015-0288 - X509_to_X509_REQ NULL pointer deref
CVE-2015-0289 - PKCS7 NULL pointer dereferences
Several other issues did not apply or were already fixed.
Refer to https://www.openssl.org/news/secadv_20150319.txt
joint work with beck, doug, guenther, jsing, miod
Diffstat (limited to 'src/lib/libcrypto/stack/stack.c')
0 files changed, 0 insertions, 0 deletions