Commit 957ebe98 authored by Bodo Möller's avatar Bodo Möller
Browse files

OCSP stapling fix (OpenSSL 0.9.8r/1.0.0d)

Submitted by: Neel Mehta, Adam Langley, Bodo Moeller
parent 9d09fc84
Loading
Loading
Loading
Loading
+4 −1
Original line number Diff line number Diff line
@@ -2,7 +2,10 @@
 OpenSSL CHANGES
 _______________

 Changes between 0.9.8q and 0.9.8r [xx XXX xxxx]
 Changes between 0.9.8q and 0.9.8r [8 Feb 2011]

  *) Fix parsing of OCSP stapling ClientHello extension.  CVE-2011-0014
     [Neel Mehta, Adam Langley, Bodo Moeller (Google)]

  *) Fix bug in string printing code: if *any* escaping is enabled we must
     escape the escape character (backslash) or the resulting string is
+1 −1
Original line number Diff line number Diff line
@@ -82,7 +82,7 @@ OpenSSL - Frequently Asked Questions
* Which is the current version of OpenSSL?

The current version is available from <URL: http://www.openssl.org>.
OpenSSL 1.0.0c was released on Dec 2nd, 2010.
OpenSSL 1.0.0d was released on Feb 8th, 2011.

In addition to the current stable release, you can also access daily
snapshots of the OpenSSL development version at <URL:
+1 −1
Original line number Diff line number Diff line
@@ -12,7 +12,7 @@
  ---------------

/* ====================================================================
 * Copyright (c) 1998-2008 The OpenSSL Project.  All rights reserved.
 * Copyright (c) 1998-2011 The OpenSSL Project.  All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
+4 −0
Original line number Diff line number Diff line
@@ -5,6 +5,10 @@
  This file gives a brief overview of the major changes between each OpenSSL
  release. For more details please read the CHANGES file.

  Major changes between OpenSSL 0.9.8q and OpenSSL 0.9.8r:

      o Fix for security issue CVE-2011-0014

  Major changes between OpenSSL 0.9.8p and OpenSSL 0.9.8q:

      o Fix for security issue CVE-2010-4180
+2 −2
Original line number Diff line number Diff line

 OpenSSL 0.9.8r-dev
 OpenSSL 0.9.8r

 Copyright (c) 1998-2009 The OpenSSL Project
 Copyright (c) 1998-2011 The OpenSSL Project
 Copyright (c) 1995-1998 Eric A. Young, Tim J. Hudson
 All rights reserved.

Loading