cause a denial of service.  (CVE-2006-2940)
[Steve Henson, Bodo Moeller]

Fix ASN.1 parsing of certain invalid structures that can result
in a denial of service.  (CVE-2006-2937)  [Steve Henson]

Fix buffer overflow in SSL_get_shared_ciphers() function.
(CVE-2006-3738) [Tavis Ormandy and Will Drewry, Google Security Team]

Fix SSL client code which could crash if connecting to a
malicious SSLv2 server.  (CVE-2006-4343)
[Tavis Ormandy and Will Drewry, Google Security Team]

PR: 1377

PR: 1390

PR: 1382

[Problem pointed out by Adam Young <adamy (at) acm.org>]

ciphersuite as well

Colin Percival (this would have caused more problems than solved,
and isn't really necessary anyway)

(CVE-2006-4339)

Submitted by:  Ben Laurie, Google Security Team
Reviewed by: bmoeller, mjc, shenson

Submitted by: NTT

large FD: it's non-blocking mode anyway

[from HEAD].

unless specifically requested)

in the default cipher string.

the 0.9.8 branch!