Thanks to Antonio Martin, Enterprise Secure Access Research and
Development, Cisco Systems, Inc. for discovering this bug and
preparing a fix. (CVE-2012-0050)

PR: 2613
Submitted by: Leena Heino

PR: 2613
Submitted by: Leena Heino

are passed zero-extended, not sign-extended [from HEAD].
PR: 2682

PR: 2683
Submitted by: Annie Yousar

PR: 2681
Submitted by: Annie Yousar

PR: 2678
Submitted by: Annie Yousar

PR: 2675
Submitted by: Annie Yousar

PR: 2685

Submitted by: Arpadffy Zoltan <Zoltan.Arpadffy@scientificgames.se>

OpenVMS fixes.

(While the 1.0.0f CHANGES entry on VOS PRNG seeding was missing
in the 1.0.1 branch, the actual code is here already.)

Submitted by: Brian Carlstrom

Submitted by: steve

Update maximum message size for certifiate verify messages to support
4096 bit RSA keys again as TLS v1.2 messages is two bytes longer.

Reviewed by: steve

Send fatal alert if heartbeat extension has an illegal value.

Reviewed by: steve

Fix for DTLS plaintext recovery attack discovered by Nadhem Alfardan and
Kenny Paterson.