Commits · dd016b05706fd7f24b7f5582209103ef3643d8e5 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL

05 Jan, 2012 1 commit
- Fix for builds without DTLS support. · dd016b05
  Bodo Möller authored Jan 05, 2012
```
Submitted by: Brian Carlstrom
```
  dd016b05
04 Jan, 2012 12 commits
- update for next version · 24478846
  Dr. Stephen Henson authored Jan 04, 2012
  
  24478846
- update FAQ · a9580833
  Dr. Stephen Henson authored Jan 04, 2012
  
  OpenSSL_0_9_8s
  
  a9580833
- prepare for 0.9.8s release · b3cebd5a
  Dr. Stephen Henson authored Jan 04, 2012
  
  b3cebd5a
- update NEWS · 7b775145
  Dr. Stephen Henson authored Jan 04, 2012
  
  7b775145
- make update · 7183aa6b
  Dr. Stephen Henson authored Jan 04, 2012
  
  7183aa6b
- Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>, Michael Tuexen <tuexen@fh-muenster.de> · eebefe35
  Dr. Stephen Henson authored Jan 04, 2012
```
Reviewed by: steve

Fix for DTLS plaintext recovery attack discovered by Nadhem Alfardan and
Kenny Paterson.
```
  eebefe35
- Fix double free in policy check code (CVE-2011-4109) · 1db0bbdc
  Dr. Stephen Henson authored Jan 04, 2012
  
  1db0bbdc
- Clear bytes used for block padding of SSL 3.0 records. (CVE-2011-4576) · e643112d
  Dr. Stephen Henson authored Jan 04, 2012
  
  e643112d
- Only allow one SGC handshake restart for SSL/TLS. (CVE-2011-4619) · 21c4b259
  Dr. Stephen Henson authored Jan 04, 2012
  
  21c4b259
- stop warning · 41cf2c3a
  Dr. Stephen Henson authored Jan 04, 2012
  
  41cf2c3a
- Prevent malformed RFC3779 data triggering an assertion failure (CVE-2011-4577) · 0e3a930f
  Dr. Stephen Henson authored Jan 04, 2012
  
  0e3a930f
- Submitted by: Adam Langley <agl@chromium.org> · 0c214e01
  Dr. Stephen Henson authored Jan 04, 2012
```
Reviewed by: steve

Fix memory leaks.
```
  0c214e01
26 Dec, 2011 1 commit

PR: 2326 · 6c61cfbe

Dr. Stephen Henson authored Dec 26, 2011

Submitted by: Tianjie Mao <tjmao@tjmao.net>
Reviewed by: steve

Fix incorrect comma expressions and goto f_err as alert has been set.

6c61cfbe

09 Dec, 2011 1 commit
- x86-mont.pl: fix bug in integer-only squaring path [from HEAD]. · 2ee77d36
  Andy Polyakov authored Dec 09, 2011
```
PR: 2648
```
  2ee77d36
06 Dec, 2011 1 commit
- The default CN prompt message can be confusing when often the CN needs to · 24f441e0
  Dr. Stephen Henson authored Dec 06, 2011
```
 be the server FQDN: change it.
[Reported by PSW Group]
```
  24f441e0
02 Dec, 2011 3 commits
- Resolve a stack set-up race condition (if the list of compression · 740da44f
  Bodo Möller authored Dec 02, 2011
```
methods isn't presorted, it will be sorted on first read).

Submitted by: Adam Langley
```
  740da44f
- Fix ecdsatest.c. · 72033fde
  Bodo Möller authored Dec 02, 2011
```
Submitted by: Emilia Kasper
```
  72033fde
- Fix BIO_f_buffer(). · 9adf3fcf
  Bodo Möller authored Dec 02, 2011
```
Submitted by: Adam Langley
Reviewed by: Bodo Moeller
```
  9adf3fcf
05 Nov, 2011 1 commit
- ppc.pl: fix bug in bn_mul_comba4 [from HEAD]. · 65f74566
  Andy Polyakov authored Nov 05, 2011
```
PR: 2636
Submitted by: Charles Bryant
```
  65f74566
27 Oct, 2011 1 commit

PR: 2628 · 8794569a

Dr. Stephen Henson authored Oct 27, 2011

Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve

Send alert instead of assertion failure for incorrectly formatted DTLS
fragments.

8794569a

26 Oct, 2011 1 commit

PR: 2632 · f8731bc2

Dr. Stephen Henson authored Oct 26, 2011

Submitted by: emmanuel.azencot@bull.net
Reviewed by: steve

Return -1 immediately if not affine coordinates as BN_CTX has not been
set up.

f8731bc2

19 Oct, 2011 2 commits
- BN_BLINDING multi-threading fix. · 195d6bf7
  Bodo Möller authored Oct 19, 2011
```
Submitted by: Emilia Kasper (Google)
```
  195d6bf7
- Oops: this change (http://cvs.openssl.org/chngview?cn=21503) · dacd94b9
  Bodo Möller authored Oct 19, 2011
```
wasn't right for 0.9.8-stable (it's actually a fix for
http://cvs.openssl.org/chngview?cn=14494, which introduced
SSL_CTRL_SET_MAX_SEND_FRAGMENT).
```
  dacd94b9
13 Oct, 2011 2 commits
- Clarify warning · 8070cb5f
  Bodo Möller authored Oct 13, 2011
  
  8070cb5f
- In ssl3_clear, preserve s3->init_extra along with s3->rbuf. · f7d514f4
  Bodo Möller authored Oct 13, 2011
```
Submitted by: Bob Buckholz <bbuckholz@google.com>
```
  f7d514f4
09 Oct, 2011 1 commit

PR: 2482 · 6d50bce7

Dr. Stephen Henson authored Oct 09, 2011

Submitted by: Rob Austein <sra@hactrn.net>
Reviewed by: steve

Don't allow inverted ranges in RFC3779 code, discovered by Frank Ellermann.

6d50bce7

26 Sep, 2011 1 commit
- fix signed/unsigned warning · 3cf0a38b
  Dr. Stephen Henson authored Sep 26, 2011
  
  3cf0a38b
23 Sep, 2011 4 commits

use keyformat for -x509toreq, don't hard code PEM · 91a1d08a
Dr. Stephen Henson authored Sep 23, 2011

91a1d08a

PR: 2606 · 85e77688

Dr. Stephen Henson authored Sep 23, 2011

Submitted by: Christoph Viethen <cv@kawo2.rwth-aachen.de>
Reviewed by: steve

Handle timezones correctly in UTCTime.

85e77688

PR: 2602 · fc401532

Dr. Stephen Henson authored Sep 23, 2011

Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve

Fix DTLS bug which prevents manual MTU setting

fc401532

PR: 2347 · 6ec9ff83

Dr. Stephen Henson authored Sep 23, 2011

Submitted by: Tomas Mraz <tmraz@redhat.com>
Reviewed by: steve

Fix usage message.

6ec9ff83

05 Sep, 2011 3 commits
- (EC)DH memory handling fixes. · db453084
  Bodo Möller authored Sep 05, 2011
```
Submitted by: Adam Langley
```
  db453084
- Fix memory leak on bad inputs. · 1c7c69a8
  Bodo Möller authored Sep 05, 2011
  
  1c7c69a8
- Move OPENSSL_init declaration out of auto-generated code section · 24ad0610
  Bodo Möller authored Sep 05, 2011
```
(it is not auto-generated).
```
  24ad0610
02 Sep, 2011 1 commit

PR: 2576 · 92f96fa7

Dr. Stephen Henson authored Sep 02, 2011

Submitted by: Doug Goldstein <cardoe@gentoo.org>
Reviewed by: steve

Include header file stdlib.h which is needed on some platforms to get
getenv() declaration.

92f96fa7

01 Sep, 2011 4 commits

PR: 2340 · 0d1e3623

Dr. Stephen Henson authored Sep 01, 2011

Submitted by: "Mauro H. Leggieri" <mxmauro@caiman.com.ar>
Reviewed by: steve

Stop warnings if OPENSSL_NO_DGRAM is defined.

0d1e3623

make timing attack protection unconditional · a0bf2c86
Dr. Stephen Henson authored Sep 01, 2011

a0bf2c86

PR: 2573 · 6a662a45

Dr. Stephen Henson authored Sep 01, 2011

Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve

Fix DTLS buffering and decryption bug.

6a662a45

PR: 2588 · 24d0524f

Dr. Stephen Henson authored Sep 01, 2011

Submitted by: Thomas Jarosch <thomas.jarosch@intra2net.com>
Reviewed by: steve

Close file pointer.

24d0524f