Next | Query returned 437 messages, browsing 211 to 220 | Previous

History of commit frequency

CVS Commit History:


   2010-11-17 01:52:26 by Takahiro Kambe | Files touched by this commit (3)
Log message:
Update security/openssl package to 0.9.8p.

   OpenSSL version 0.9.8p released
   ===============================

   OpenSSL - The Open Source toolkit for SSL/TLS
   http://www.openssl.org/

   The OpenSSL project team is pleased to announce the release of
   version 0.9.8p of our open source toolkit for SSL/TLS. This new
   OpenSSL version is a security and bugfix release which addresses
   CVE-2010-3864. For a complete list of changes,
   please see http://www.openssl.org/source/exp/CHANGES.
   2010-10-08 22:04:58 by Tim Zingelman | Files touched by this commit (3)
Log message:
Fix for CVE-2010-2939
   2010-08-18 13:20:56 by Thomas Klausner | Files touched by this commit (2)
Log message:
Recognize 64 bit DragonFly systems correctly. From Damian Lubosch
in PR 43774.
   2010-08-01 07:24:00 by OBATA Akio | Files touched by this commit (1)
Log message:
ABI is not defined on old Darwin.
   2010-07-04 18:33:25 by OBATA Akio | Files touched by this commit (1)
Log message:
Add builtin OpenSSL support for Haiku.
   2010-06-02 15:30:11 by Takahiro Kambe | Files touched by this commit (2)
Log message:
Update security/openssl package to 0.9.8o.

 OpenSSL CHANGES
 _______________

 Changes between 0.9.8n and 0.9.8o [01 Jun 2010]

  *) Correct a typo in the CMS ASN1 module which can result in invalid memory
     access or freeing data twice (CVE-2010-0742)
     [Steve Henson, Ronald Moesbergen <intercommit@gmail.com>]

  *) Add SHA2 algorithms to SSL_library_init(). SHA2 is becoming far more
     common in certificates and some applications which only call
     SSL_library_init and not OpenSSL_add_all_algorithms() will fail.
     [Steve Henson]

  *) VMS fixes:
     Reduce copying into .apps and .test in makevms.com
     Don't try to use blank CA certificate in CA.com
     Allow use of C files from original directories in maketests.com
     [Steven M. Schweda" <sms@antinode.info>]
   2010-05-08 08:33:41 by Adam Ciarcinski | Files touched by this commit (1)
Log message:
Set correct architecture on Darwin
   2010-04-12 16:19:17 by Takahiro Kambe | Files touched by this commit (3) | Package updated
Log message:
Update openssl package from 0.9.8m to 0.9.8n.

 Changes between 0.9.8m and 0.9.8n [24 Mar 2010]

  *) When rejecting SSL/TLS records due to an incorrect version number, never
     update s->server with a new major version number.  As of
     - OpenSSL 0.9.8m if 'short' is a 16-bit type,
     - OpenSSL 0.9.8f if 'short' is longer than 16 bits,
     the previous behavior could result in a read attempt at NULL when
     receiving specific incorrect SSL/TLS records once record payload
     protection is active.  (CVE-2010-0740)
     [Bodo Moeller, Adam Langley <agl@chromium.org>]

  *) Fix for CVE-2010-0433 where some kerberos enabled versions of OpenSSL
     could be crashed if the relevant tables were not present (e.g. chrooted).
     [Tomas Hoger <thoger@redhat.com>]
   2010-03-26 01:20:49 by Takahiro Kambe | Files touched by this commit (3)
Log message:
Add a patch for Fix for CVE-2010-0740, DoS problem.

http://www.openssl.org/news/secadv_20100324.txt

Bump PKGREVISION.
   2010-03-01 09:15:40 by Takahiro Kambe | Files touched by this commit (2)
Log message:
Fix broken PLIST.
(I wonder why "make print-PLIST" generated wrong result before...")

Bump PKGREVISION.

Next | Query returned 437 messages, browsing 211 to 220 | Previous