Path to this page:
Subject: CVS commit: [pkgsrc-2012Q1] pkgsrc/security/openssl
From: Matthias Scheler
Date: 2012-05-11 16:56:49
Message id: 20120511145650.05A26175DD@cvs.netbsd.org
Log Message:
Pullup ticket #3782 - requested by taca
security/openssl: security update
Revisions pulled up:
- security/openssl/Makefile 1.167
- security/openssl/distinfo 1.89
---
Module Name: pkgsrc
Committed By: taca
Date: Fri May 11 13:27:27 UTC 2012
Modified Files:
pkgsrc/security/openssl: Makefile distinfo
Log Message:
Update openssl to 0.9.8x.
OpenSSL CHANGES
_______________
Changes between 0.9.8w and 0.9.8x [10 May 2012]
*) Sanity check record length before skipping explicit IV in DTLS
to fix DoS attack.
Thanks to Codenomicon for discovering this issue using Fuzz-o-Matic
fuzzing as a service testing platform.
(CVE-2012-2333)
[Steve Henson]
*) Initialise tkeylen properly when encrypting CMS messages.
Thanks to Solar Designer of Openwall for reporting this issue.
[Steve Henson]
Files: