Path to this page:
Subject: CVS commit: pkgsrc/security/openssl
From: Takahiro Kambe
Date: 2010-01-15 05:55:30
Message id: 20100115045530.CA5BF175DD@cvs.netbsd.org
Log Message:
Update openssl package to 0.9.8l, fixing security problem.
Approved by agc@.
Changes between 0.9.8k and 0.9.8l [5 Nov 2009]
*) Disable renegotiation completely - this fixes a severe security
problem (CVE-2009-3555) at the cost of breaking all
renegotiation. Renegotiation can be re-enabled by setting
SSL3_FLAGS_ALLOW_UNSAFE_LEGACY_RENEGOTIATION in s3->flags at
run-time. This is really not recommended unless you know what
you're doing.
[Ben Laurie]
Files: