openssl, branch OpenSSL_0_9_7kTLS/SSL and crypto library.http://git.bktus.com/gpgfrontend/openssl/atom?h=OpenSSL_0_9_7k2006-09-05T08:34:07ZPrepare 0.9.7k release2006-09-05T08:34:07ZMark J. Coxmark@openssl.org2006-09-05T08:34:07Zurn:sha1:975a7a483f8ea09c7b41b4246aef421c670c4414Avoid PKCS #1 v1.5 signature attack discovered by Daniel Bleichenbacher2006-09-05T08:24:14ZMark J. Coxmark@openssl.org2006-09-05T08:24:14Zurn:sha1:ffa0407233f88a6592828cf668d80f8d9c1242d8
(CVE-2006-4339) [Ben Laurie and Google Security Team]
Submitted by: Ben Laurie, Google Security Team
Reviewed by: bmoeller, mjc, shenson
Update from HEAD.2006-08-31T20:11:30ZDr. Stephen Hensonsteve@openssl.org2006-08-31T20:11:30Zurn:sha1:6f414aef0e58826011a04d9a2b66f4ae5de4327eFix from HEAD. Except we can't stream multipart/signed in 0.9.7 so that case2006-07-13T20:36:51ZDr. Stephen Hensonsteve@openssl.org2006-07-13T20:36:51Zurn:sha1:45e33ebeab1675fc1b1dec90f2b931433ad819c9
still rewinds the stream.
Fix from HEAD.2006-07-09T12:05:10ZDr. Stephen Hensonsteve@openssl.org2006-07-09T12:05:10Zurn:sha1:0f562e2a2c273c1ca12f1c08f4051efd713eb349documentation for "HIGH" vs. "MEDIUM" was not up-to-date2006-06-30T22:03:18ZBodo Möllerbodo@openssl.org2006-06-30T22:03:18Zurn:sha1:ae2684851f7c0b6d2d31e4ddf1a3dd18119015a0use <poll.h> as by Single Unix Specification2006-06-30T08:15:13ZBodo Möllerbodo@openssl.org2006-06-30T08:15:13Zurn:sha1:feee55c65dca5fae1c9d85b56470258a936827d4always read if we can't use select because of a too large FD2006-06-28T14:49:39ZBodo Möllerbodo@openssl.org2006-06-28T14:49:39Zurn:sha1:81edd235b143c69a1a7a05149fc94647ab25c89d
(it's non-blocking mode anyway)
Mitigate the hazard of cache-collision timing attack on last round2006-06-28T08:57:22ZAndy Polyakovappro@openssl.org2006-06-28T08:57:22Zurn:sha1:23c13189e9b07def2e0203922adb21f31c9ea125
[from HEAD].
Use poll() when possible to gather Unix randomness entropy2006-06-27T06:31:48ZRichard Levittelevitte@openssl.org2006-06-27T06:31:48Zurn:sha1:bdd00f8c8a461eab41c2c40a805caba942794074