openssl, branch OpenSSL_0_9_8d

Prepare for 0.9.8d release

2006-09-28T11:32:42Z

Introduce limits to prevent malicious keys being able to

2006-09-28T11:29:03Z

cause a denial of service. (CVE-2006-2940) [Steve Henson, Bodo Moeller] Fix ASN.1 parsing of certain invalid structures that can result in a denial of service. (CVE-2006-2937) [Steve Henson] Fix buffer overflow in SSL_get_shared_ciphers() function. (CVE-2006-3738) [Tavis Ormandy and Will Drewry, Google Security Team] Fix SSL client code which could crash if connecting to a malicious SSLv2 server. (CVE-2006-4343) [Tavis Ormandy and Will Drewry, Google Security Team]

Update from HEAD.

2006-09-23T17:30:25Z

Fix from HEAD.

2006-09-22T17:14:44Z

Fix from HEAD.

2006-09-22T17:07:40Z

Fix but in apps/pkcs12.c

2006-09-22T00:28:37Z

PR: 1377

Build error on non-unix [from HEAD].

2006-09-18T19:51:45Z

PR: 1390

Race condition in ms/uplink.c [from HEAD].

2006-09-18T19:44:23Z

PR: 1382

Ensure that the addition mods[i]+delta cannot overflow in probable_prime().

2006-09-18T14:01:39Z

[Problem pointed out by Adam Young ]

Update

2006-09-12T14:42:09Z