openssl, branch OpenSSL_0_9_8s TLS/SSL and crypto library. http://git.bktus.com/gpgfrontend/openssl/atom?h=OpenSSL_0_9_8s 2012-01-04T19:23:07Z update FAQ 2012-01-04T19:23:07Z Dr. Stephen Henson steve@openssl.org 2012-01-04T19:23:07Z urn:sha1:a95808334e640bd112b6ded097407beb7e3923ef prepare for 0.9.8s release 2012-01-04T19:20:49Z Dr. Stephen Henson steve@openssl.org 2012-01-04T19:20:49Z urn:sha1:b3cebd5acfe28921bb00292440d121025bafba48 update NEWS 2012-01-04T19:16:11Z Dr. Stephen Henson steve@openssl.org 2012-01-04T19:16:11Z urn:sha1:7b775145e471402e460c7258a30e2a2d53165b51 make update 2012-01-04T19:12:39Z Dr. Stephen Henson steve@openssl.org 2012-01-04T19:12:39Z urn:sha1:7183aa6b9db22f161a93ca539d0e581f4aae742c Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>, Michael Tuexen <tuexen@fh-muenster.de> 2012-01-04T19:10:16Z Dr. Stephen Henson steve@openssl.org 2012-01-04T19:10:16Z urn:sha1:eebefe35e768ed73aa443fe84bf8db58960fac13 Reviewed by: steve Fix for DTLS plaintext recovery attack discovered by Nadhem Alfardan and Kenny Paterson. Fix double free in policy check code (CVE-2011-4109) 2012-01-04T19:00:28Z Dr. Stephen Henson steve@openssl.org 2012-01-04T19:00:28Z urn:sha1:1db0bbdc76cfd715b60a155220328c15409cf1aa Clear bytes used for block padding of SSL 3.0 records. (CVE-2011-4576) 2012-01-04T18:54:17Z Dr. Stephen Henson steve@openssl.org 2012-01-04T18:54:17Z urn:sha1:e643112dd8166ec64885d22b147ff17b206941b8 Only allow one SGC handshake restart for SSL/TLS. (CVE-2011-4619) 2012-01-04T18:52:18Z Dr. Stephen Henson steve@openssl.org 2012-01-04T18:52:18Z urn:sha1:21c4b259598efe3ea8c834c1568e8b762be120c4 stop warning 2012-01-04T18:45:18Z Dr. Stephen Henson steve@openssl.org 2012-01-04T18:45:18Z urn:sha1:41cf2c3aefcfb892896c3b5be3a56474d46dde14 Prevent malformed RFC3779 data triggering an assertion failure (CVE-2011-4577) 2012-01-04T18:44:20Z Dr. Stephen Henson steve@openssl.org 2012-01-04T18:44:20Z urn:sha1:0e3a930fb402cf9785c2acbddf015574d30cb6b5