openssl, branch OpenSSL_0_9_8u TLS/SSL and crypto library. http://git.bktus.com/gpgfrontend/openssl/atom?h=OpenSSL_0_9_8u 2012-03-12T15:25:53Z corrected fix to PR#2711 and also cover mime_param_cmp 2012-03-12T15:25:53Z Dr. Stephen Henson steve@openssl.org 2012-03-12T15:25:53Z urn:sha1:215276243d74b89fc8c28509d16dd2a107c65946 correct FAQ 2012-03-12T15:01:44Z Dr. Stephen Henson steve@openssl.org 2012-03-12T15:01:44Z urn:sha1:ddb7832852ed93a4e21e391fa2e1d1deb8af7049 prepare for release 2012-03-12T14:53:14Z Dr. Stephen Henson steve@openssl.org 2012-03-12T14:53:14Z urn:sha1:2fad41d15539ac41e5421b3252004afc53648cde update NEWS 2012-03-12T14:52:14Z Dr. Stephen Henson steve@openssl.org 2012-03-12T14:52:14Z urn:sha1:b9c3d9168fb13c66bc3b665a799a1f008c26053f Fix for CMS/PKCS7 MMA. If RSA decryption fails use a random key and 2012-03-12T14:51:45Z Dr. Stephen Henson steve@openssl.org 2012-03-12T14:51:45Z urn:sha1:4f2fc3c2ddf6289daf9fc1d57e48a0f6ec4e772a continue with symmetric decryption process to avoid leaking timing information to an attacker. Thanks to Ivan Nestlerode <inestlerode@us.ibm.com> for discovering this issue. (CVE-2012-0884) fix error code 2012-03-12T14:50:55Z Dr. Stephen Henson steve@openssl.org 2012-03-12T14:50:55Z urn:sha1:48819f4d545a16fbfd45a0eb22fb93e08a3a6096 manually patch missing part of PR#2756 2012-03-12T12:46:52Z Dr. Stephen Henson steve@openssl.org 2012-03-12T12:46:52Z urn:sha1:b0cbdd3ebab2df6bd18f3df3150c7bccc0fc8629 PR: 2756 2012-03-09T15:51:56Z Dr. Stephen Henson steve@openssl.org 2012-03-09T15:51:56Z urn:sha1:50161075506aedcc57fc7b058d89fefc72481374 Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de> Fix DTLS timeout handling. check return value of BIO_write in PKCS7_decrypt 2012-03-08T14:01:44Z Dr. Stephen Henson steve@openssl.org 2012-03-08T14:01:44Z urn:sha1:25d5d15fd5847acf7eb46cda8d9e5aa2489dd740 PR: 2755 2012-03-07T15:14:16Z Dr. Stephen Henson steve@openssl.org 2012-03-07T15:14:16Z urn:sha1:725713f74abce64cf122d33a3de2f7490a6b482b Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de> Reduce MTU after failed transmissions. [0.9.8 version of patch]