openssl, branch OpenSSL_0_9_8v TLS/SSL and crypto library. http://git.bktus.com/gpgfrontend/openssl/atom?h=OpenSSL_0_9_8v 2012-04-19T12:05:18Z update FAQ 2012-04-19T12:05:18Z Dr. Stephen Henson steve@openssl.org 2012-04-19T12:05:18Z urn:sha1:fef9e0793071cc0e6f2fd5942760e206d354adad prepare for 0.9.8v release 2012-04-19T11:39:03Z Dr. Stephen Henson steve@openssl.org 2012-04-19T11:39:03Z urn:sha1:8ab27e6ef77da1d35db19597300fe4a2b73c1002 update NEWS 2012-04-19T11:37:17Z Dr. Stephen Henson steve@openssl.org 2012-04-19T11:37:17Z urn:sha1:64150555903882eab67521f7fdcbc5d6a37c03e1 Check for potentially exploitable overflows in asn1_d2i_read_bio 2012-04-19T11:36:09Z Dr. Stephen Henson steve@openssl.org 2012-04-19T11:36:09Z urn:sha1:556e27b14f652fa39daa1148035e22b62525df15 BUF_mem_grow and BUF_mem_grow_clean. Refuse attempts to shrink buffer in CRYPTO_realloc_clean. Thanks to Tavis Ormandy, Google Security Team, for discovering this issue and to Adam Langley <agl@chromium.org> for fixing it. (CVE-2012-2110) use /fixed argument when linking FIPS targets to disable address space layout randomization 2012-04-15T16:48:34Z Dr. Stephen Henson steve@openssl.org 2012-04-15T16:48:34Z urn:sha1:af0c009d70ff28f6e90cc37da4b2987d5cbbbadb PR: 2778(part) 2012-03-31T18:02:23Z Dr. Stephen Henson steve@openssl.org 2012-03-31T18:02:23Z urn:sha1:0b1cf4a139b81727e19bb0c25775049ec787c444 Submitted by: John Fitzgibbon <john_fitzgibbon@yahoo.com> Time is always encoded as 4 bytes, not sizeof(Time). Always use SSLv23_{client,server}_method in s_client.c and s_server.c, 2012-03-18T18:18:30Z Dr. Stephen Henson steve@openssl.org 2012-03-18T18:18:30Z urn:sha1:a9101cdcaa77ef4a7301b7a90aee32459257f02b the old code came from SSLeay days before TLS was even supported. prepare for next version 2012-03-12T16:35:13Z Dr. Stephen Henson steve@openssl.org 2012-03-12T16:35:13Z urn:sha1:e351e2a7cf9526e3c2c7cdaa15103a90e9733d73 corrected fix to PR#2711 and also cover mime_param_cmp 2012-03-12T15:25:53Z Dr. Stephen Henson steve@openssl.org 2012-03-12T15:25:53Z urn:sha1:215276243d74b89fc8c28509d16dd2a107c65946 correct FAQ 2012-03-12T15:01:44Z Dr. Stephen Henson steve@openssl.org 2012-03-12T15:01:44Z urn:sha1:ddb7832852ed93a4e21e391fa2e1d1deb8af7049