openssl, branch OpenSSL_0_9_8za TLS/SSL and crypto library. http://git.bktus.com/gpgfrontend/openssl/atom?h=OpenSSL_0_9_8za 2014-06-05T09:38:57Z Prepare for 0.9.8za release 2014-06-05T09:38:57Z Dr. Stephen Henson steve@openssl.org 2014-06-05T09:38:57Z urn:sha1:047ec5d196bb7d41491e95b554f11154e27a931a Update CHANGES and NEWS 2014-06-05T08:08:27Z Dr. Stephen Henson steve@openssl.org 2014-06-05T08:08:27Z urn:sha1:bb598893057e4b5fd789b36005b31dfd57011aa8 Fix CVE-2014-3470 2014-06-03T15:30:23Z Dr. Stephen Henson steve@openssl.org 2014-05-29T14:00:05Z urn:sha1:141a5482fdd1944804cc342c1c443362eed8501b Check session_cert is not NULL before dereferencing it. Fix CVE-2014-0221 2014-06-03T15:30:23Z Dr. Stephen Henson steve@openssl.org 2014-05-16T12:00:45Z urn:sha1:de2422affbe24262496f477edeb1c04017907eb4 Unnecessary recursion when receiving a DTLS hello request can be used to crash a DTLS client. Fixed by handling DTLS hello request without recursion. Thanks to Imre Rad (Search-Lab Ltd.) for discovering this issue. Additional CVE-2014-0224 protection. 2014-06-03T15:30:23Z Dr. Stephen Henson steve@openssl.org 2014-05-16T11:55:16Z urn:sha1:897169fdf06bf75b4d0c503d61abb45656dd90a6 Return a fatal error if an attempt is made to use a zero length master secret. Fix for CVE-2014-0224 2014-06-03T15:30:23Z Dr. Stephen Henson steve@openssl.org 2014-05-16T11:49:48Z urn:sha1:410a49a4fa1d2a1a9775ee29f9e40cbbda79c149 Only accept change cipher spec when it is expected instead of at any time. This prevents premature setting of session keys before the master secret is determined which an attacker could use as a MITM attack. Thanks to KIKUCHI Masashi (Lepidum Co. Ltd.) for reporting this issue and providing the initial fix this patch is based on. Fix for CVE-2014-0195 2014-06-03T15:30:23Z Dr. Stephen Henson steve@openssl.org 2014-05-13T17:48:31Z urn:sha1:82ba68c42d6a9cf245afa489471005b2a0377c10 A buffer overrun attack can be triggered by sending invalid DTLS fragments to an OpenSSL DTLS client or server. This is potentially exploitable to run arbitrary code on a vulnerable client or server. Fixed by adding consistency check for DTLS fragments. Thanks to Jüri Aedla for reporting this issue. Free up s->d1->buffered_app_data.q properly. 2014-06-02T13:40:45Z zhu qun-ying qunying@yahoo.com 2014-06-02T13:38:52Z urn:sha1:4b258e73ae0da0f1a7ff3eb9840b6978711c2400 PR#3286 (cherry picked from commit 71e95000afb2227fe5cac1c79ae884338bcd8d0b) ecdsa.pod: typo. 2014-06-02T12:59:53Z Andy Polyakov appro@openssl.org 2012-01-11T21:42:20Z urn:sha1:6ac2f678828dba586fdd63f67f922b3b643d06c8 PR: 2678 Submitted by: Annie Yousar (cherry picked from commit d572544a2cccc9dad7afcef24de11232e5506c99) Typo: set i to -1 before goto. 2014-06-02T11:28:50Z Sami Farin hvtaifwkbgefbaei@gmail.com 2014-06-02T11:24:19Z urn:sha1:bea1d1cbd8d272d3ca3f0067c8467e2b416a2ed0 PR#3302 (cherry picked from commit 9717f01951f976f76dd40a38d9fc7307057fa4c4)