<feed xmlns='http://www.w3.org/2005/Atom'>
<title>openssl, branch OpenSSL_1_0_0-stable</title>
<subtitle>TLS/SSL and crypto library.</subtitle>
<id>http://git.bktus.com/gpgfrontend/openssl/atom?h=OpenSSL_1_0_0-stable</id>
<link rel='self' href='http://git.bktus.com/gpgfrontend/openssl/atom?h=OpenSSL_1_0_0-stable'/>
<link rel='alternate' type='text/html' href='http://git.bktus.com/gpgfrontend/openssl/'/>
<updated>2016-02-10T11:58:15Z</updated>
<entry>
<title>ms/uplink-x86.pl: make it work.</title>
<updated>2016-02-10T11:58:15Z</updated>
<author>
<name>Andy Polyakov</name>
<email>appro@openssl.org</email>
</author>
<published>2016-02-09T10:53:11Z</published>
<link rel='alternate' type='text/html' href='http://git.bktus.com/gpgfrontend/openssl/commit/?id=27007233db5d6f8b91ed474c4e09dd7014871cc6'/>
<id>urn:sha1:27007233db5d6f8b91ed474c4e09dd7014871cc6</id>
<content type='text'>
Reviewed-by: Richard Levitte &lt;levitte@openssl.org&gt;
(cherry picked from commit 740b2b9a6cf31b02916a4d18f868e8a95934c083)
</content>
</entry>
<entry>
<title>Prepare for 1.0.0u-dev</title>
<updated>2015-12-03T14:57:35Z</updated>
<author>
<name>Matt Caswell</name>
<email>matt@openssl.org</email>
</author>
<published>2015-12-03T14:57:35Z</published>
<link rel='alternate' type='text/html' href='http://git.bktus.com/gpgfrontend/openssl/commit/?id=f93aad4a56a1580a109785c2c922fe6b8baf7df9'/>
<id>urn:sha1:f93aad4a56a1580a109785c2c922fe6b8baf7df9</id>
<content type='text'>
Reviewed-by: Richard Levitte &lt;levitte@openssl.org&gt;
</content>
</entry>
<entry>
<title>Prepare for 1.0.0t release</title>
<updated>2015-12-03T14:56:22Z</updated>
<author>
<name>Matt Caswell</name>
<email>matt@openssl.org</email>
</author>
<published>2015-12-03T14:56:22Z</published>
<link rel='alternate' type='text/html' href='http://git.bktus.com/gpgfrontend/openssl/commit/?id=ce052c8437fb97cbc57f034fa94b5bcd749dbf52'/>
<id>urn:sha1:ce052c8437fb97cbc57f034fa94b5bcd749dbf52</id>
<content type='text'>
Reviewed-by: Richard Levitte &lt;levitte@openssl.org&gt;
</content>
</entry>
<entry>
<title>Update CHANGES and NEWS</title>
<updated>2015-12-02T23:36:05Z</updated>
<author>
<name>Matt Caswell</name>
<email>matt@openssl.org</email>
</author>
<published>2015-12-01T14:39:47Z</published>
<link rel='alternate' type='text/html' href='http://git.bktus.com/gpgfrontend/openssl/commit/?id=a402b2b7bcff8d6901aa771e49c45cf38836e7bf'/>
<id>urn:sha1:a402b2b7bcff8d6901aa771e49c45cf38836e7bf</id>
<content type='text'>
Update the CHANGES and NEWS files for the new release.

Reviewed-by: Rich Salz &lt;rsalz@openssl.org&gt;
</content>
</entry>
<entry>
<title>Free up passed ASN.1 structure if reused.</title>
<updated>2015-12-02T20:40:11Z</updated>
<author>
<name>Dr. Stephen Henson</name>
<email>steve@openssl.org</email>
</author>
<published>2015-02-23T12:57:50Z</published>
<link rel='alternate' type='text/html' href='http://git.bktus.com/gpgfrontend/openssl/commit/?id=d275dbe6eb7b720b8920f712eea79044f845a4bb'/>
<id>urn:sha1:d275dbe6eb7b720b8920f712eea79044f845a4bb</id>
<content type='text'>
Change the "reuse" behaviour in ASN1_item_d2i: if successful the old
structure is freed and a pointer to the new one used. If it is not
successful then the passed structure is untouched.

Exception made for primitive types so ssl_asn1.c still works.

Reviewed-by: Tim Hudson &lt;tjh@openssl.org&gt;
Reviewed-by: Emilia Käsper &lt;emilia@openssl.org&gt;

Conflicts:
	doc/crypto/d2i_X509.pod
</content>
</entry>
<entry>
<title>Fix leak with ASN.1 combine.</title>
<updated>2015-12-02T20:40:11Z</updated>
<author>
<name>Dr. Stephen Henson</name>
<email>steve@openssl.org</email>
</author>
<published>2015-11-10T19:03:07Z</published>
<link rel='alternate' type='text/html' href='http://git.bktus.com/gpgfrontend/openssl/commit/?id=cf432b3b1bd7caa22943b41b94ec2472ae497dc6'/>
<id>urn:sha1:cf432b3b1bd7caa22943b41b94ec2472ae497dc6</id>
<content type='text'>
When parsing a combined structure pass a flag to the decode routine
so on error a pointer to the parent structure is not zeroed as
this will leak any additional components in the parent.

This can leak memory in any application parsing PKCS#7 or CMS structures.

CVE-2015-3195.

Thanks to Adam Langley (Google/BoringSSL) for discovering this bug using
libFuzzer.

PR#4131

Reviewed-by: Richard Levitte &lt;levitte@openssl.org&gt;
</content>
</entry>
<entry>
<title>_BSD_SOURCE is deprecated, use _DEFAULT_SOURCE instead</title>
<updated>2015-12-02T17:50:00Z</updated>
<author>
<name>Richard Levitte</name>
<email>levitte@openssl.org</email>
</author>
<published>2015-12-02T17:18:03Z</published>
<link rel='alternate' type='text/html' href='http://git.bktus.com/gpgfrontend/openssl/commit/?id=015b17257855e31003eb29a70280764c3c822710'/>
<id>urn:sha1:015b17257855e31003eb29a70280764c3c822710</id>
<content type='text'>
The feature_test_macros(7) manual tells us that _BSD_SOURCE is
deprecated since glibc 2.20 and that the compiler will warn about it
being used, unless _DEFAULT_SOURCE is defined as well.

Reviewed-by: Rich Salz &lt;rsalz@openssl.org&gt;
(cherry picked from commit f9fd35248c9a3b1125d9ab82ffb19d62e86533ac)
</content>
</entry>
<entry>
<title>Fix uninitialised p error.</title>
<updated>2015-11-24T16:55:54Z</updated>
<author>
<name>Dr. Stephen Henson</name>
<email>steve@openssl.org</email>
</author>
<published>2015-11-24T16:37:52Z</published>
<link rel='alternate' type='text/html' href='http://git.bktus.com/gpgfrontend/openssl/commit/?id=295b9e8cbdd7dce3a0372a5990472f83acf3456b'/>
<id>urn:sha1:295b9e8cbdd7dce3a0372a5990472f83acf3456b</id>
<content type='text'>
Reviewed-by: Rich Salz &lt;rsalz@openssl.org&gt;
(cherry picked from commit 63eb10a07ee29a312e50a227f5b3a290b1ad22b4)
</content>
</entry>
<entry>
<title>Limit depth of ASN1 parse printing.</title>
<updated>2015-11-24T15:30:40Z</updated>
<author>
<name>Dr. Stephen Henson</name>
<email>steve@openssl.org</email>
</author>
<published>2015-09-03T13:27:19Z</published>
<link rel='alternate' type='text/html' href='http://git.bktus.com/gpgfrontend/openssl/commit/?id=275502eb41dbfc02910e48f6e55e65ea163854b9'/>
<id>urn:sha1:275502eb41dbfc02910e48f6e55e65ea163854b9</id>
<content type='text'>
Thanks to Guido Vranken &lt;guidovranken@gmail.com&gt; for reporting this issue.

Reviewed-by: Tim Hudson &lt;tjh@openssl.org&gt;
(cherry picked from commit 158e5207a794603f5d64ffa95e0247c7808ab445)

Conflicts:
	crypto/asn1/asn1_par.c
</content>
</entry>
<entry>
<title>Typo.</title>
<updated>2015-10-10T23:38:04Z</updated>
<author>
<name>Dr. Stephen Henson</name>
<email>steve@openssl.org</email>
</author>
<published>2015-10-10T23:06:56Z</published>
<link rel='alternate' type='text/html' href='http://git.bktus.com/gpgfrontend/openssl/commit/?id=d7ebdc2e98f7cc1df99fd7dd675bb6cfd6adb1ba'/>
<id>urn:sha1:d7ebdc2e98f7cc1df99fd7dd675bb6cfd6adb1ba</id>
<content type='text'>
PR#4079

Reviewed-by: Tim Hudson &lt;tjh@openssl.org&gt;
(cherry picked from commit c69ce9351336f5b4a8b33890756b3fd185528210)

Conflicts:
	crypto/evp/e_des3.c
</content>
</entry>
</feed>
