openssl, branch OpenSSL_1_0_0p

Prepare for 1.0.0p release

2015-01-08T14:21:42Z

Reviewed-by: Stephen Henson

make update

2015-01-08T14:21:42Z

Reviewed-by: Stephen Henson

CHANGES and NEWS updates for release

2015-01-08T14:14:56Z

Reviewed-by: Tim Hudson Reviewed-by: Steve Henson

A memory leak can occur in dtls1_buffer_record if either of the calls to

2015-01-08T14:14:56Z

ssl3_setup_buffers or pqueue_insert fail. The former will fail if there is a malloc failure, whilst the latter will fail if attempting to add a duplicate record to the queue. This should never happen because duplicate records should be detected and dropped before any attempt to add them to the queue. Unfortunately records that arrive that are for the next epoch are not being recorded correctly, and therefore replays are not being detected. Additionally, these "should not happen" failures that can occur in dtls1_buffer_record are not being treated as fatal and therefore an attacker could exploit this by sending repeated replay records for the next epoch, eventually causing a DoS through memory exhaustion. Thanks to Chris Mueller for reporting this issue and providing initial analysis and a patch. Further analysis and the final patch was performed by Matt Caswell from the OpenSSL development team. CVE-2015-0206 Reviewed-by: Dr Stephen Henson (cherry picked from commit 652ff0f4796eecd8729b4690f2076d1c7ccb2862)

Unauthenticated DH client certificate fix.

2015-01-08T14:14:56Z

Fix to prevent use of DH client certificates without sending certificate verify message. If we've used a client certificate to generate the premaster secret ssl3_get_client_key_exchange returns 2 and ssl3_get_cert_verify is never called. We can only skip the certificate verify message in ssl3_get_cert_verify if the client didn't send a certificate. Thanks to Karthikeyan Bhargavan for reporting this issue. CVE-2015-0205 Reviewed-by: Matt Caswell

Follow on from CVE-2014-3571. This fixes the code that was the original source

2015-01-08T14:14:29Z

of the crash due to p being NULL. Steve's fix prevents this situation from occuring - however this is by no means obvious by looking at the code for dtls1_get_record. This fix just makes things look a bit more sane. Conflicts: ssl/d1_pkt.c Reviewed-by: Dr Stephen Henson

Fix crash in dtls1_get_record whilst in the listen state where you get two

2015-01-08T11:25:45Z

separate reads performed - one for the header and one for the body of the handshake record. CVE-2014-3571 Reviewed-by: Matt Caswell

Fix for CVE-2014-3570.

2015-01-08T11:25:45Z

Reviewed-by: Emilia Kasper

fix error discrepancy

2015-01-07T18:11:07Z

Reviewed-by: Matt Caswell (cherry picked from commit 4a4d4158572fd8b3dc641851b8378e791df7972d)

use correct credit in CHANGES

2015-01-06T22:41:45Z

Reviewed-by: Matt Caswell (cherry picked from commit 4138e3882556c762d77eb827b8be98507cde48df)