openssl, branch OpenSSL_1_0_0r

Prepare for 1.0.0r release

2015-03-19T13:43:00Z

Reviewed-by: Richard Levitte

make update

2015-03-19T13:43:00Z

Reviewed-by: Richard Levitte

Fix unsigned/signed warnings

2015-03-19T13:00:12Z

Fix some unsigned/signed warnings introduced as part of the fix for CVE-2015-0293 Reviewed-by: Tim Hudson Reviewed-by: Richard Levitte

Fix a failure to NULL a pointer freed on error.

2015-03-19T13:00:11Z

Reported by the LibreSSL project as a follow on to CVE-2015-0209 Reviewed-by: Richard Levitte

Update NEWS file

2015-03-19T13:00:11Z

Update the NEWS file with the latest entries from CHANGES ready for the release. Reviewed-by: Richard Levitte

Update CHANGES for release

2015-03-19T13:00:11Z

Update CHANGES fiel with all the latest fixes ready for the release. Reviewed-by: Richard Levitte

Remove overlapping CHANGES/NEWS entries

2015-03-19T13:00:11Z

Remove entries from CHANGES and NEWS from letter releases that occur *after* the next point release. Without this we get duplicate entries for the same issue appearing multiple times. Reviewed-by: Richard Levitte

Fix reachable assert in SSLv2 servers.

2015-03-19T13:00:11Z

This assert is reachable for servers that support SSLv2 and export ciphers. Therefore, such servers can be DoSed by sending a specially crafted SSLv2 CLIENT-MASTER-KEY. Also fix s2_srvr.c to error out early if the key lengths are malformed. These lengths are sent unencrypted, so this does not introduce an oracle. CVE-2015-0293 This issue was discovered by Sean Burford (Google) and Emilia Käsper of the OpenSSL development team. Reviewed-by: Richard Levitte Reviewed-by: Tim Hudson

PKCS#7: avoid NULL pointer dereferences with missing content

2015-03-19T13:00:11Z

In PKCS#7, the ASN.1 content component is optional. This typically applies to inner content (detached signatures), however we must also handle unexpected missing outer content correctly. This patch only addresses functions reachable from parsing, decryption and verification, and functions otherwise associated with reading potentially untrusted data. Correcting all low-level API calls requires further work. CVE-2015-0289 Thanks to Michal Zalewski (Google) for reporting this issue. Reviewed-by: Steve Henson

Fix ASN1_TYPE_cmp

2015-03-19T13:00:11Z

Fix segmentation violation when ASN1_TYPE_cmp is passed a boolean type. This can be triggered during certificate verification so could be a DoS attack against a client or a server enabling client authentication. CVE-2015-0286 Reviewed-by: Richard Levitte