openssl, branch OpenSSL_1_0_2b

Prepare for 1.0.2b release

2015-06-11T13:55:38Z

Reviewed-by: Stephen Henson

make update

2015-06-11T13:55:38Z

Reviewed-by: Stephen Henson

bn/bn_gf2m.c: avoid infinite loop wich malformed ECParamters.

2015-06-11T13:52:39Z

CVE-2015-1788 Reviewed-by: Matt Caswell (cherry picked from commit 4924b37ee01f71ae19c94a8934b80eeb2f677932)

Update CHANGES and NEWS

2015-06-11T13:52:39Z

Updates to CHANGES and NEWS to take account of the latest security fixes. Reviewed-by: Rich Salz

PKCS#7: Fix NULL dereference with missing EncryptedContent.

2015-06-11T13:52:39Z

CVE-2015-1790 Reviewed-by: Rich Salz

Fix length checks in X509_cmp_time to avoid out-of-bounds reads.

2015-06-11T13:52:39Z

Also tighten X509_cmp_time to reject more than three fractional seconds in the time; and to reject trailing garbage after the offset. CVE-2015-1789 Reviewed-by: Viktor Dukhovni Reviewed-by: Richard Levitte

Fix infinite loop in CMS

2015-06-11T13:52:39Z

Fix loop in do_free_upto if cmsbio is NULL: this will happen when attempting to verify and a digest is not recognised. Reported by Johannes Bauer. CVE-2015-1792 Reviewed-by: Matt Caswell

make update

2015-06-11T13:51:16Z

Reviewed-by: Matt Caswell

Correction of make depend merge error

2015-06-11T13:51:16Z

$(PROGS) was mistakenly removed, adding it back. Reviewed-by: Matt Caswell

More ssl_session_dup fixes

2015-06-11T09:04:00Z

Fix error handling in ssl_session_dup, as well as incorrect setting up of the session ticket. Follow on from CVE-2015-1791. Thanks to LibreSSL project for reporting these issues. Conflicts: ssl/ssl_sess.c Reviewed-by: Tim Hudson