openssl, branch OpenSSL_1_0_2e

Prepare for 1.0.2e release

2015-12-03T14:44:31Z

Reviewed-by: Richard Levitte

make update

2015-12-03T14:44:31Z

Reviewed-by: Richard Levitte

Update CHANGES and NEWS

2015-12-03T14:32:05Z

Update the CHANGES and NEWS files for the new release. Reviewed-by: Richard Levitte

Add test for CVE-2015-3194

2015-12-03T14:32:05Z

Reviewed-by: Richard Levitte

Add PSS parameter check.

2015-12-03T14:32:05Z

Avoid seg fault by checking mgf1 parameter is not NULL. This can be triggered during certificate verification so could be a DoS attack against a client or a server enabling client authentication. Thanks to Loïc Jonas Etienne (Qnective AG) for discovering this bug. CVE-2015-3194 Reviewed-by: Richard Levitte

bn/asm/x86_64-mont5.pl: fix carry propagating bug (CVE-2015-3193).

2015-12-03T14:32:05Z

Reviewed-by: Richard Levitte (cherry picked from commit e7c078db57908cbf16074c68034977565ffaf107)

Fix leak with ASN.1 combine.

2015-12-03T14:32:05Z

When parsing a combined structure pass a flag to the decode routine so on error a pointer to the parent structure is not zeroed as this will leak any additional components in the parent. This can leak memory in any application parsing PKCS#7 or CMS structures. CVE-2015-3195. Thanks to Adam Langley (Google/BoringSSL) for discovering this bug using libFuzzer. PR#4131 Reviewed-by: Richard Levitte

Add cleanup of *.s

2015-12-03T14:20:10Z

Reviewed-by: Matt Caswell

perlasm/ppc-xlate.pl: comply with ABIs that specify vrsave as reserved.

2015-12-03T12:31:36Z

RT#4162 Reviewed-by: Richard Levitte (cherry picked from commit b5516cfbd65de9331d827012fc5bdace1953613e)

_BSD_SOURCE is deprecated, use _DEFAULT_SOURCE instead

2015-12-02T17:49:28Z

The feature_test_macros(7) manual tells us that _BSD_SOURCE is deprecated since glibc 2.20 and that the compiler will warn about it being used, unless _DEFAULT_SOURCE is defined as well. Reviewed-by: Rich Salz (cherry picked from commit f9fd35248c9a3b1125d9ab82ffb19d62e86533ac)