<feed xmlns='http://www.w3.org/2005/Atom'>
<title>openssl, branch OpenSSL_1_0_2o</title>
<subtitle>TLS/SSL and crypto library.</subtitle>
<id>http://git.bktus.com/gpgfrontend/openssl/atom?h=OpenSSL_1_0_2o</id>
<link rel='self' href='http://git.bktus.com/gpgfrontend/openssl/atom?h=OpenSSL_1_0_2o'/>
<link rel='alternate' type='text/html' href='http://git.bktus.com/gpgfrontend/openssl/'/>
<updated>2018-03-27T13:55:22Z</updated>
<entry>
<title>Prepare for 1.0.2o release</title>
<updated>2018-03-27T13:55:22Z</updated>
<author>
<name>Matt Caswell</name>
<email>matt@openssl.org</email>
</author>
<published>2018-03-27T13:55:22Z</published>
<link rel='alternate' type='text/html' href='http://git.bktus.com/gpgfrontend/openssl/commit/?id=3ce7bc40a3c48da1c96c2d04c10045bd797c6aa3'/>
<id>urn:sha1:3ce7bc40a3c48da1c96c2d04c10045bd797c6aa3</id>
<content type='text'>
Reviewed-by: Richard Levitte &lt;levitte@openssl.org&gt;
</content>
</entry>
<entry>
<title>make update</title>
<updated>2018-03-27T13:55:22Z</updated>
<author>
<name>Matt Caswell</name>
<email>matt@openssl.org</email>
</author>
<published>2018-03-27T13:55:22Z</published>
<link rel='alternate' type='text/html' href='http://git.bktus.com/gpgfrontend/openssl/commit/?id=699a72a5e99f7da8825136f307e0b1831bc2d38a'/>
<id>urn:sha1:699a72a5e99f7da8825136f307e0b1831bc2d38a</id>
<content type='text'>
Reviewed-by: Richard Levitte &lt;levitte@openssl.org&gt;
</content>
</entry>
<entry>
<title>Update copyright year</title>
<updated>2018-03-27T12:46:45Z</updated>
<author>
<name>Matt Caswell</name>
<email>matt@openssl.org</email>
</author>
<published>2018-03-27T12:46:45Z</published>
<link rel='alternate' type='text/html' href='http://git.bktus.com/gpgfrontend/openssl/commit/?id=f8e9126449c37a4e4cb52eb8141ac875e14d6d3f'/>
<id>urn:sha1:f8e9126449c37a4e4cb52eb8141ac875e14d6d3f</id>
<content type='text'>
Reviewed-by: Richard Levitte &lt;levitte@openssl.org&gt;
</content>
</entry>
<entry>
<title>Update CHANGES and NEWS for the new release</title>
<updated>2018-03-27T12:33:09Z</updated>
<author>
<name>Matt Caswell</name>
<email>matt@openssl.org</email>
</author>
<published>2018-03-27T09:58:34Z</published>
<link rel='alternate' type='text/html' href='http://git.bktus.com/gpgfrontend/openssl/commit/?id=b621f604e9b52ce8f568b6d3677a19b1e862613a'/>
<id>urn:sha1:b621f604e9b52ce8f568b6d3677a19b1e862613a</id>
<content type='text'>
Reviewed-by: Richard Levitte &lt;levitte@openssl.org&gt;
</content>
</entry>
<entry>
<title>Limit ASN.1 constructed types recursive definition depth</title>
<updated>2018-03-26T14:38:38Z</updated>
<author>
<name>Matt Caswell</name>
<email>matt@openssl.org</email>
</author>
<published>2018-03-22T10:05:40Z</published>
<link rel='alternate' type='text/html' href='http://git.bktus.com/gpgfrontend/openssl/commit/?id=9310d45087ae546e27e61ddf8f6367f29848220d'/>
<id>urn:sha1:9310d45087ae546e27e61ddf8f6367f29848220d</id>
<content type='text'>
Constructed types with a recursive definition (such as can be found in
PKCS7) could eventually exceed the stack given malicious input with
excessive recursion. Therefore we limit the stack depth.

CVE-2018-0739

Credit to OSSFuzz for finding this issue.

Reviewed-by: Rich Salz &lt;rsalz@openssl.org&gt;
</content>
</entry>
<entry>
<title>Fix dsaparam -genkey with DER outform</title>
<updated>2018-03-26T13:14:27Z</updated>
<author>
<name>Bernd Edlinger</name>
<email>bernd.edlinger@hotmail.de</email>
</author>
<published>2018-03-25T10:50:17Z</published>
<link rel='alternate' type='text/html' href='http://git.bktus.com/gpgfrontend/openssl/commit/?id=3ffc95b1a9d14d8833f6f116a0afe0fb83eeaa17'/>
<id>urn:sha1:3ffc95b1a9d14d8833f6f116a0afe0fb83eeaa17</id>
<content type='text'>
Reviewed-by: Rich Salz &lt;rsalz@openssl.org&gt;
(Merged from https://github.com/openssl/openssl/pull/5744)

(cherry picked from commit 5281435258b5d8201a00b4a9781bb724d99630f0)
</content>
</entry>
<entry>
<title>Fix ecparam -genkey with point compression or DER outform</title>
<updated>2018-03-25T09:14:57Z</updated>
<author>
<name>Bernd Edlinger</name>
<email>bernd.edlinger@hotmail.de</email>
</author>
<published>2018-03-24T14:17:11Z</published>
<link rel='alternate' type='text/html' href='http://git.bktus.com/gpgfrontend/openssl/commit/?id=d591f300f9dfec4f8345b25714bdc85f0b30dfa1'/>
<id>urn:sha1:d591f300f9dfec4f8345b25714bdc85f0b30dfa1</id>
<content type='text'>
Reviewed-by: Rich Salz &lt;rsalz@openssl.org&gt;
(Merged from https://github.com/openssl/openssl/pull/5741)

(cherry picked from commit 4bdc25b07f007d9c383fbad159f81543f2e95965)
</content>
</entry>
<entry>
<title>The default conv_form is uncompressed</title>
<updated>2018-03-21T20:01:48Z</updated>
<author>
<name>Matt Caswell</name>
<email>matt@openssl.org</email>
</author>
<published>2018-03-21T16:27:55Z</published>
<link rel='alternate' type='text/html' href='http://git.bktus.com/gpgfrontend/openssl/commit/?id=42b291f30be846f50ad5a36dc9d7cbb3ad9c67e1'/>
<id>urn:sha1:42b291f30be846f50ad5a36dc9d7cbb3ad9c67e1</id>
<content type='text'>
Fixes #5711

Reviewed-by: Rich Salz &lt;rsalz@openssl.org&gt;
(Merged from https://github.com/openssl/openssl/pull/5712)

(cherry picked from commit ab0a3914a64d8f1fce22795c02269e1288df52b1)
</content>
</entry>
<entry>
<title>consttime flag changed</title>
<updated>2018-03-21T17:37:29Z</updated>
<author>
<name>Samuel Weiser</name>
<email>samuel.weiser@iaik.tugraz.at</email>
</author>
<published>2018-02-09T13:11:47Z</published>
<link rel='alternate' type='text/html' href='http://git.bktus.com/gpgfrontend/openssl/commit/?id=0d6710289307d277ebc3354105c965b6e8ba8eb0'/>
<id>urn:sha1:0d6710289307d277ebc3354105c965b6e8ba8eb0</id>
<content type='text'>
Reviewed-by: Rich Salz &lt;rsalz@openssl.org&gt;
Reviewed-by: Kurt Roeckx &lt;kurt@roeckx.be&gt;
Reviewed-by: Matt Caswell &lt;matt@openssl.org&gt;
(Merged from https://github.com/openssl/openssl/pull/5170)

(cherry picked from commit 7150a4720af7913cae16f2e4eaf768b578c0b298)
</content>
</entry>
<entry>
<title>used ERR set/pop mark</title>
<updated>2018-03-21T17:37:29Z</updated>
<author>
<name>Samuel Weiser</name>
<email>samuel.weiser@iaik.tugraz.at</email>
</author>
<published>2018-01-31T12:10:55Z</published>
<link rel='alternate' type='text/html' href='http://git.bktus.com/gpgfrontend/openssl/commit/?id=64eb614ccc7ccf30cc412b736f509f1d82bbf897'/>
<id>urn:sha1:64eb614ccc7ccf30cc412b736f509f1d82bbf897</id>
<content type='text'>
Reviewed-by: Rich Salz &lt;rsalz@openssl.org&gt;
Reviewed-by: Kurt Roeckx &lt;kurt@roeckx.be&gt;
Reviewed-by: Matt Caswell &lt;matt@openssl.org&gt;
(Merged from https://github.com/openssl/openssl/pull/5170)

(cherry picked from commit 011f82e66f4bf131c733fd41a8390039859aafb2)
</content>
</entry>
</feed>
