openssl/crypto, branch OpenSSL_1_0_2e TLS/SSL and crypto library. http://git.bktus.com/gpgfrontend/openssl/atom?h=OpenSSL_1_0_2e 2015-12-03T14:44:31Z Prepare for 1.0.2e release 2015-12-03T14:44:31Z Matt Caswell matt@openssl.org 2015-12-03T14:44:31Z urn:sha1:bfe07df40c13ea2564bb4577620180e3f4849e23 Reviewed-by: Richard Levitte <levitte@openssl.org> Add PSS parameter check. 2015-12-03T14:32:05Z Dr. Stephen Henson steve@openssl.org 2015-10-02T11:35:19Z urn:sha1:c394a488942387246653833359a5c94b5832674e Avoid seg fault by checking mgf1 parameter is not NULL. This can be triggered during certificate verification so could be a DoS attack against a client or a server enabling client authentication. Thanks to Loïc Jonas Etienne (Qnective AG) for discovering this bug. CVE-2015-3194 Reviewed-by: Richard Levitte <levitte@openssl.org> bn/asm/x86_64-mont5.pl: fix carry propagating bug (CVE-2015-3193). 2015-12-03T14:32:05Z Andy Polyakov appro@openssl.org 2015-12-01T08:00:32Z urn:sha1:d73cc256c8e256c32ed959456101b73ba9842f72 Reviewed-by: Richard Levitte <levitte@openssl.org> (cherry picked from commit e7c078db57908cbf16074c68034977565ffaf107) Fix leak with ASN.1 combine. 2015-12-03T14:32:05Z Dr. Stephen Henson steve@openssl.org 2015-11-10T19:03:07Z urn:sha1:cc598f321fbac9c04da5766243ed55d55948637d When parsing a combined structure pass a flag to the decode routine so on error a pointer to the parent structure is not zeroed as this will leak any additional components in the parent. This can leak memory in any application parsing PKCS#7 or CMS structures. CVE-2015-3195. Thanks to Adam Langley (Google/BoringSSL) for discovering this bug using libFuzzer. PR#4131 Reviewed-by: Richard Levitte <levitte@openssl.org> Add cleanup of *.s 2015-12-03T14:20:10Z Richard Levitte levitte@openssl.org 2015-12-03T14:20:10Z urn:sha1:fb4f46763fed3c600db21974577061b611b6fa46 Reviewed-by: Matt Caswell <matt@openssl.org> perlasm/ppc-xlate.pl: comply with ABIs that specify vrsave as reserved. 2015-12-03T12:31:36Z Andy Polyakov appro@openssl.org 2015-12-02T13:32:08Z urn:sha1:babe434c99251cd1e3c84d6906f579509343186c RT#4162 Reviewed-by: Richard Levitte <levitte@openssl.org> (cherry picked from commit b5516cfbd65de9331d827012fc5bdace1953613e) crypto/sparcv9cap.c: add SIGILL-free feature detection for Solaris. 2015-12-02T09:56:27Z Andy Polyakov appro@openssl.org 2015-12-01T11:21:08Z urn:sha1:15c62b0dfde7bab80a404bf544c25eb7a8322fe4 Reviewed-by: Rich Salz <rsalz@openssl.org> (cherry picked from commit 2238e0e45d03ec9ba15e9547f7739cc6987a8f57) x86_64 assembly pack: tune clang version detection. 2015-11-30T12:37:39Z Andy Polyakov appro@openssl.org 2015-11-21T10:32:05Z urn:sha1:301a6dcd4590fb2f69d08259577e215b4cc3caa3 RT#4142 Reviewed-by: Richard Levitte <levitte@openssl.org> (cherry picked from commit 76eba0d94bb418325be6409b272eac5e2bd4a0a9) Resolved conflicts: crypto/bn/asm/x86_64-mont.pl crypto/bn/asm/x86_64-mont5.pl Reviewed-by: Kurt Roeckx <kurt@openssl.org> Use both sun and __sun 2015-11-24T22:44:05Z Kurt Roeckx kurt@roeckx.be 2015-11-24T22:21:06Z urn:sha1:ed02493567390cac6d07447f193fcaac5b219af3 Reviewed-by: Andy Polyakov <appro@openssl.org> mark openssl configuration as loaded at end of OPENSSL_config 2015-11-24T21:05:10Z Marcus Meissner meissner@suse.de 2015-11-24T21:03:58Z urn:sha1:296f7bd1ace9383648795b24bf2f3c10d0b9ca47 Signed-off-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Rich Salz <rsalz@akamai.com> GH: #466 (cherry picked from commit 434b58457c8cca4d09f77a1774d6d2c446604bae)