generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Harmonize with OpenSSL_1_0_0-stable version of CHANGES.

Browse Source
This commit is contained in:
Bodo Möller 2010-08-26 11:21:49 +00:00
parent 308b9ad8f0
commit 4ecd2bafbb
1 changed files with 12 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
CHANGES
View File

@ -875,7 +875,10 @@
*) Change 'Configure' script to enable Camellia by default. *) Change 'Configure' script to enable Camellia by default.
[NTT] [NTT]
Changes between 0.9.8n and 0.9.8o [xx XXX xxxx] Changes between 0.9.8n and 0.9.8o [01 Jun 2010]
[NB: OpenSSL 0.9.8o and later 0.9.8 patch levels were released after
OpenSSL 1.0.0.]
*) Correct a typo in the CMS ASN1 module which can result in invalid memory *) Correct a typo in the CMS ASN1 module which can result in invalid memory
access or freeing data twice (CVE-2010-0742) access or freeing data twice (CVE-2010-0742)
@ -886,6 +889,12 @@
SSL_library_init and not OpenSSL_add_all_algorithms() will fail. SSL_library_init and not OpenSSL_add_all_algorithms() will fail.
[Steve Henson] [Steve Henson]
*) VMS fixes:
Reduce copying into .apps and .test in makevms.com
Don't try to use blank CA certificate in CA.com
Allow use of C files from original directories in maketests.com
[Steven M. Schweda" <sms@antinode.info>]
Changes between 0.9.8m and 0.9.8n [24 Mar 2010] Changes between 0.9.8m and 0.9.8n [24 Mar 2010]
*) When rejecting SSL/TLS records due to an incorrect version number, never *) When rejecting SSL/TLS records due to an incorrect version number, never
@ -894,8 +903,8 @@
- OpenSSL 0.9.8f if 'short' is longer than 16 bits, - OpenSSL 0.9.8f if 'short' is longer than 16 bits,
the previous behavior could result in a read attempt at NULL when the previous behavior could result in a read attempt at NULL when
receiving specific incorrect SSL/TLS records once record payload receiving specific incorrect SSL/TLS records once record payload
protection is active. (CVE-2010-####) protection is active. (CVE-2010-0740)
[Bodo Moeller, Adam Langley] [Bodo Moeller, Adam Langley <agl@chromium.org>]
*) Fix for CVE-2010-0433 where some kerberos enabled versions of OpenSSL *) Fix for CVE-2010-0433 where some kerberos enabled versions of OpenSSL
could be crashed if the relevant tables were not present (e.g. chrooted). could be crashed if the relevant tables were not present (e.g. chrooted).