Mark J. Cox 951dfbb13a Introduce limits to prevent malicious keys being able to ...

cause a denial of service.  (CVE-2006-2940)
[Steve Henson, Bodo Moeller]

Fix ASN.1 parsing of certain invalid structures that can result
in a denial of service.  (CVE-2006-2937)  [Steve Henson]

Fix buffer overflow in SSL_get_shared_ciphers() function.
(CVE-2006-3738) [Tavis Ormandy and Will Drewry, Google Security Team]

Fix SSL client code which could crash if connecting to a
malicious SSLv2 server.  (CVE-2006-4343)
[Tavis Ormandy and Will Drewry, Google Security Team]

2006-09-28 11:29:03 +00:00

..

.cvsignore

Add emacs cache files to .cvsignore.

2005-04-11 14:17:07 +00:00

dh192.pem

Import of old SSLeay release: SSLeay 0.8.1b

1998-12-21 10:52:47 +00:00

dh512.pem

Import of old SSLeay release: SSLeay 0.8.1b

1998-12-21 10:52:47 +00:00

dh1024.pem

Import of old SSLeay release: SSLeay 0.8.1b

1998-12-21 10:52:47 +00:00

dh2048.pem

Import of old SSLeay release: SSLeay 0.8.1b

1998-12-21 10:52:47 +00:00

dh4096.pem

Import of old SSLeay release: SSLeay 0.8.1b

1998-12-21 10:52:47 +00:00

dh_asn1.c

Get rid of ASN1_ITEM_FUNCTIONS dummy function

2001-02-23 12:47:06 +00:00

dh_check.c

Avoid weak subgroups in Diffie Hellman.

2005-08-20 18:35:53 +00:00

dh_depr.c

When OPENSSL_NO_DEPRECATED is defined, deprecated functions are (or should

2003-10-29 04:06:50 +00:00

dh_err.c

Introduce limits to prevent malicious keys being able to

2006-09-28 11:29:03 +00:00

dh_gen.c

Fix various incorrect error function codes.

2005-04-26 18:53:22 +00:00

dh_key.c

Introduce limits to prevent malicious keys being able to

2006-09-28 11:29:03 +00:00

dh_lib.c

Add the possibility to build without the ENGINE framework.

2003-01-30 17:39:26 +00:00

dh.h

Introduce limits to prevent malicious keys being able to

2006-09-28 11:29:03 +00:00

dhtest.c

Implement fixed-window exponentiation to mitigate hyper-threading

2005-05-16 01:43:31 +00:00

example

Import of old SSLeay release: SSLeay 0.8.1b

1998-12-21 10:52:47 +00:00

generate

Import of old SSLeay release: SSLeay 0.8.1b

1998-12-21 10:52:47 +00:00

Makefile

Update filenames in makefiles

2006-02-04 01:49:36 +00:00

p192.c

Change #include filenames from <foo.h> to <openssl.h>.

1999-04-23 22:13:45 +00:00

p512.c

Change #include filenames from <foo.h> to <openssl.h>.

1999-04-23 22:13:45 +00:00

p1024.c

Change #include filenames from <foo.h> to <openssl.h>.

1999-04-23 22:13:45 +00:00