taca 021760c273 Update openssl pacakge to 0.9.8u. ... Changes between 0.9.8t and 0.9.8u [12 Mar 2012] *) Fix MMA (Bleichenbacher's attack on PKCS #1 v1.5 RSA padding) weakness in CMS and PKCS7 code. When RSA decryption fails use a random key for content decryption and always return the same error. Note: this attack needs on average 2^20 messages so it only affects automated senders. The old behaviour can be reenabled in the CMS code by setting the CMS_DEBUG_DECRYPT flag: this is useful for debugging and testing where an MMA defence is not necessary. Thanks to Ivan Nestlerode <inestlerode@us.ibm.com> for discovering this issue. (CVE-2012-0884) [Steve Henson] *) Fix CVE-2011-4619: make sure we really are receiving a client hello before rejecting multiple SGC restarts. Thanks to Ivan Nestlerode <inestlerode@us.ibm.com> for discovering this bug. [Steve Henson]		2012-03-13 03:11:32 +00:00
..
patch-aa	Recognize 64 bit DragonFly systems correctly. From Damian Lubosch	2010-08-18 11:20:55 +00:00
patch-ac	Update openssl to 0.9.8m.	2010-02-26 03:15:13 +00:00
patch-ad
patch-ae
patch-af	Update openssl to 0.9.8m.	2010-02-26 03:15:13 +00:00
patch-ag
patch-ak
patch-al