pkgsrc/security/openssl/patches
taca 1cb789fb37 Update openssl package to 0.9.8l, fixing security problem.
Approved by agc@.


Changes between 0.9.8k and 0.9.8l  [5 Nov 2009]

 *) Disable renegotiation completely - this fixes a severe security
    problem (CVE-2009-3555) at the cost of breaking all
    renegotiation. Renegotiation can be re-enabled by setting
    SSL3_FLAGS_ALLOW_UNSAFE_LEGACY_RENEGOTIATION in s3->flags at
    run-time. This is really not recommended unless you know what
    you're doing.
    [Ben Laurie]
2010-01-15 04:55:30 +00:00
..
patch-aa Update openssl package to 0.9.8l, fixing security problem. 2010-01-15 04:55:30 +00:00
patch-ac Update openssl package to 0.9.8l, fixing security problem. 2010-01-15 04:55:30 +00:00
patch-ad Update to openssl-0.9.8g. Provided by Jukka Salmi in pkgsrc-wip. 2008-01-17 06:42:47 +00:00
patch-ae Update to openssl-0.9.8g. Provided by Jukka Salmi in pkgsrc-wip. 2008-01-17 06:42:47 +00:00
patch-af Update openssl package to 0.9.8l, fixing security problem. 2010-01-15 04:55:30 +00:00
patch-ag Link shared libraries with -rpath on IRIX to prevent check-shlibs errors. 2008-02-20 01:10:20 +00:00
patch-ak Update to openssl-0.9.8g. Provided by Jukka Salmi in pkgsrc-wip. 2008-01-17 06:42:47 +00:00
patch-al Update to openssl-0.9.8g. Provided by Jukka Salmi in pkgsrc-wip. 2008-01-17 06:42:47 +00:00
patch-ax Patches for CVE-2009-1377, CVE-2009-1378 & CVE-2009-1379 from 2009-06-10 13:57:08 +00:00
patch-ay Patches for CVE-2009-1377, CVE-2009-1378 & CVE-2009-1379 from 2009-06-10 13:57:08 +00:00
patch-az Patches for CVE-2009-1377, CVE-2009-1378 & CVE-2009-1379 from 2009-06-10 13:57:08 +00:00
patch-ba Patches for CVE-2009-1377, CVE-2009-1378 & CVE-2009-1379 from 2009-06-10 13:57:08 +00:00