b982de4e94
Security fix for CVS-2012-2131. Changes between 0.9.8v and 0.9.8w [23 Apr 2012] *) The fix for CVE-2012-2110 did not take into account that the 'len' argument to BUF_MEM_grow and BUF_MEM_grow_clean is an int in OpenSSL 0.9.8, making it still vulnerable. Fix by rejecting negative len parameter. (CVE-2012-2131) [Tomas Hoger <thoger@redhat.com>] |
||
---|---|---|
.. | ||
patches | ||
buildlink3.mk | ||
builtin.mk | ||
DESCR | ||
distinfo | ||
Makefile | ||
MESSAGE.SunOS | ||
options.mk | ||
PLIST.common | ||
PLIST.darwin | ||
PLIST.osf1 | ||
PLIST.shlib |