Module Name:	basesrc
Committed By:	itojun
Date:		Tue Jul 30 12:55:11 UTC 2002

Modified Files:
	basesrc/crypto: Makefile.openssl
	basesrc/crypto/dist/openssl: CHANGES
	basesrc/crypto/dist/openssl/crypto: cryptlib.c cryptlib.h
	basesrc/crypto/dist/openssl/crypto/asn1: asn1_lib.c
	basesrc/crypto/dist/openssl/crypto/conf: conf_def.c
	basesrc/crypto/dist/openssl/crypto/objects: obj_dat.c
	basesrc/crypto/dist/openssl/ssl: s2_clnt.c s2_lib.c s2_srvr.c s3_clnt.c
	    s3_srvr.c ssl.h ssl_asn1.c ssl_err.c ssl_sess.c

Log Message:
apply patch supplied with OpenSSL Security Advisory [30 July 2002]

advisory 1: four potentially remotely-exploitable vulnerability in
SSL2/SSL3 code
advisory 2: ASN1 parser vulnerability (all SSL/TLS apps affected)


To generate a diff of this commit:
cvs rdiff -r1.6 -r1.7 basesrc/crypto/Makefile.openssl
cvs rdiff -r1.1.1.5 -r1.2 basesrc/crypto/dist/openssl/CHANGES
cvs rdiff -r1.1.1.5 -r1.2 basesrc/crypto/dist/openssl/crypto/cryptlib.c
cvs rdiff -r1.1.1.2 -r1.2 basesrc/crypto/dist/openssl/crypto/cryptlib.h
cvs rdiff -r1.1.1.3 -r1.2 basesrc/crypto/dist/openssl/crypto/asn1/asn1_lib.c
cvs rdiff -r1.1.1.1 -r1.2 basesrc/crypto/dist/openssl/crypto/conf/conf_def.c
cvs rdiff -r1.1.1.4 -r1.2 \
    basesrc/crypto/dist/openssl/crypto/objects/obj_dat.c
cvs rdiff -r1.1.1.4 -r1.2 basesrc/crypto/dist/openssl/ssl/s2_clnt.c \
    basesrc/crypto/dist/openssl/ssl/s3_clnt.c \
    basesrc/crypto/dist/openssl/ssl/ssl_err.c \
    basesrc/crypto/dist/openssl/ssl/ssl_sess.c
cvs rdiff -r1.2 -r1.3 basesrc/crypto/dist/openssl/ssl/s2_lib.c
cvs rdiff -r1.1.1.5 -r1.2 basesrc/crypto/dist/openssl/ssl/s2_srvr.c \
    basesrc/crypto/dist/openssl/ssl/s3_srvr.c
cvs rdiff -r1.4 -r1.5 basesrc/crypto/dist/openssl/ssl/ssl.h
cvs rdiff -r1.1.1.3 -r1.2 basesrc/crypto/dist/openssl/ssl/ssl_asn1.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.