Source-Changes archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

CVS commit: [netbsd-5] src/crypto/dist/openssl/ssl

Module Name:    src
Committed By:   bouyer
Date:           Fri Dec 10 21:42:16 UTC 2010

Modified Files:
        src/crypto/dist/openssl/ssl [netbsd-5]: s3_clnt.c s3_srvr.c

Log Message:
Pull up following revision(s) (requested by drochner in ticket #1509):
        crypto/external/bsd/openssl/dist/ssl/s3_srvr.c: revision 1.6 via patch
        crypto/external/bsd/openssl/dist/ssl/s3_clnt.c: revision 1.3 via patch
openssl security patch of the day:
Fix a flaw in the OpenSSL SSL/TLS server code where an old bug
workaround allows malicous clients to modify the stored session cache
ciphersuite. In some cases the ciphersuite can be downgraded to a weaker one
on subsequent connections. See

To generate a diff of this commit:
cvs rdiff -u -r1.12.4.2 -r1.12.4.3 src/crypto/dist/openssl/ssl/s3_clnt.c
cvs rdiff -u -r1.15.4.3 -r1.15.4.4 src/crypto/dist/openssl/ssl/s3_srvr.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Home | Main Index | Thread Index | Old Index