| #
337982 |
|
17-Aug-2018 |
jkim |
MFC: r337791
Merge OpenSSL 1.0.2p.
|
| #
325335 |
|
02-Nov-2017 |
jkim |
MFC: r318899
Merge OpenSSL 1.0.2l.
|
| #
306195 |
|
22-Sep-2016 |
jkim |
MFC: r306193
Merge OpenSSL 1.0.2u.
|
| #
302408 |
|
07-Jul-2016 |
gjb |
Copy head@r302406 to stable/11 as part of the 11.0-RELEASE cycle.
Prune svn:mergeinfo from the new branch, as nothing has been merged
here.
Additional commits post-branch will follow.
Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation |
| #
298998 |
|
03-May-2016 |
jkim |
Merge OpenSSL 1.0.2h.
Relnotes: yes
|
| #
295009 |
|
28-Jan-2016 |
jkim |
Merge OpenSSL 1.0.2f.
Relnotes: yes
|
| #
291719 |
|
03-Dec-2015 |
jkim |
Merge OpenSSL 1.0.2e.
|
| #
290207 |
|
30-Oct-2015 |
jkim |
Merge OpenSSL 1.0.2d.
|
| #
284283 |
|
11-Jun-2015 |
jkim |
Merge OpenSSL 1.0.1n.
|
| #
280297 |
|
20-Mar-2015 |
jkim |
Merge OpenSSL 1.0.1m.
|
| #
276861 |
|
08-Jan-2015 |
jkim |
Merge OpenSSL 1.0.1k.
|
| #
273144 |
|
15-Oct-2014 |
jkim |
Merge OpenSSL 1.0.1j.
|
| #
269682 |
|
07-Aug-2014 |
jkim |
Merge OpenSSL 1.0.1i.
|
| #
267256 |
|
09-Jun-2014 |
jkim |
Merge OpenSSL 1.0.1h.
Approved by: so (delphij)
|
| #
267102 |
|
05-Jun-2014 |
delphij |
Fix OpenSSL multiple vulnerabilities.
Security: CVE-2014-0195, CVE-2014-0221, CVE-2014-0224,
CVE-2014-3470
Security: SA-14:14.openssl
Approved by: so
|
| #
264265 |
|
08-Apr-2014 |
delphij |
Fix NFS deadlock vulnerability. [SA-14:05]
Fix "Heartbleed" vulnerability and ECDSA Cache Side-channel
Attack in OpenSSL. [SA-14:06]
|
| #
261037 |
|
22-Jan-2014 |
jkim |
Merge OpenSSL 1.0.1f.
Approved by: so (delphij), benl (silence)
|
| #
260403 |
|
07-Jan-2014 |
delphij |
MFV r260399:
Apply vendor commits:
197e0ea Fix for TLS record tampering bug. (CVE-2013-4353).
3462896 For DTLS we might need to retransmit messages from the
previous session so keep a copy of write context in DTLS
retransmission buffers instead of replacing it after
sending CCS. (CVE-2013-6450).
ca98926 When deciding whether to use TLS 1.2 PRF and record hash
algorithms use the version number in the corresponding
SSL_METHOD structure instead of the SSL structure. The
SSL structure version is sometimes inaccurate.
Note: OpenSSL 1.0.2 and later effectively do this already.
(CVE-2013-6449).
Security: CVE-2013-4353
Security: CVE-2013-6449
Security: CVE-2013-6450
|
| #
238405 |
|
12-Jul-2012 |
jkim |
Merge OpenSSL 1.0.1c.
Approved by: benl (maintainer)
|
| #
237657 |
|
27-Jun-2012 |
jkim |
Merge OpenSSL 0.9.8x.
Reviewed by: stas
Approved by: benl (maintainer)
MFC after: 3 days
|
| #
215697 |
|
22-Nov-2010 |
simon |
Merge OpenSSL 0.9.8p into head.
Security: CVE-2010-3864
Security: http://www.openssl.org/news/secadv_20101116.txt
|
| #
205128 |
|
13-Mar-2010 |
simon |
Merge OpenSSL 0.9.8m into head.
This also "reverts" some FreeBSD local changes so we should now
be back to using entirely stock OpenSSL. The local changes were
simple $FreeBSD$ lines additions, which were required in the CVS
days, and the patch for FreeBSD-SA-09:15.ssl which has been
superseded with OpenSSL 0.9.8m's RFC5746 'TLS renegotiation
extension' support.
MFC after: 3 weeks
|
| #
196474 |
|
23-Aug-2009 |
simon |
Merge DTLS fixes from vendor-crypto/openssl/dist:
- Fix memory consumption bug with "future epoch" DTLS records.
- Fix fragment handling memory leak.
- Do not access freed data structure.
- Fix DTLS fragment bug - out-of-sequence message handling which could
result in NULL pointer dereference in
dtls1_process_out_of_seq_message().
Note that this will not get FreeBSD Security Advisory as DTLS is
experimental in OpenSSL.
MFC after: 1 week
Security: CVE-2009-1377 CVE-2009-1378 CVE-2009-1379 CVE-2009-1387
|
| #
194206 |
|
14-Jun-2009 |
simon |
Merge OpenSSL 0.9.8k into head.
Approved by: re
|
| #
172768 |
|
18-Oct-2007 |
simon |
This commit was generated by cvs2svn to compensate for changes in r172767,
which included commits to RCS files with non-trunk default branches.
|
| #
172767 |
|
18-Oct-2007 |
simon |
Import DTLS security fix from upstream OpenSSL_0_9_8-stable branch.
From the OpenSSL advisory:
Andy Polyakov discovered a flaw in OpenSSL's DTLS
implementation which could lead to the compromise of clients
and servers with DTLS enabled.
DTLS is a datagram variant of TLS specified in RFC 4347 first
supported in OpenSSL version 0.9.8. Note that the
vulnerabilities do not affect SSL and TLS so only clients and
servers explicitly using DTLS are affected.
We believe this flaw will permit remote code execution.
Security: CVE-2007-4995
Security: http://www.openssl.org/news/secadv_20071012.txt
|
| #
160814 |
|
29-Jul-2006 |
simon |
Vendor import of OpenSSL 0.9.8b
|