~nvalcarcel/ubuntu/lucid/openssl/openssl-merge : changes

~nvalcarcel/ubuntu/lucid/openssl/openssl-merge » Changes to fips from revision 39

From Revision 39

Rev		Summary	Authors	Tags	Date	Diff	Files
34		* Merge from debian unstable, remaining changes: * Merge from debian unstable, remaining changes: - Link using -Bsymbolic-functions - Add support for lpia - Disable SSLv2 during compile - Ship documentation in openssl-doc, suggested by the package. - Use a different priority for libssl0.9.8/restart-services depending on whether a desktop, or server dist-upgrade is being performed. - Display a system restart required notification bubble on libssl0.9.8 upgrade. - Replace duplicate files in the doc directory with symlinks. * Strip the patches out of the source into quilt patches * Disable SSL/TLS renegotiation (CVE-2009-3555) (Closes: #555829) * Don't check self signed certificate signatures in X509_verify_cert() (Closes: #541735) * Split all the patches into a separate files * Stop undefinging HZ, the issue on alpha should be fixed. * Remove MD2 from digest algorithm table. (CVE-2009-2409) (Closes: #539899) * Make rc4-x86_64 PIC. Based on patch from Petr Salinger (Closes: #532336) * Add workaround for kfreebsd that can't see the different between two pipes. Patch from Petr Salinger. * Move libssl0.9.8-dbg to the debug section. * Use the rc4 assembler on kfreebsd-amd64 (Closes: #532336) * Split the line to generate md5-x86_64.s in the Makefile. This will hopefully fix the build issue on kfreebsd that now outputs the file to stdout instead of the file. * Fix denial of service via an out-of-sequence DTLS handshake message (CVE-2009-1387) (Closes: #532037) * New upstream release - 0.9.8i fixed denial of service via a DTLS ChangeCipherSpec packet that occurs before ClientHello (CVE-2009-1386) * Make aes-x86_64.pl use PIC. * Fix security issues (Closes: #530400) - "DTLS record buffer limitation bug." (CVE-2009-1377) - "DTLS fragment handling" (CVE-2009-1378) - "DTLS use after free" (CVE-2009-1379) * Fixed Configure for hurd: use -mtune=i486 instead of -m486 Patch by Marc Dequènes (Duck) <duck@hurdfr.org> (Closes: #530459) * Add support for avr32 (Closes: #528648)	Nicolas Valcarcel Sc...		14 years ago
3		* really fix der_chop. The fix from -1 was not really includ... * really fix der_chop. The fix from -1 was not really included (closes: #281212) * still fixes security problem CAN-2004-0975 etc. - tempfile raise condition in der_chop - Avoid a race condition when CRLs are checked in a multi threaded environment.	Christoph Martin	0.9.7e-3	19 years ago